x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:46 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:46 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:46 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:41:46 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 163.817498] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:41:46 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000014900)) 19:41:46 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:46 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000014900)) [ 163.888649] ip6t_REJECT: TCP_RESET illegal for non-tcp 19:41:46 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:47 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:41:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:47 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:41:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000014900)) 19:41:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:47 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000014900)) [ 164.673992] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 164.708217] ip6t_REJECT: TCP_RESET illegal for non-tcp 19:41:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 164.721608] f2fs_msg: 284 callbacks suppressed [ 164.721616] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 164.744351] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock 19:41:47 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 164.768778] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 164.783062] F2FS-fs (loop1): Unable to read 1th superblock [ 164.805023] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) 19:41:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 164.820051] F2FS-fs (loop1): Unable to read 2th superblock [ 164.828850] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 164.849803] F2FS-fs (loop1): Unable to read 1th superblock [ 164.857612] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 164.859014] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 19:41:47 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:41:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000014900)) [ 164.866787] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 165.026693] print_req_error: I/O error, dev loop1, sector 0 [ 165.032494] Buffer I/O error on dev loop1, logical block 0, async page read 19:41:47 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:41:47 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, 0x0) 19:41:47 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:41:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}], 0x0, &(0x7f0000014900)) 19:41:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:47 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:41:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, 0x0) 19:41:47 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) [ 165.541160] ip6t_REJECT: TCP_RESET illegal for non-tcp 19:41:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0}], 0x0, &(0x7f0000014900)) [ 165.624446] nla_parse: 2 callbacks suppressed [ 165.624453] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:41:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:48 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:41:48 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, 0x0) 19:41:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0}], 0x0, &(0x7f0000014900)) 19:41:48 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:41:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:48 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:41:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 166.355641] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 166.379788] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:41:48 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0}], 0x0, &(0x7f0000014900)) [ 166.512362] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:41:48 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:41:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r4, 0x0) write$P9_RSTAT(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:49 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) 19:41:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e00000002", 0x35, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) [ 166.614792] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:41:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r4, 0x0) write$P9_RSTAT(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 166.670263] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 19:41:49 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:41:49 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:41:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e00000002", 0x35, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r4, 0x0) write$P9_RSTAT(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:49 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:41:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e00000002", 0x35, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 167.201475] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 19:41:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 167.274875] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:41:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e000000020000000200000002000000020000001600000000040000000400", 0x4f, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 167.346847] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:41:50 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:41:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:50 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:41:50 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:41:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, 0xffffffffffffffff, 0xb000) socket$netlink(0x10, 0x3, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r3, 0x0) write$P9_RSTAT(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e000000020000000200000002000000020000001600000000040000000400", 0x4f, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, 0xffffffffffffffff, 0xb000) socket$netlink(0x10, 0x3, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r3, 0x0) write$P9_RSTAT(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e000000020000000200000002000000020000001600000000040000000400", 0x4f, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) [ 168.047818] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 168.066398] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:41:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, 0xffffffffffffffff, 0xb000) socket$netlink(0x10, 0x3, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r3, 0x0) write$P9_RSTAT(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:50 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 168.127714] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:41:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) [ 168.208377] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:41:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:41:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r2, 0xb000) socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r4, 0x0) write$P9_RSTAT(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c000000100000", 0x5c, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:51 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:41:51 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e00000002", 0x35, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r2, 0xb000) socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r4, 0x0) write$P9_RSTAT(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:51 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) [ 168.893730] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 168.924627] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:41:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c000000100000", 0x5c, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:51 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:41:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r2, 0xb000) socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r4, 0x0) write$P9_RSTAT(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:41:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c000000100000", 0x5c, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r2, 0xb000) socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r4, 0x0) write$P9_RSTAT(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:51 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:41:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r2, 0xb000) socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r4, 0x0) write$P9_RSTAT(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:51 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8}]}, 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) [ 169.142726] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:41:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000", 0x63, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:41:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r2, 0xb000) socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r4, 0x0) write$P9_RSTAT(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:51 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8}]}, 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) [ 169.274396] IPv6: ADDRCONF(NETDEV_UP): vlan2: link is not ready 19:41:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:41:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000", 0x63, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:51 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r2, 0xb000) socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r4, 0x0) write$P9_RSTAT(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 169.415951] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:41:51 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:41:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e00000002", 0x35, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:51 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:41:51 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r2, 0xb000) socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r4, 0x0) write$P9_RSTAT(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:51 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8}]}, 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) 19:41:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000", 0x63, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:51 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r2, 0xb000) socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r4, 0x0) write$P9_RSTAT(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 169.549532] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:41:52 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:41:52 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e00000002", 0x35, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100", 0x66, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:52 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 169.644346] IPv6: ADDRCONF(NETDEV_UP): vlan2: link is not ready 19:41:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r2, 0xb000) socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r4, 0x0) write$P9_RSTAT(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 169.706980] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 169.733920] f2fs_msg: 266 callbacks suppressed [ 169.733928] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 169.748174] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(0) root(3) [ 169.781254] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 169.789076] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 169.803041] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 169.806067] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 169.810886] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 169.826741] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(0) root(3) [ 169.835205] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 169.843048] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 19:41:52 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:41:52 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, 0x0, 0x0) 19:41:52 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:41:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r2, 0xb000) socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r4, 0x0) write$P9_RSTAT(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100", 0x66, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:52 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e00000002", 0x35, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r2, 0xb000) socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r4, 0x0) write$P9_RSTAT(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100", 0x66, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) [ 169.996865] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:41:52 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, 0x0, 0x0) 19:41:52 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e000000020000000200000002000000020000001600000000040000000400", 0x4f, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:52 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:41:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r2, 0xb000) socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r4, 0x0) write$P9_RSTAT(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 170.097400] IPv6: ADDRCONF(NETDEV_UP): vlan2: link is not ready 19:41:52 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040), 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:52 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, 0x0, 0x0) 19:41:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c000000100000001400000300000001000000", 0x68, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:52 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e000000020000000200000002000000020000001600000000040000000400", 0x4f, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r2, 0xb000) socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r4, 0x0) write$P9_RSTAT(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:52 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) 19:41:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r2, 0xb000) socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r4, 0x0) write$P9_RSTAT(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c000000100000001400000300000001000000", 0x68, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:52 executing program 5: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:41:52 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) 19:41:52 executing program 0 (fault-call:3 fault-nth:0): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:41:52 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e000000020000000200000002000000020000001600000000040000000400", 0x4f, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) [ 170.515553] FAULT_INJECTION: forcing a failure. [ 170.515553] name failslab, interval 1, probability 0, space 0, times 1 [ 170.527092] CPU: 1 PID: 13641 Comm: syz-executor.0 Not tainted 4.14.210-syzkaller #0 [ 170.534977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.544333] Call Trace: [ 170.546928] dump_stack+0x1b2/0x283 [ 170.550339] IPv6: ADDRCONF(NETDEV_UP): vlan2: link is not ready [ 170.550557] should_fail.cold+0x10a/0x154 [ 170.560751] should_failslab+0xd6/0x130 19:41:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c000000100000001400000300000001000000", 0x68, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) [ 170.564733] kmem_cache_alloc+0x40/0x3c0 [ 170.568796] __inet_hash_connect+0x61b/0xbf0 [ 170.573211] ? inet6_lookup+0x150/0x150 [ 170.577191] ? inet_hash+0x90/0x90 [ 170.580733] ? lock_acquire+0x170/0x3f0 [ 170.584719] tcp_v6_connect+0x1246/0x1ad0 [ 170.588880] ? tcp_v6_init_seq+0x170/0x170 [ 170.593126] ? trace_hardirqs_on+0x10/0x10 [ 170.597363] ? get_pid_task+0x91/0x130 [ 170.601243] ? trace_hardirqs_on+0x10/0x10 [ 170.605610] __inet_stream_connect+0x6ad/0xb90 19:41:53 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r2, 0xb000) socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r4, 0x0) write$P9_RSTAT(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 170.610202] ? inet_bind+0x960/0x960 [ 170.616619] ? mark_held_locks+0xa6/0xf0 [ 170.620691] ? __local_bh_enable_ip+0xc1/0x170 [ 170.625287] ? __inet_stream_connect+0xb90/0xb90 [ 170.630051] ? __inet_stream_connect+0xb90/0xb90 [ 170.634814] inet_stream_connect+0x53/0xa0 [ 170.639054] SyS_connect+0x1f4/0x240 [ 170.642777] ? SyS_accept+0x30/0x30 [ 170.646426] ? fput+0xb/0x140 [ 170.649547] ? SyS_write+0x14d/0x210 [ 170.653275] ? SyS_read+0x210/0x210 [ 170.656904] ? SyS_clock_settime+0x1a0/0x1a0 [ 170.661403] ? do_syscall_64+0x4c/0x640 [ 170.665382] ? SyS_accept+0x30/0x30 [ 170.669017] do_syscall_64+0x1d5/0x640 [ 170.672922] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 170.678113] RIP: 0033:0x45deb9 [ 170.681300] RSP: 002b:00007f30602c8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 170.689023] RAX: ffffffffffffffda RBX: 0000000000002440 RCX: 000000000045deb9 [ 170.696569] RDX: 000000000000001c RSI: 0000000020000040 RDI: 0000000000000004 [ 170.703829] RBP: 00007f30602c8ca0 R08: 0000000000000000 R09: 0000000000000000 19:41:53 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) 19:41:53 executing program 0 (fault-call:3 fault-nth:1): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 170.711598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.718867] R13: 00007fff28b6bd9f R14: 00007f30602c99c0 R15: 000000000119bf2c [ 170.783945] FAULT_INJECTION: forcing a failure. [ 170.783945] name failslab, interval 1, probability 0, space 0, times 0 [ 170.814277] CPU: 1 PID: 13675 Comm: syz-executor.0 Not tainted 4.14.210-syzkaller #0 [ 170.822281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.831664] Call Trace: [ 170.834265] dump_stack+0x1b2/0x283 [ 170.837909] should_fail.cold+0x10a/0x154 [ 170.842311] should_failslab+0xd6/0x130 [ 170.846302] kmem_cache_alloc_node+0x263/0x410 [ 170.850895] __alloc_skb+0x5c/0x510 [ 170.854520] sk_stream_alloc_skb+0xb1/0x760 [ 170.858827] tcp_connect+0x1123/0x3f00 [ 170.862713] ? secure_ipv6_port_ephemeral+0x210/0x210 [ 170.867899] ? tcp_fastopen_defer_connect+0xe4/0x340 [ 170.873154] ? __tcp_transmit_skb+0x2cb0/0x2cb0 [ 170.877842] ? secure_tcpv6_ts_off+0x249/0x2f0 [ 170.882426] tcp_v6_connect+0x13cc/0x1ad0 [ 170.886590] ? tcp_v6_init_seq+0x170/0x170 [ 170.890806] ? trace_hardirqs_on+0x10/0x10 [ 170.895028] ? trace_hardirqs_on+0x10/0x10 [ 170.899274] __inet_stream_connect+0x6ad/0xb90 [ 170.903844] ? inet_bind+0x960/0x960 [ 170.907545] ? mark_held_locks+0xa6/0xf0 [ 170.911597] ? __local_bh_enable_ip+0xc1/0x170 [ 170.916163] ? __inet_stream_connect+0xb90/0xb90 [ 170.920897] ? __inet_stream_connect+0xb90/0xb90 [ 170.925631] inet_stream_connect+0x53/0xa0 [ 170.929856] SyS_connect+0x1f4/0x240 [ 170.933568] ? SyS_accept+0x30/0x30 [ 170.937707] ? fput+0xb/0x140 [ 170.940798] ? SyS_write+0x14d/0x210 [ 170.944505] ? SyS_read+0x210/0x210 [ 170.948136] ? SyS_clock_settime+0x1a0/0x1a0 [ 170.952527] ? do_syscall_64+0x4c/0x640 [ 170.957110] ? SyS_accept+0x30/0x30 [ 170.960731] do_syscall_64+0x1d5/0x640 [ 170.964604] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 170.969904] RIP: 0033:0x45deb9 [ 170.973193] RSP: 002b:00007f30602c8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a 19:41:53 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r2, 0xb000) socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r4, 0x0) write$P9_RSTAT(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:53 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c000000100000", 0x5c, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) [ 170.980902] RAX: ffffffffffffffda RBX: 0000000000002440 RCX: 000000000045deb9 [ 170.988165] RDX: 000000000000001c RSI: 0000000020000040 RDI: 0000000000000004 [ 170.995423] RBP: 00007f30602c8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 171.002673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.009925] R13: 00007fff28b6bd9f R14: 00007f30602c99c0 R15: 000000000119bf2c 19:41:53 executing program 5 (fault-call:3 fault-nth:0): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:53 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:41:53 executing program 0 (fault-call:3 fault-nth:2): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:41:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:53 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r2, 0xb000) socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r4, 0x0) write$P9_RSTAT(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:53 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c000000100000", 0x5c, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) [ 171.136909] FAULT_INJECTION: forcing a failure. [ 171.136909] name failslab, interval 1, probability 0, space 0, times 0 [ 171.179424] CPU: 0 PID: 13698 Comm: syz-executor.0 Not tainted 4.14.210-syzkaller #0 [ 171.180017] FAULT_INJECTION: forcing a failure. [ 171.180017] name failslab, interval 1, probability 0, space 0, times 0 [ 171.187593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.187617] Call Trace: [ 171.187634] dump_stack+0x1b2/0x283 [ 171.187649] should_fail.cold+0x10a/0x154 [ 171.187663] should_failslab+0xd6/0x130 [ 171.187676] kmem_cache_alloc_node+0x263/0x410 [ 171.187691] __alloc_skb+0x5c/0x510 [ 171.187703] sk_stream_alloc_skb+0xb1/0x760 [ 171.187718] tcp_connect+0x1123/0x3f00 [ 171.187738] ? secure_ipv6_port_ephemeral+0x210/0x210 [ 171.187746] ? tcp_fastopen_defer_connect+0xe4/0x340 [ 171.187754] ? __tcp_transmit_skb+0x2cb0/0x2cb0 [ 171.187764] ? secure_tcpv6_ts_off+0x249/0x2f0 [ 171.187778] tcp_v6_connect+0x13cc/0x1ad0 [ 171.187793] ? tcp_v6_init_seq+0x170/0x170 [ 171.187802] ? trace_hardirqs_on+0x10/0x10 [ 171.187812] ? trace_hardirqs_on+0x10/0x10 [ 171.187832] __inet_stream_connect+0x6ad/0xb90 [ 171.187844] ? inet_bind+0x960/0x960 [ 171.187854] ? mark_held_locks+0xa6/0xf0 [ 171.187863] ? __local_bh_enable_ip+0xc1/0x170 [ 171.187871] ? __inet_stream_connect+0xb90/0xb90 [ 171.187880] ? __inet_stream_connect+0xb90/0xb90 [ 171.187887] inet_stream_connect+0x53/0xa0 [ 171.187898] SyS_connect+0x1f4/0x240 [ 171.187912] ? SyS_accept+0x30/0x30 [ 171.313522] ? fput+0xb/0x140 [ 171.316611] ? SyS_write+0x14d/0x210 [ 171.320306] ? SyS_read+0x210/0x210 [ 171.324781] ? SyS_clock_settime+0x1a0/0x1a0 [ 171.329171] ? do_syscall_64+0x4c/0x640 [ 171.333131] ? SyS_accept+0x30/0x30 [ 171.336740] do_syscall_64+0x1d5/0x640 [ 171.340616] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 171.346061] RIP: 0033:0x45deb9 [ 171.349238] RSP: 002b:00007f30602c8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 171.356929] RAX: ffffffffffffffda RBX: 0000000000002440 RCX: 000000000045deb9 [ 171.367746] RDX: 000000000000001c RSI: 0000000020000040 RDI: 0000000000000004 19:41:53 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 171.375001] RBP: 00007f30602c8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 171.382266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 171.389523] R13: 00007fff28b6bd9f R14: 00007f30602c99c0 R15: 000000000119bf2c [ 171.396791] CPU: 1 PID: 13700 Comm: syz-executor.5 Not tainted 4.14.210-syzkaller #0 [ 171.404681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.414039] Call Trace: [ 171.416642] dump_stack+0x1b2/0x283 [ 171.420283] should_fail.cold+0x10a/0x154 [ 171.424438] should_failslab+0xd6/0x130 [ 171.428422] __kmalloc+0x2c1/0x400 [ 171.431964] ? SyS_memfd_create+0xbc/0x3c0 [ 171.436297] SyS_memfd_create+0xbc/0x3c0 [ 171.440370] ? shmem_fcntl+0x120/0x120 [ 171.444271] ? SyS_clock_settime+0x1a0/0x1a0 [ 171.448686] ? do_syscall_64+0x4c/0x640 [ 171.452674] ? shmem_fcntl+0x120/0x120 [ 171.456563] do_syscall_64+0x1d5/0x640 [ 171.460455] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 171.465643] RIP: 0033:0x45deb9 [ 171.468840] RSP: 002b:00007fe3e4e3da28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 19:41:53 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:41:53 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c000000100000", 0x5c, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 171.476552] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045deb9 [ 171.483830] RDX: 0000000020000230 RSI: 0000000000000000 RDI: 00000000004c2927 [ 171.491106] RBP: 0000000000800000 R08: 0000000020000230 R09: 0000000000000000 [ 171.498381] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000002 [ 171.505650] R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020014900 19:41:53 executing program 5 (fault-call:3 fault-nth:1): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:53 executing program 0 (fault-call:3 fault-nth:3): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:41:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 171.594437] FAULT_INJECTION: forcing a failure. [ 171.594437] name failslab, interval 1, probability 0, space 0, times 0 [ 171.611436] CPU: 0 PID: 13726 Comm: syz-executor.5 Not tainted 4.14.210-syzkaller #0 [ 171.619353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.628718] Call Trace: [ 171.631311] dump_stack+0x1b2/0x283 [ 171.635039] should_fail.cold+0x10a/0x154 [ 171.639170] should_failslab+0xd6/0x130 [ 171.643124] kmem_cache_alloc+0x28e/0x3c0 [ 171.647256] __d_alloc+0x2a/0xa20 [ 171.650689] ? lock_downgrade+0x740/0x740 [ 171.654835] __shmem_file_setup.part.0+0xcb/0x3c0 [ 171.659683] ? shmem_create+0x30/0x30 [ 171.663474] ? __alloc_fd+0x1be/0x490 [ 171.667256] SyS_memfd_create+0x1fc/0x3c0 [ 171.671384] ? shmem_fcntl+0x120/0x120 [ 171.675269] ? SyS_clock_settime+0x1a0/0x1a0 [ 171.679672] ? do_syscall_64+0x4c/0x640 [ 171.683639] ? shmem_fcntl+0x120/0x120 [ 171.687517] do_syscall_64+0x1d5/0x640 19:41:54 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 171.691413] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 171.696710] RIP: 0033:0x45deb9 [ 171.699882] RSP: 002b:00007fe3e4e3da28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 171.707573] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045deb9 [ 171.714832] RDX: 0000000020000230 RSI: 0000000000000000 RDI: 00000000004c2927 [ 171.722124] RBP: 0000000000800000 R08: 0000000020000230 R09: 0000000000000000 [ 171.729916] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000002 [ 171.737705] R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020014900 19:41:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000", 0x63, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, 0x0) 19:41:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:54 executing program 5 (fault-call:3 fault-nth:2): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:54 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 171.837162] net_ratelimit: 5 callbacks suppressed [ 171.837166] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 171.858420] FAULT_INJECTION: forcing a failure. [ 171.858420] name failslab, interval 1, probability 0, space 0, times 0 [ 171.870006] CPU: 1 PID: 13749 Comm: syz-executor.0 Not tainted 4.14.210-syzkaller #0 [ 171.878000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.887356] Call Trace: [ 171.889943] dump_stack+0x1b2/0x283 [ 171.893556] should_fail.cold+0x10a/0x154 [ 171.897712] should_failslab+0xd6/0x130 [ 171.901710] kmem_cache_alloc_node+0x54/0x410 [ 171.906208] __alloc_skb+0x5c/0x510 [ 171.909821] __pskb_copy_fclone+0x100/0xc90 [ 171.914139] nf_dup_ipv6+0x10b/0x6f0 [ 171.917857] ? mark_held_locks+0xa6/0xf0 [ 171.922445] ? nf_send_reset6+0x1180/0x1180 [ 171.926764] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 171.931887] ? ip6t_do_table+0xa38/0x1710 [ 171.936020] ? __local_bh_enable_ip+0xc1/0x170 [ 171.940798] ? ip6t_do_table+0xa85/0x1710 [ 171.944972] ? check_preemption_disabled+0x35/0x240 [ 171.949986] tee_tg6+0x109/0x160 [ 171.953339] ip6t_do_table+0x9e3/0x1710 [ 171.957324] ? ip6t_alloc_initial_table+0x660/0x660 [ 171.962335] nf_hook_slow+0xb0/0x1a0 [ 171.966035] ip6_xmit+0x10a7/0x1f00 [ 171.969813] ? lock_acquire+0x170/0x3f0 [ 171.973905] ? ip6_append_data+0x2f0/0x2f0 [ 171.978129] ? rt6_check+0x15a/0x250 [ 171.981834] ? ip6_dst_check+0x131/0x260 [ 171.985880] ? ipv6_sock_ac_drop.cold+0x32/0x32 [ 171.990547] ? lock_acquire+0x170/0x3f0 [ 171.994502] ? check_preemption_disabled+0x35/0x240 [ 171.999503] inet6_csk_xmit+0x286/0x4d0 [ 172.003460] ? inet6_csk_update_pmtu+0x130/0x130 [ 172.008664] __tcp_transmit_skb+0x17e2/0x2cb0 [ 172.013151] ? __tcp_select_window+0x680/0x680 [ 172.017725] ? check_preemption_disabled+0x35/0x240 [ 172.022736] tcp_connect+0x2ad6/0x3f00 [ 172.026617] ? tcp_fastopen_defer_connect+0xe4/0x340 [ 172.031702] ? __tcp_transmit_skb+0x2cb0/0x2cb0 [ 172.036374] ? secure_tcpv6_ts_off+0x249/0x2f0 [ 172.040951] tcp_v6_connect+0x13cc/0x1ad0 [ 172.045096] ? tcp_v6_init_seq+0x170/0x170 [ 172.049332] ? trace_hardirqs_on+0x10/0x10 [ 172.053547] ? trace_hardirqs_on+0x10/0x10 [ 172.057794] __inet_stream_connect+0x6ad/0xb90 [ 172.062382] ? inet_bind+0x960/0x960 [ 172.066099] ? mark_held_locks+0xa6/0xf0 [ 172.070143] ? __local_bh_enable_ip+0xc1/0x170 [ 172.074796] ? __inet_stream_connect+0xb90/0xb90 [ 172.079543] ? __inet_stream_connect+0xb90/0xb90 [ 172.084286] inet_stream_connect+0x53/0xa0 [ 172.088513] SyS_connect+0x1f4/0x240 [ 172.092214] ? SyS_accept+0x30/0x30 [ 172.095842] ? fput+0xb/0x140 [ 172.098937] ? SyS_write+0x14d/0x210 [ 172.102641] ? SyS_read+0x210/0x210 [ 172.106256] ? SyS_clock_settime+0x1a0/0x1a0 [ 172.110897] ? do_syscall_64+0x4c/0x640 [ 172.115031] ? SyS_accept+0x30/0x30 [ 172.118659] do_syscall_64+0x1d5/0x640 [ 172.122562] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 172.127736] RIP: 0033:0x45deb9 [ 172.130924] RSP: 002b:00007f30602c8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a 19:41:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, 0x0) 19:41:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000", 0x63, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) [ 172.138614] RAX: ffffffffffffffda RBX: 0000000000002440 RCX: 000000000045deb9 [ 172.145956] RDX: 000000000000001c RSI: 0000000020000040 RDI: 0000000000000004 [ 172.153219] RBP: 00007f30602c8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 172.161382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 172.168727] R13: 00007fff28b6bd9f R14: 00007f30602c99c0 R15: 000000000119bf2c 19:41:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r2, 0xb000) socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r4, 0x0) write$P9_RSTAT(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:54 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 172.243930] FAULT_INJECTION: forcing a failure. [ 172.243930] name failslab, interval 1, probability 0, space 0, times 0 [ 172.264345] CPU: 1 PID: 13764 Comm: syz-executor.5 Not tainted 4.14.210-syzkaller #0 [ 172.272638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 172.282352] Call Trace: [ 172.284974] dump_stack+0x1b2/0x283 [ 172.288615] should_fail.cold+0x10a/0x154 [ 172.292872] should_failslab+0xd6/0x130 [ 172.296949] kmem_cache_alloc+0x28e/0x3c0 [ 172.301193] ? shmem_destroy_callback+0xa0/0xa0 [ 172.305961] shmem_alloc_inode+0x18/0x40 [ 172.310032] ? shmem_destroy_callback+0xa0/0xa0 [ 172.314708] alloc_inode+0x5d/0x170 [ 172.318344] new_inode+0x1d/0xf0 [ 172.321977] shmem_get_inode+0x8b/0x890 [ 172.325963] __shmem_file_setup.part.0+0x104/0x3c0 [ 172.330933] ? shmem_create+0x30/0x30 [ 172.334819] ? __alloc_fd+0x1be/0x490 [ 172.338632] SyS_memfd_create+0x1fc/0x3c0 [ 172.342794] ? shmem_fcntl+0x120/0x120 [ 172.346684] ? SyS_clock_settime+0x1a0/0x1a0 [ 172.351098] ? do_syscall_64+0x4c/0x640 [ 172.355075] ? shmem_fcntl+0x120/0x120 [ 172.358969] do_syscall_64+0x1d5/0x640 [ 172.362890] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 172.368094] RIP: 0033:0x45deb9 [ 172.371278] RSP: 002b:00007fe3e4e3da28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 172.378986] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045deb9 [ 172.386258] RDX: 0000000020000230 RSI: 0000000000000000 RDI: 00000000004c2927 [ 172.393552] RBP: 0000000000800000 R08: 0000000020000230 R09: 0000000000000000 [ 172.400826] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000002 [ 172.408097] R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020014900 19:41:55 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000003240)={0x2b, 0x3, [], [@ra={0x5, 0x2, 0xf2}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, [], 0x1}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, 0x28) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0xd0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@empty, @loopback, [0x0, 0x0, 0x0, 0xff000000], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1, 0x64}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@mcast1, @local, [0x0, 0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffff00], 'batadv0\x00', 'syzkaller1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000003200)=0x4020, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000006e40)) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x82100, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000140)=0x2000000) read$dsp(r4, &(0x7f0000000040)=""/18, 0x12) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f00000082c0)={0x0, 0x86, "8a1b54519082d304bac727f7d091c3310519d4532bbd1c8f0da07ec316ed2ed3c01dab9faa92233863a7abb00a47f583b7e9e5915ebf8f970440060963b78eb8245f09393889b25392dc02e39ddfec45e004213ff10e0de71832802cf939a5dad7a194e0cf87856c0b1d25da26a7b8ac31d8fb7c34ef71573da98eec6bc7b83c6d660d589f58"}) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000008100)=[{{&(0x7f00000000c0)=@l2={0x1f, 0x7bbb, @any, 0x20}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)="93d9cc590814c404fd6bbb0d4763d5d98de7c17f621bc37b51de44403966f7ca267b21133d", 0x25}, {&(0x7f0000000180)="58871bf2", 0x4}, {&(0x7f00000001c0)="f84a95b44f7cde45cee8487b869e96cd6138be48bf11703ee83eb18f5c2487c3a1abf236329fc7dec7eed4d965f781f9c05a97b6e7f335143ece9b0b1683eb2a793d8dd4044882bb7eceb887a809f27dc3f10ba5378cba8f7464a22893debd76540b82b043a9e97ae776624e154c4cede00eccdac7a0de9ae9a66a72f91ab1683a92f720c500be292210f75787267a7e9f6b0a785b7e6d63c3470e9d71de4642c1ccdf8d3eff5591f582306a55127f6e11", 0xb1}, {&(0x7f0000000280)="d918e04a4dd9adefc9168df926c922594c52b575879930a66be9f37b09c32735934f8848af1bed16ac47b6d991f86d7909e000fa449d5322c4f784b8f49a8077c88961dde8294692242263865361cab7665bb0a125fe4aa0", 0x58}, {&(0x7f0000000300)="99f87b6104a018a5e246ba5065f859b46aec8e4a6263c482c05c0c1c1a7fe25009e7dedee714522f619575d79bb62037de53dc5401bd2d4b91d9782a5e503d5ba71a339b4023914562ea5658dad42630bfa39adc8d92a9dbe980ec93eab11dbc81f72753e9234bde8435e29a768fe75856ba9bd8ab9cae6e24d194fe08c95cd489e9058eb7f0", 0x86}, {&(0x7f00000003c0)="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", 0xfc}], 0x6, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x13a0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="fd09462d54da3f8ea2382254f63a606d8486f887d065cf737c52c2496646b8d56c57622f4fcf5c9830036f682460cb766e37cea07869b4c5b1e71e4a345b9753ca939a97fb20a71dad2123ec175c0882164d130bae928b3be3eed53fc21e01b2b62fd525a3388a672586ff0c0b8878a6c198ef4cd93615f19ef1ac7f7a83", 0x7e}, {&(0x7f0000001dc0)="aae51b1eedde7ded1f0e5a343675477629b343ad2e155c1a5031b6496b6ec6696adcc9d347c18b064372671e70fd7c7448a430e495bc0180d28431263d3a4b5ee01ca023e31ad2f4b285006c97ebf643c40f40388bad29ffa4825619c178c5e0700f3e537d98061265dce8f9b6d1e9b4175e0d38ed920a6659ec154fca9998c8408f271409cd04dd79298828ef17c3f46cc14a4ec2259f7cf698664f7732190e5a8af58f112d2e4c21c2db855e3a92b258deecee358bfdc64891335aa9d0fe84dd3f5a2fe3388660f0570ab6d519d766d773c60d5b273bfafec75a313c7b4a334be3ed2d953f14bf2dffd079c1d7c38c", 0xf0}], 0x2}}, {{&(0x7f0000001ec0)=@pppoe={0x18, 0x0, {0x4, @multicast, 'tunl0\x00'}}, 0x80, &(0x7f0000003180)=[{&(0x7f0000000600)="d35411c19697128cc1c7b1156782f5ece37d683cac3a7fdeaa4031b54c8d6106da4871c71483514fbc890233c032440da03273e910f2e28899297975fd", 0x3d}, {&(0x7f0000001f40)="8589e2c9", 0x4}, {&(0x7f0000001f80)="728fb0a94a1bc406eae12db7703249dc9065da23b23197a5a91430eb7e8320edac6f0ae78cb279dd5b8b0b590204ef5e0c848f605886a447d905387cbfd985b608637f6e45f91cf33e0197e3488bbfd0a4a0a0c1eb756195eaa48c106db43f862443076c95c13780c200902ecfc6437a5f403ffbcd68938a095f147eba6ead82ace6620bd05be7940b3f011ea6a69d9e9661c1985417e1ac05c8a14ce9c9731c52bd9491aa00d02cd2b352fc08bb67817666163196441bef5bd2a19f4ed608c8500216ef5d2b9cae18b63c09d6727eb65cc11d5e05e0fb1c8de8032585eace5d6cf60648b3cc99a06db56dd3acab03589012db8bb4e9f00869b0d8bcda0e97f2ef9421a2203796af65debc9fd46791386eec1285d23bc6a92108cf0c345d515736c59c4f6b285a4ae95743464798d452a3f5db78aef61d56a72ed3cde4084761c62bf48dddcccf4977be9bf57d40ac09e72ea1b9baa4da399461e5b2b63c3e45d110378bb82e3a71d6222f3a396d58c1dc3d058031753246be167d2835e22c206358f610e5827ff198424ca68920c79998fbb0fca3989c76bc1f49ce23831fc726be51d85c4884a3f7538bc7eb66c00b83a135c7abb85b5b2161c4802a55dd295dfcc450c4499cf9db49082d9d141e9afbaaabe6eee209db094899748f3763d5c0129737366bb86fe39a442b607fe896b89d338292e6177c8d9a4aade86bd803290ad4b34f411573dbac667ec133f674a7127bde07ffafd382b9ef7d366c791efa369e28ed5531b38d9e700bb96edd300276f6529bf889602531c80b5bcbea240f2cf70e39e13a2af6daa1bcddd7ebd0fbf0a46a8a9de5d3ce00a065950a2f1e9898d8ebd57eaac51bc21855e5ff18cfabab34e9bd50d4e386070dadbd5a5a0531e6259232ab538dd2ca6f802d254138a4f2b94f978ac959f7d0be0c800ed6d0fd1769f6f6c08cdb785302915ae254c467c7803d4dbdde6e478464f87b2bece44f8a0dcb88e3381e5bb29094476ecf3c6a9df892b957d4a559efc8c29b4b96ca805eb57b42d576141b0a663f1a2dd5fa3781abeb4e1718bd3785e62df4d39c3a544d2fdd826312ea30e09653694fed4f693f3c6af86a3070467d4cb455c9fb4676bd02d90aa3aec88abfc2c6f0b422d6df1895a309e871be9c90c3f5f588cc492608bfa91e3598f715930575b75e237b36eab8acf72aeaa3dbcf967cca74c9da641d92c5a1204d4ab28aa075cc27439d0bab1daa279c28cbcdeace4db337574f9447fb9f12189abe3ac94d544692acfefa0c5fd3884f01fbbca597548975870763987f961b66d3401793c63c4d2c17bdfe9ed1239ad0fa203d5e06b8ce982825d59f53396c872fb49076bf9d66d4edc922550a3f41ba29f734d9dbc576738e329461addd1439496ce8a69551e263e52fc6315b5914df4c323364d889c23af4fcb8885a0733d2ba1010c24cd293b5df1fdc8a14da96ddbe344cf560c1a846794b4c2e9001b494640bb94faaeac87463f7f122a4f0bc147fb711233352fe548ae3e9764fcb0fc1575559e0bb2375de1e85e75a8a529036b226916040eee090624d850a9e07ed0c9dc550414e58afc0e971ede0fc99c550f4d004a108d6e146453ed4a9d30a005850b56a3ef688bb916759c58b9997979c78c0f003d5a91f31b6bb2bf21a98b5c27af8d55e61752c744582f708020a34013aa141b8f85b467c4bb055d78aa7a2449515e256b3ebb8e668d3d109891089406bb5bb9d247cf8c1d91eb047e73dea9447fcc1a45908ebb7ac32254db04567dd92413da6b31560b833e2463027511aa0bbc48636f6336c16fe5cc439c6a7c51141019574bbc8fd80992faaea559dbecefb1ae7dc8aa72f7782e4e844c04958883abdfb811146365f3fe356a79de7c532289ac278634d7fd44ec16495629ee3277e8edb3f0eb0f7111872d216370db5a320e20628b3a93ecee0cb8cc27596711e7de4429df6a421ab075f2fefba063c73197e8fc768f88b031d2456694dddf37116ec462e34ec1188db8e628535b8cc30938e53f6788c0843aceda6e39e12c29f6555c76cda2ce9f54faaa08acea42a814bed2ce22dc4828a1a565b7382b143cb106300b1a367221036fd1bcda89b2824ffa67f09f26b0fa5bfd42a0f1b6f8dec9003a259f9e37e72bf0fcba5e4ccac3a1eaad403e30042777632811854c22114c1f8228cefc4cc953cd3fb1773322ff5c5d1785412219ceb4abc84b5299657e7c630f3c2a2001bbdaa17459621d482a2f4226391d3f4a91b8e0614b100b2c712655cff9b02258874d0074abe9c95719d388f502812a266d730f5fce7f1cdea74d86cd866ea5befb71a2cf91dc32a2ad62a3633ed87bf1885a2f882d4df761abb2b2ba2c219664d15e6069ba5345c9e4ac770cd0252a9ca2f0dc2e8edd7c5ee7e5625ef94e4591c6a9132f744ea8c1f6064b69715c48aedd3673c8b9c2393f51f51508e35b90e0bc7c8ee002f7e820993817ba2f63a5ff88a69fb88b5644038a1e5f0a954b2129cc560eac644a8d03107e4666104ce2557c3f5b718ceaf18cde6dc6062cc5f2a7c8d28cc090bbff607b72aa44fd678a8ab34680edc8528fc739baa816f9dd10be27609fa046bf2142b9fe487d54dcb8eb8c7f0d064f6db89b215e432c916a633adddfed5363c021b5382d6eb93f5ce6f3c86d19540106662a7b29fcd030cf010230006dbdf5285af9ce68fc049620e19d3719c0270b9661cb2659325b84533be1e5868f89f20bba5a84356eda30510993a9bd74b9bfd4417831cd9a3afdcb349bbe3a2e0d820fa8c690e615c4ea23d2228fc361ef46dda5cab9c45a7538db9e635f433962c45a360070e9de117f62e441228ec1e574d0d71f42080c7a9d6e24be7d318cc81be6d3170cb3038e621e0bb5648b207cd65566b70975dacd33c30b81ba66e9541e672da9919d309429091e2b496e484408bbd03c1171a2a56f23e9bb8e13184db8520512172412a8a6208e0b0a14a330a20db8001bba386e0ce30490078d7bc7648c287c3d1bfb936ac16e9ab240f80ee8afe242f147bf97882b99a04795accacb44396576d831821162d8dfb6dbc8b9009e8dc9762178282ec6329d77e88e199928ee9bfa788f7b68c39ddd9ad5e7da9a0d282b70d9f5588a62b980e0ba2210a3892b5b5bcab2acbc27e1921ecd89fc7c9ede501427b3ac338fe2cda42282f3bb7980533d5d37894db4dd26bd7ecb56a0cbbbe1b323a40a4315d7b5af92f87c48ca9abbcbc904dcafb80ad7bf49501b958845bafc6f11fcdca7bfd26e77aaa4bb8f276ccd44ef5c198c61e8b82e3f931657a67f9eb69623efb9f9ca97c85e4b4be0ec7964392bc209152362521ddba393fc558f20663eb7e3d75a4a5108c1178b3f10d87e622048aaef4880df52fef8a2561906ea031228595d79376d3f0198bad8106db59b9cad0f12a65cf6d873751d4b0b63102eef3b5f22110030468c1f7831e137c7beaecd04e7a1bf1c84fedd7741b40fea3d9520d5dbfe6bad88394baacbb25058ef9324a5715671fdfa0e332719a3a675589af36bbd2a21928c7b8f24c798acc9002c49cd151d29e764599e9a1d34a6bc6fa8bbec7996b2bd4d08cd526b16401721fdd45b4cb98163145ca8408a42dc7955f40297d453c901ed46e21b4e5ed6911233fc20aeda3f95c056e1826159d12117ba1837b7efc12be190f3ed5c5817697cd81596c40b2c5969bdc31c13002e7160a3c9303dd390a3eee5e78a6703624233f490c5ff9ccec57185976cf1f61a5e592f641bb670f2f7b8b71d6fd00fba942a974b317778b295b5831a449b0431df68410bd0e8ce34601f163bc7225d229732c7955bdd2d1b24e3873e1d2031fcf1f02cbbb01987b94c884c5369afcdf11bd5c10ff24466b0aca58711fb9d0eb3a808871b504f219e179ac4d977508f2a7eb6daac56449ce0fd5b357c1da2910ece31384b1fffb29502757de2c778a93f1f3beb117f7a473198952792ca7a96972a1c7a883704dd9a3b953500317be59e973bf2a03a896662869be9c380f99e62fe54be677c037c7e5228b4126b02c4872e58a0f7dd04eead4ff73841bf993e1b3b0d771b2b6e79bacf41d5f69db6cecbe7864d53714b1582da03fa7b6fc0220fc15430c14885c1fb3670163126945ec35f3da548e07d9f2921274bdd65064f9e613a5e87052b32107ae3f0cf0b2104786b0b2a5a10f45b20523bc2ba282cb18d88c5eabb6ca6177e23e5fb127d2df8b05f1248d79b089a571c3b80eea972a6b8043e0e2a5d6b7bd3ffbe3e41fa0bfab45f44b5962e069c18668b0fe22482c39f595de229de7744dd37896aadae0eda58cd6d0e3d32c1becf19f152f5348b88836cb46cb0ed7dd5f4b9c1e0c25e8cdaef86bd412ff99d86cb9449d86c19e5226ae7323f6e6d64aaf8fef22b0e9b199657731a9e8b8c992d63d2abc75e2fafa980f6d7148d7163c79bea48b49aacd5e9553d38e1c257d4efeccf1bea2680d0834811db98e527c504177020e615b9bea6c321f540516012b567bb9d6198a270658fdb1955dcf0d04ecb0ac22b3929bd1db90b494fe54b10478b7a38b71cd20b5f85e91ec46a87e4950f1f38234d113b8f03b18d66b0aaf964ecffa98d6804633857097e76548e1c0b821fc348e0cea92d4ad29b893f91d61e118972c882dd0e4dda1c9040968efc3b0c278cb6d71471a55ad210e34df6fb8279b0beb787ddeffbdc58ea18be46ba7afb575644cca4f27ca4693dc45f05543e829a40e3ec5f6d3072f81dd8917f1b2b9e6669134fbc990f9111b1ee85a2fa45a854247e48b13c185498ab65be7b3f2e3fd9508e9ed6d8dec8bcd1f88407c8a5503101eb8f05437d0361b7c128d7357f2b72041c1ba2766f2a84147bc36e9e379ab369e4670f5821a517e06ccc64ec9107907fbfcc9b76f793d88c1122e1ef7d8eb24303dad267c858b682547b53c4cb06dd503f44d3a0d7371c266245b5ad776f0319a3831d434b5067e24eaf367ce4ab5d15eaa3fc63269784beb766d22d352cb96b90ade71e479e8531228e5ad3e699058a31d3b3e186a8d546ea519ada1c8d47ea36ef03c60f3e20bccc5fe40e79a65fabd134a5d6905aee91b1b3b6e1118736d844fe4f4bba70e2775811ba71282e40c882edf84a219fc7bdb406a81b339229764b47d2803858eef3dbbd0cf7c77d21ced22c478b84e5c196e8a8703a0e48313c55c31a5f6c3b8d2992e601edbd6f2211d44a1be032f3b0a2d7cab65df113754a6035f0c4d1566cb372e9281987269cee688f7095bfa4cfa66be955924063b357cddf7c44f7fe7aed199296a97b67d776ddb0a0bbbd05919844bc5043a19a22b786c01566e8e912a50b8a1ab9c4e79fe92f6d41c4067d55a843beb1ebd4a048cebe8d1451e301b0ea8bb83710e84ffed494ca6b04c752d7c5166daea26f60c1bca713df03676fb7a9b172362fd93bc56b37582a82d9c0bb877d775958fb795fdd03e597ee2d99c964e64fcfc273314a8fb903a76c969d1c6ba6f9f7d882b191095b6fec36244e20084432f2e3176b2ee04d5fb987eb1a79d231d2b88f61783be946b00c3357edcfea553f62eb35659e75f8fac59703d5794178983a306057a015fe23a74c632b11894456e5e1fc677c989a2cdf0065e3184b4925d37dc1eb5b0b2719bb98fa48402564e71883c219c441e694b84b1db4c06371115b4bf9ac69b305e2f42dbf1ebd62b12be1cf7f239e4ed3393684816d0d8e787a185254784184502eb573691e5db274a89b42f3651ff89b5", 0x1000}, {&(0x7f0000002f80)="5cb9dd20d6d97b4afaa82f2bf7722336d7dd53c407a3269b93cc101017ab4a64a838619ff671fbd9eec4568fe549b75e331b30a26a3e44e04588f3a80f048ce75a24880dbc86d04ef3c9ceb3da011ff0b1bce3efa01cdde61884bd2ed0f4162df09851a69df1d1f705f4555df5125c8b60bc7463225e13235c1240d1dfc869c8e467f81ae1c1074627c3de37438467017e64cc1633319626ea11022f3e67dc8dc2ae8c58ffc62197415ddc7d07cad176954e6f408461daaeaf3aa3d376ea54", 0xbf}, {&(0x7f0000003040)="f38ddd52126cbf3562a0500f414869ade634982ff08ab2bce3e0d11c327217fc1952d6779e2e2e47e0e74d40e07eafe207067a083af78e156ba03d0c4651828c4b99bda3adbb6b6ccedd8079efc0a60b8b764a417131c771160a36022ef390f1629e890cde403ebf447c126d1ad9f5d3881a40a20d4952ec564d6401891e348e9f6b8e89fb8ee5d173db795523bd0368cd43912d94544de1131b598b4e941e2e0e4ac98b43d4f3344e2e6cc02b8c286b3369caffef64b35ba8cbe09e3ff8", 0xbe}, {&(0x7f0000003100)="4bd8b8edcab85ae27e2b5daa43657bb65c17dde93b5bcfbf6f72ba4dd0d2441e3cb5b0bac240fba7b92e02c92170c232d0882df8", 0x34}, {&(0x7f0000003140)="62b1799f48821d32728c6b0d58f2326dcf0ed33a20d2e4ea6346830b0568c6a794f14ca9807e9ffec46fb83c36f504b3", 0x30}], 0x7, &(0x7f0000008380)=ANY=[@ANYBLOB="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"/612], 0xb8}}, {{&(0x7f00000032c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes)\x00'}, 0x80, &(0x7f0000004740)=[{&(0x7f0000003340)="2a829a71", 0x4}, {&(0x7f0000003380)="8cb634bf589397d346fd2a77ad452fb9bac168d0c15924fd8c9f8d57c4d52ba93f919595eb7e30b404733faed63d03053add0544088b522c2ca4ded875b4aafee36c15f7a04f62210707e35b2ef7d4a413b0889025e2ccd8c28275d84c86b4db8e1f731bfb3f60939450113ec890ff87a9c912bfec1eb2a005ba50dc486b4e9478f3e2dbcc7c89b3c8db4373916ceaf41cf8b9f4ecfbd432185a0afab8f0f96513b1d43418f7bd556b3a0b6f657f0dbba74fa9728ea3ff249fafc2dca26b7cbc8b0156d4e58f3e3f001388420dbc705217d50f7b22cb306495e58056d4f4901aa64ea54bcce80f2bca7f574f8f9eb53001b3334b2885aa7d04c5877c47a7", 0xfe}, {&(0x7f0000003480)="35311aa0773c7abd1845dc26bf25c92c9b01fd4a9c678a07952c9638d9d25825ee2a32d0b1bed759356a6df504cdc3c273dc6e4ed948e90ee7f26b0c81806880f03a1c22f2c6aefceb145193c3847d4301a8caa85b11a21dafc0125df7184467468110bd1d7a16082433ee779508", 0x6e}, {&(0x7f0000003500)="ac", 0x1}, {&(0x7f0000003540)="329201635ee579e862e3710c0f95cbf286784799ac9d85c8eaed933d639b1803728d67e5a25dba73d20e24ad577a29835f7a2ae9dcbf38fe30a999aa4b39e6fc506b9433184766006ae34189e9b5b86e7257d4", 0x53}, {&(0x7f00000035c0)="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", 0x1000}, {&(0x7f00000045c0)="0d65d9e46711c0", 0x7}, {&(0x7f0000004600)="9823badaac93b944ab3aa36d76b69cae143c90a570df0202f3c4dcda4d8b0a59a6e3a97531bc9cbe2446b6d84254a73124c580f85731ab8434d87b1773adebef6659b0ccff557f9dba74adcdd06c65d5bc16072a24325a76c92697149682a31eca660ccbcab8608f67a0d0b1c1d6a29f77b97153942e876838541f957500b379ef0ce2371470105bb2a79ef0e4e976f67dff09643ba9dfd188a7cdf42fb696f0ea3c854e98b4f875774a5897e31aaee8fc7cb5755050f1900b9538715c074350497c6d71856c89712b732168265bb845747f3384c4024ccec43353bf11bf22e28f1ad42b35f483a046dd83e3", 0xec}, {&(0x7f0000004700)="15040401041d350ccb7acd59dd9f95d17c846b246b6bfbf8b2f7fa1d46fe129ccacd393e09740b52c259fbfe915a34c1dda249", 0x33}], 0x9, &(0x7f0000004800)=[{0x60, 0x0, 0x57, "9e300f9c103f9d38ba65d57bc002fba1fac1b1d1d5b11100c1233b45b7d9f98915af013aa5d01c210701a14358226a5c05f7ad9a4b4b56adc6401188030e8537c089f8c6c283fe01ac"}, {0x18, 0x0, 0x6, "f625"}, {0x68, 0x103, 0x939, "ae76167f43c213099011fd9266505c53c07bd8f5b918dd9a1d621b35b848a426825a17039c4b9ece5e6315e3050cdd5a67577d05058f688bbb4420d4e079e026c456b9daf7e79bacfea9531a1d8a3a073db1ea2a"}, {0x1010, 0x105, 0x400, "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"}], 0x10f0}}, {{0x0, 0x0, &(0x7f0000005b80)=[{&(0x7f0000005900)="40835a1a5e6aeb88dd6b88a7261e0afae7f8313aefad9beb336d88ec4a874bacc890964c56e06a73fd90cf3c89ede7701c97ee2d51130632c3d3dd3f41462d13", 0x40}, {&(0x7f0000005940)="a5f8d3757467d9b7131cf581bbde367ca5ebe46c115d3c72453bad6b8a1d82842e58014df0e8bfd2574d2a88885e71f464b98e8c4a51bba156b3f379909de53442bc5eccd03586d0ca492bf9315354fea1ddf299951c0792c8e023515aecd7f1b57ddcf36f10d4ca36f3d855d40a4cb46e8eed22dcbc06d4722c60d22a2a815ead753be0b88de2790093522d6c9381dd8494f3d1e49c9e2209218b6f6225a8b636b6ca50ccb2033b3182c6f472544b0fdd9628652b5c5d49edad9e013919f0fbbc144c", 0xc3}, {&(0x7f0000005a40)="c65ac72f85a869e0835eaa2826e97699d3e35ea93dd8553b9e547ee9deca2eb0f8065ec88bad700ba1d90c50d89225225b9b4d9275684cce282add13b27cd0d1d0c9b1f82e72c4137869fc00d95d4b56463baf02dac8bdfab0b0408b6707c33f47fb973b384c2e", 0x67}, {&(0x7f0000005ac0)="9f723a8b13b420b1423f151972f94e58d8307cb3b4e3b31a237125acef03869929bb69dc2c6c1a909f37a447b4e878aa7d8a7a289473a811043dc34d196aa36fc4ccf34854e5fb05c4467272d839af36e1f02c32031f09ef79acb947c87564aab3a86aa2bdf66e3d63abb5e3fe2d149af8319283780d426ae1297f5407d18a303477", 0x82}], 0x4, &(0x7f0000008600)=ANY=[@ANYBLOB="a8000000000000000901000002000000d1deed4564be762aa87f2fea5b9bae5d44ac581eda686b7e3652b6851b2a482848e8c11d55e5438810888cede7a98d3427aae2411e11fcd5917589d4d132b1bc2e27a519e3f12e0d1a8614036eb3476e92c767ec613bb7deee61cd0cd4b0b62beb9fee26523a30c833461f87e515bfc68dd97fddae88a3835d3b2f27853509e87baaeb3600000000037a2d5a98b872b714e8e930dd14576eb8c48d7a21f6189fef734db89d38589b3dd867f81ce1da0d7192f8a100"/212], 0xa8}}, {{&(0x7f0000005c80)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80, &(0x7f0000006d00)=[{&(0x7f0000005d00)="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", 0x1000}], 0x1, &(0x7f0000006d40)=[{0x68, 0x10c, 0x0, "6d7c2911bbd74337689672ee0da76838cfede0677831aadab9faef2beaee977a131b6215363c4e7cd60a4c7c821b5289d22dd0063d8d45f688ef102d929d2dd818b5037d78a8a37254544160ce1e9c8bf946"}], 0x68}}, {{&(0x7f0000006dc0)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}, 0x3}, 0x80, &(0x7f0000008080)=[{&(0x7f0000006e40)}, {&(0x7f0000006e80)="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", 0x1000}, {&(0x7f0000007e80)="f681057b00210e91ad211c2b018bfb3ab962a38e6ead373c66d5465aae5bce28ef45f7cc2e35dd470be7cb371b5c191e5b9b96f5e64a4efcf1b1b3acc0ed8c7c2191162f9709087e9d4b1548527b5c30248a8281fa1a7f882b184e430b2255601ee720fd374a9258e0f73d451712da595c5ad3931a6b457eb710b809337f6dd827bed28ee890fb1cff32f0b838608df5a54de1fbb79beba4735271facfca0161126e958de795b0c6560c9684d5dfb5f543a98ed95bdda7165fe1469721f30e60ccc24628c701eeaa5a64ea94ccc5b6e7ca8f804ffaaed7506e03ba6249851c293a76c03b6dc0", 0xe6}, {&(0x7f0000007f80)='(z', 0x2}, {&(0x7f0000005bc0)="ae844b8af8e4a9b9801c328741910684fc0d8903dfdaca51da2926a6bc22a1a863b796bb90bda743e349927e3eb1b124d57a59be00706ddef5864f271fa6e447a6ae0a3e6d555e7f928826fd8be3814a97348262cc71bc393c2c91a1a14e4d7d2473e322227720181dc5a1a551e99f49305c48", 0x73}, {&(0x7f0000008040)="1f10c7c6bb9b46c3ba5a0435740a5bf4785ca80263fd9f3639b8043d9a4abf9f1f7e2f48934333145f6faf7e3ce6579d348c79b1ffb3b60121", 0x39}], 0x6}}], 0x7, 0x40843) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) 19:41:55 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, 0x0) 19:41:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r2, 0xb000) socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r4, 0x0) write$P9_RSTAT(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:55 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:41:55 executing program 5 (fault-call:3 fault-nth:3): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000", 0x63, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:55 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 172.673468] ip6t_REJECT: ECHOREPLY is not supported. [ 172.673591] FAULT_INJECTION: forcing a failure. [ 172.673591] name failslab, interval 1, probability 0, space 0, times 0 [ 172.704293] CPU: 1 PID: 13799 Comm: syz-executor.5 Not tainted 4.14.210-syzkaller #0 [ 172.712215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 19:41:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r2, 0xb000) socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r4, 0x0) write$P9_RSTAT(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 172.721571] Call Trace: [ 172.724168] dump_stack+0x1b2/0x283 [ 172.727815] should_fail.cold+0x10a/0x154 [ 172.732057] should_failslab+0xd6/0x130 [ 172.736036] kmem_cache_alloc+0x28e/0x3c0 [ 172.740196] get_empty_filp+0x86/0x3e0 [ 172.744108] alloc_file+0x23/0x440 [ 172.747659] __shmem_file_setup.part.0+0x198/0x3c0 [ 172.752678] ? shmem_create+0x30/0x30 [ 172.756480] ? __alloc_fd+0x1be/0x490 [ 172.760278] SyS_memfd_create+0x1fc/0x3c0 [ 172.764424] ? shmem_fcntl+0x120/0x120 [ 172.768514] ? SyS_clock_settime+0x1a0/0x1a0 [ 172.772925] ? do_syscall_64+0x4c/0x640 [ 172.777077] ? shmem_fcntl+0x120/0x120 [ 172.780968] do_syscall_64+0x1d5/0x640 [ 172.784864] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 172.790037] RIP: 0033:0x45deb9 [ 172.793257] RSP: 002b:00007fe3e4e3da28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 172.801090] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045deb9 [ 172.808357] RDX: 0000000020000230 RSI: 0000000000000000 RDI: 00000000004c2927 [ 172.815636] RBP: 0000000000800000 R08: 0000000020000230 R09: 0000000000000000 19:41:55 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:41:55 executing program 5 (fault-call:3 fault-nth:4): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:55 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000080)={0x8, 0x2, 0xa, &(0x7f0000000000)="c57836fc94d2514469d1"}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:41:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100", 0x66, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) [ 172.822905] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000002 [ 172.830179] R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020014900 [ 172.852383] ip6t_REJECT: ECHOREPLY is not supported. [ 172.928899] FAULT_INJECTION: forcing a failure. [ 172.928899] name failslab, interval 1, probability 0, space 0, times 0 [ 172.942124] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 172.971688] CPU: 1 PID: 13819 Comm: syz-executor.5 Not tainted 4.14.210-syzkaller #0 [ 172.979608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 172.988973] Call Trace: [ 172.991579] dump_stack+0x1b2/0x283 [ 172.995219] should_fail.cold+0x10a/0x154 [ 172.999374] should_failslab+0xd6/0x130 [ 173.003359] kmem_cache_alloc_trace+0x29a/0x3d0 [ 173.008042] apparmor_file_alloc_security+0x129/0x800 [ 173.013258] security_file_alloc+0x66/0xa0 19:41:55 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 173.013339] nla_parse: 11 callbacks suppressed [ 173.013346] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 173.017497] ? selinux_is_enabled+0x5/0x50 [ 173.017511] get_empty_filp+0x15c/0x3e0 [ 173.017520] alloc_file+0x23/0x440 [ 173.017532] __shmem_file_setup.part.0+0x198/0x3c0 [ 173.017541] ? shmem_create+0x30/0x30 [ 173.017549] ? __alloc_fd+0x1be/0x490 [ 173.017562] SyS_memfd_create+0x1fc/0x3c0 [ 173.017570] ? shmem_fcntl+0x120/0x120 [ 173.017579] ? SyS_clock_settime+0x1a0/0x1a0 [ 173.017589] ? do_syscall_64+0x4c/0x640 [ 173.017597] ? shmem_fcntl+0x120/0x120 [ 173.017606] do_syscall_64+0x1d5/0x640 [ 173.017621] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 173.017628] RIP: 0033:0x45deb9 [ 173.017637] RSP: 002b:00007fe3e4e3da28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 173.095293] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045deb9 [ 173.102650] RDX: 0000000020000230 RSI: 0000000000000000 RDI: 00000000004c2927 [ 173.109920] RBP: 0000000000800000 R08: 0000000020000230 R09: 0000000000000000 19:41:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:55 executing program 4 (fault-call:3 fault-nth:0): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:55 executing program 5 (fault-call:3 fault-nth:5): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) [ 173.117196] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000002 [ 173.124467] R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020014900 19:41:55 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 173.168315] FAULT_INJECTION: forcing a failure. [ 173.168315] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 173.193058] CPU: 1 PID: 13843 Comm: syz-executor.5 Not tainted 4.14.210-syzkaller #0 [ 173.200973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.210331] Call Trace: [ 173.212931] dump_stack+0x1b2/0x283 [ 173.216574] should_fail.cold+0x10a/0x154 [ 173.220744] __alloc_pages_nodemask+0x22c/0x2720 [ 173.225553] ? __lock_acquire+0x5fc/0x3f20 [ 173.229806] ? static_obj+0x50/0x50 [ 173.233438] ? trace_hardirqs_on+0x10/0x10 [ 173.237683] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 173.242545] ? __lock_acquire+0x5fc/0x3f20 [ 173.246813] ? __lock_acquire+0x5fc/0x3f20 [ 173.247530] FAULT_INJECTION: forcing a failure. [ 173.247530] name failslab, interval 1, probability 0, space 0, times 0 [ 173.251078] ? __lock_acquire+0x5fc/0x3f20 [ 173.251106] alloc_pages_vma+0xd2/0x6d0 [ 173.270650] shmem_alloc_page+0xe0/0x180 [ 173.274814] ? shmem_swapin+0x180/0x180 [ 173.278804] ? __radix_tree_lookup+0x1b5/0x2e0 [ 173.283491] ? find_get_entry+0x312/0x630 [ 173.287648] ? check_preemption_disabled+0x35/0x240 [ 173.292680] ? __vm_enough_memory+0x261/0x520 [ 173.297273] shmem_alloc_and_acct_page+0x126/0x620 [ 173.302292] ? simple_xattr_get+0xe5/0x160 [ 173.306789] shmem_getpage_gfp+0x302/0x2810 [ 173.311109] ? simple_xattr_get+0xe5/0x160 [ 173.315380] ? shmem_alloc_and_acct_page+0x620/0x620 [ 173.320483] shmem_write_begin+0xeb/0x190 [ 173.324628] generic_perform_write+0x1c9/0x420 [ 173.329211] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 173.333873] ? current_time+0xb0/0xb0 [ 173.337655] ? lock_acquire+0x170/0x3f0 [ 173.341615] __generic_file_write_iter+0x227/0x590 [ 173.347136] generic_file_write_iter+0x36f/0x650 [ 173.351876] __vfs_write+0x44c/0x630 [ 173.355577] ? do_truncate+0x129/0x1a0 [ 173.359455] ? kernel_read+0x110/0x110 [ 173.363434] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 173.368436] vfs_write+0x17f/0x4d0 [ 173.371962] SyS_pwrite64+0x116/0x140 [ 173.375759] ? SyS_pread64+0x140/0x140 [ 173.379651] ? fput+0xb/0x140 [ 173.382740] ? do_syscall_64+0x4c/0x640 [ 173.386707] ? SyS_pread64+0x140/0x140 [ 173.390592] do_syscall_64+0x1d5/0x640 [ 173.394483] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 173.399685] RIP: 0033:0x417a17 [ 173.402868] RSP: 002b:00007fe3e4e3da20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 173.410573] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000417a17 19:41:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100", 0x66, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) [ 173.417845] RDX: 0000000000000069 RSI: 0000000020010000 RDI: 0000000000000006 [ 173.425116] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 173.432379] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000002 [ 173.439642] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000210 [ 173.446765] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 173.462815] CPU: 0 PID: 13841 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 173.470807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.480155] Call Trace: [ 173.482736] dump_stack+0x1b2/0x283 [ 173.486358] should_fail.cold+0x10a/0x154 [ 173.490546] should_failslab+0xd6/0x130 [ 173.494526] __kmalloc+0x2c1/0x400 [ 173.498068] ? SyS_memfd_create+0xbc/0x3c0 [ 173.502308] SyS_memfd_create+0xbc/0x3c0 [ 173.506495] ? shmem_fcntl+0x120/0x120 [ 173.510393] ? SyS_clock_settime+0x1a0/0x1a0 [ 173.514809] ? do_syscall_64+0x4c/0x640 [ 173.518792] ? shmem_fcntl+0x120/0x120 [ 173.522687] do_syscall_64+0x1d5/0x640 [ 173.526593] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 173.531770] RIP: 0033:0x45deb9 [ 173.534969] RSP: 002b:00007f37146daa28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 173.542660] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045deb9 [ 173.549926] RDX: 0000000020000230 RSI: 0000000000000000 RDI: 00000000004c2927 [ 173.557192] RBP: 0000000000800000 R08: 0000000020000230 R09: 0000000000000000 19:41:55 executing program 4 (fault-call:3 fault-nth:1): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:56 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 173.564476] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000002 [ 173.571728] R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020014900 19:41:56 executing program 5 (fault-call:3 fault-nth:6): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) [ 173.626360] FAULT_INJECTION: forcing a failure. [ 173.626360] name failslab, interval 1, probability 0, space 0, times 0 [ 173.654470] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 173.673490] CPU: 0 PID: 13868 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 173.681599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.690994] Call Trace: [ 173.693596] dump_stack+0x1b2/0x283 [ 173.697235] should_fail.cold+0x10a/0x154 [ 173.701392] should_failslab+0xd6/0x130 [ 173.705378] kmem_cache_alloc+0x28e/0x3c0 [ 173.709537] __d_alloc+0x2a/0xa20 [ 173.712991] ? lock_downgrade+0x740/0x740 [ 173.716461] FAULT_INJECTION: forcing a failure. [ 173.716461] name failslab, interval 1, probability 0, space 0, times 0 [ 173.717135] __shmem_file_setup.part.0+0xcb/0x3c0 [ 173.733163] ? shmem_create+0x30/0x30 [ 173.737050] ? __alloc_fd+0x1be/0x490 [ 173.740858] SyS_memfd_create+0x1fc/0x3c0 [ 173.744993] ? shmem_fcntl+0x120/0x120 [ 173.748871] ? SyS_clock_settime+0x1a0/0x1a0 [ 173.753270] ? do_syscall_64+0x4c/0x640 [ 173.757231] ? shmem_fcntl+0x120/0x120 [ 173.761125] do_syscall_64+0x1d5/0x640 [ 173.765017] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 173.770189] RIP: 0033:0x45deb9 [ 173.773360] RSP: 002b:00007f37146daa28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 173.781259] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045deb9 [ 173.788517] RDX: 0000000020000230 RSI: 0000000000000000 RDI: 00000000004c2927 [ 173.795772] RBP: 0000000000800000 R08: 0000000020000230 R09: 0000000000000000 [ 173.803025] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000002 [ 173.810277] R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020014900 [ 173.817555] CPU: 1 PID: 13874 Comm: syz-executor.5 Not tainted 4.14.210-syzkaller #0 [ 173.821178] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 173.825440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.825444] Call Trace: [ 173.825461] dump_stack+0x1b2/0x283 [ 173.825475] should_fail.cold+0x10a/0x154 [ 173.825487] should_failslab+0xd6/0x130 [ 173.825498] kmem_cache_alloc+0x28e/0x3c0 [ 173.825507] getname_flags+0xc8/0x550 [ 173.825519] do_sys_open+0x1ce/0x410 [ 173.825529] ? filp_open+0x60/0x60 [ 173.825542] ? SyS_pwrite64+0xca/0x140 [ 173.876678] ? fput+0xb/0x140 [ 173.879793] ? do_syscall_64+0x4c/0x640 [ 173.883880] ? do_sys_open+0x410/0x410 [ 173.887899] do_syscall_64+0x1d5/0x640 [ 173.891784] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 173.896972] RIP: 0033:0x4179b1 [ 173.900162] RSP: 002b:00007fe3e4e3da20 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 173.907993] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004179b1 [ 173.915520] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007fe3e4e3dae0 19:41:56 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100", 0x66, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:56 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8001}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, 0x5, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x84}}, 0x24000800) 19:41:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:56 executing program 4 (fault-call:3 fault-nth:2): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:56 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:41:56 executing program 5 (fault-call:3 fault-nth:7): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) [ 173.922786] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 173.930233] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000002 [ 173.937494] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 19:41:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 174.001586] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 174.036328] FAULT_INJECTION: forcing a failure. [ 174.036328] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 174.048334] CPU: 1 PID: 13895 Comm: syz-executor.5 Not tainted 4.14.210-syzkaller #0 [ 174.056659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.063122] FAULT_INJECTION: forcing a failure. [ 174.063122] name failslab, interval 1, probability 0, space 0, times 0 [ 174.066009] Call Trace: [ 174.066027] dump_stack+0x1b2/0x283 [ 174.066043] should_fail.cold+0x10a/0x154 [ 174.066056] __alloc_pages_nodemask+0x22c/0x2720 [ 174.066072] ? __lock_acquire+0x5fc/0x3f20 [ 174.066089] ? generic_file_write_iter+0x437/0x650 19:41:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 174.066099] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 174.066108] ? trace_hardirqs_on+0x10/0x10 [ 174.066115] ? lock_downgrade+0x740/0x740 [ 174.066126] ? up_write+0x17/0x60 [ 174.066134] ? generic_file_write_iter+0x2f8/0x650 [ 174.066143] ? iov_iter_init+0xa6/0x1c0 [ 174.066155] cache_grow_begin+0x8f/0x420 [ 174.066166] cache_alloc_refill+0x273/0x350 [ 174.066181] kmem_cache_alloc+0x333/0x3c0 [ 174.081399] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 19:41:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x0, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 174.083561] getname_flags+0xc8/0x550 [ 174.083576] do_sys_open+0x1ce/0x410 [ 174.083587] ? filp_open+0x60/0x60 [ 174.159790] ? SyS_pwrite64+0xca/0x140 [ 174.163684] ? fput+0xb/0x140 [ 174.166795] ? do_syscall_64+0x4c/0x640 [ 174.171019] ? do_sys_open+0x410/0x410 [ 174.174909] do_syscall_64+0x1d5/0x640 [ 174.178805] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 174.183986] RIP: 0033:0x4179b1 [ 174.187185] RSP: 002b:00007fe3e4e3da20 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 174.194900] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004179b1 19:41:56 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c000000100000001400000300000001000000", 0x68, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) [ 174.202345] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007fe3e4e3dae0 [ 174.209628] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 174.216933] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000002 [ 174.224202] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 [ 174.231473] CPU: 0 PID: 13903 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 174.239366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.248725] Call Trace: [ 174.251345] dump_stack+0x1b2/0x283 [ 174.254985] should_fail.cold+0x10a/0x154 [ 174.259143] should_failslab+0xd6/0x130 [ 174.263121] kmem_cache_alloc+0x28e/0x3c0 [ 174.267272] ? shmem_destroy_callback+0xa0/0xa0 [ 174.271946] shmem_alloc_inode+0x18/0x40 [ 174.276007] ? shmem_destroy_callback+0xa0/0xa0 [ 174.280683] alloc_inode+0x5d/0x170 [ 174.284356] new_inode+0x1d/0xf0 [ 174.287994] shmem_get_inode+0x8b/0x890 [ 174.291976] __shmem_file_setup.part.0+0x104/0x3c0 [ 174.297085] ? shmem_create+0x30/0x30 [ 174.300956] ? __alloc_fd+0x1be/0x490 [ 174.305049] SyS_memfd_create+0x1fc/0x3c0 [ 174.309331] ? shmem_fcntl+0x120/0x120 [ 174.313640] ? SyS_clock_settime+0x1a0/0x1a0 [ 174.318172] ? do_syscall_64+0x4c/0x640 [ 174.322145] ? shmem_fcntl+0x120/0x120 [ 174.326046] do_syscall_64+0x1d5/0x640 [ 174.329931] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 174.335107] RIP: 0033:0x45deb9 [ 174.338287] RSP: 002b:00007f37146b9a28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 174.346014] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045deb9 19:41:56 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:41:56 executing program 4 (fault-call:3 fault-nth:3): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x0, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 174.353269] RDX: 0000000020000230 RSI: 0000000000000000 RDI: 00000000004c2927 [ 174.360538] RBP: 0000000000800000 R08: 0000000020000230 R09: 0000000000000000 [ 174.367809] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000002 [ 174.375083] R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020014900 [ 174.439920] FAULT_INJECTION: forcing a failure. [ 174.439920] name failslab, interval 1, probability 0, space 0, times 0 [ 174.460367] CPU: 0 PID: 13931 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 174.468367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.477903] Call Trace: [ 174.480497] dump_stack+0x1b2/0x283 [ 174.484134] should_fail.cold+0x10a/0x154 [ 174.488296] should_failslab+0xd6/0x130 [ 174.492292] kmem_cache_alloc+0x28e/0x3c0 [ 174.496536] get_empty_filp+0x86/0x3e0 [ 174.500431] alloc_file+0x23/0x440 [ 174.503977] __shmem_file_setup.part.0+0x198/0x3c0 [ 174.508915] ? shmem_create+0x30/0x30 [ 174.512715] ? __alloc_fd+0x1be/0x490 [ 174.515689] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.516517] SyS_memfd_create+0x1fc/0x3c0 [ 174.516526] ? shmem_fcntl+0x120/0x120 [ 174.516539] ? SyS_clock_settime+0x1a0/0x1a0 [ 174.538531] ? do_syscall_64+0x4c/0x640 [ 174.542503] ? shmem_fcntl+0x120/0x120 [ 174.546373] do_syscall_64+0x1d5/0x640 [ 174.550879] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 174.556136] RIP: 0033:0x45deb9 [ 174.559308] RSP: 002b:00007f37146daa28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 174.567012] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045deb9 [ 174.574278] RDX: 0000000020000230 RSI: 0000000000000000 RDI: 00000000004c2927 [ 174.581526] RBP: 0000000000800000 R08: 0000000020000230 R09: 0000000000000000 [ 174.588789] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000002 [ 174.596040] R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020014900 19:41:57 executing program 5 (fault-call:3 fault-nth:8): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:57 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c000000100000001400000300000001000000", 0x68, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:57 executing program 4 (fault-call:3 fault-nth:4): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x0, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:57 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:41:57 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCNXCL(r0, 0x540d) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x7fff}) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f0000000000)) accept$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c) r7 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x3ff, 0x32543) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 174.779930] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:41:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x0, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:57 executing program 4 (fault-call:3 fault-nth:5): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:57 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 174.830529] FAULT_INJECTION: forcing a failure. [ 174.830529] name failslab, interval 1, probability 0, space 0, times 0 [ 174.843383] CPU: 1 PID: 13955 Comm: syz-executor.5 Not tainted 4.14.210-syzkaller #0 19:41:57 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c000000100000001400000300000001000000", 0x68, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:57 executing program 5 (fault-call:3 fault-nth:9): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) [ 174.843390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 19:41:57 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 174.843394] Call Trace: [ 174.843409] dump_stack+0x1b2/0x283 [ 174.843424] should_fail.cold+0x10a/0x154 [ 174.843445] should_failslab+0xd6/0x130 [ 174.843459] kmem_cache_alloc+0x28e/0x3c0 [ 174.843473] get_empty_filp+0x86/0x3e0 [ 174.843483] path_openat+0x84/0x2970 [ 174.843499] ? generic_file_write_iter+0x437/0x650 [ 174.843511] ? path_lookupat+0x780/0x780 [ 174.843521] ? trace_hardirqs_on+0x10/0x10 [ 174.843537] do_filp_open+0x179/0x3c0 [ 174.843545] ? may_open_dev+0xe0/0xe0 [ 174.843556] ? __alloc_fd+0x1be/0x490 [ 174.843569] ? lock_downgrade+0x740/0x740 [ 174.843581] ? do_raw_spin_unlock+0x164/0x220 [ 174.843592] ? _raw_spin_unlock+0x29/0x40 [ 174.843600] ? __alloc_fd+0x1be/0x490 [ 174.843615] do_sys_open+0x296/0x410 [ 174.843626] ? filp_open+0x60/0x60 [ 174.843635] ? SyS_pwrite64+0xca/0x140 [ 174.843644] ? fput+0xb/0x140 [ 174.843654] ? do_syscall_64+0x4c/0x640 [ 174.843662] ? do_sys_open+0x410/0x410 [ 174.843673] do_syscall_64+0x1d5/0x640 [ 174.843688] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 174.843695] RIP: 0033:0x4179b1 [ 174.843700] RSP: 002b:00007fe3e4e3da20 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 174.843710] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004179b1 [ 174.843716] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007fe3e4e3dae0 [ 174.843722] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 174.843727] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000002 [ 174.843737] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 19:41:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x0, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:57 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 174.859644] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.861510] FAULT_INJECTION: forcing a failure. [ 174.861510] name failslab, interval 1, probability 0, space 0, times 0 [ 174.861552] CPU: 1 PID: 13959 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 174.861558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.861561] Call Trace: [ 174.861574] dump_stack+0x1b2/0x283 [ 174.861587] should_fail.cold+0x10a/0x154 [ 174.861601] should_failslab+0xd6/0x130 19:41:57 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 174.861613] kmem_cache_alloc_trace+0x29a/0x3d0 [ 174.861628] apparmor_file_alloc_security+0x129/0x800 [ 174.861641] security_file_alloc+0x66/0xa0 [ 174.861650] ? selinux_is_enabled+0x5/0x50 [ 174.861660] get_empty_filp+0x15c/0x3e0 [ 174.861669] alloc_file+0x23/0x440 [ 174.861681] __shmem_file_setup.part.0+0x198/0x3c0 [ 174.861689] ? shmem_create+0x30/0x30 [ 174.861697] ? __alloc_fd+0x1be/0x490 [ 174.861711] SyS_memfd_create+0x1fc/0x3c0 [ 174.861719] ? shmem_fcntl+0x120/0x120 [ 174.861728] ? SyS_clock_settime+0x1a0/0x1a0 [ 174.861745] ? do_syscall_64+0x4c/0x640 [ 174.861753] ? shmem_fcntl+0x120/0x120 [ 174.861764] do_syscall_64+0x1d5/0x640 [ 174.861781] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 174.861788] RIP: 0033:0x45deb9 [ 174.861792] RSP: 002b:00007f37146daa28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 174.861800] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045deb9 [ 174.861805] RDX: 0000000020000230 RSI: 0000000000000000 RDI: 00000000004c2927 [ 174.861809] RBP: 0000000000800000 R08: 0000000020000230 R09: 0000000000000000 [ 174.861814] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000002 [ 174.861818] R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020014900 [ 174.861854] f2fs_msg: 210 callbacks suppressed [ 174.861863] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(0) root(3) [ 174.861872] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 174.862193] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 174.862200] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 19:41:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x0, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:57 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) [ 174.862309] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(0) root(3) [ 174.862315] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 174.862323] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 174.862330] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 174.908393] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 174.958317] FAULT_INJECTION: forcing a failure. [ 174.958317] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 174.958329] CPU: 0 PID: 13980 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 174.958335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.958338] Call Trace: [ 174.958354] dump_stack+0x1b2/0x283 [ 174.958369] should_fail.cold+0x10a/0x154 [ 174.958384] __alloc_pages_nodemask+0x22c/0x2720 [ 174.958396] ? __lock_acquire+0x5fc/0x3f20 [ 174.958414] ? static_obj+0x50/0x50 [ 174.958421] ? trace_hardirqs_on+0x10/0x10 [ 174.958432] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 174.958443] ? __lock_acquire+0x5fc/0x3f20 [ 174.958455] ? __lock_acquire+0x5fc/0x3f20 [ 174.958467] ? __lock_acquire+0x5fc/0x3f20 [ 174.958485] alloc_pages_vma+0xd2/0x6d0 [ 174.958500] shmem_alloc_page+0xe0/0x180 [ 174.958509] ? shmem_swapin+0x180/0x180 [ 174.958522] ? __radix_tree_lookup+0x1b5/0x2e0 [ 174.958532] ? find_get_entry+0x312/0x630 [ 174.958544] ? check_preemption_disabled+0x35/0x240 [ 174.958560] ? __vm_enough_memory+0x261/0x520 [ 174.958572] shmem_alloc_and_acct_page+0x126/0x620 [ 174.958583] ? simple_xattr_get+0xe5/0x160 [ 174.958594] shmem_getpage_gfp+0x302/0x2810 [ 174.958611] ? simple_xattr_get+0xe5/0x160 [ 174.958620] ? shmem_alloc_and_acct_page+0x620/0x620 [ 174.958635] shmem_write_begin+0xeb/0x190 [ 174.958649] generic_perform_write+0x1c9/0x420 [ 174.958664] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 174.958674] ? current_time+0xb0/0xb0 [ 174.958683] ? lock_acquire+0x170/0x3f0 [ 174.958696] __generic_file_write_iter+0x227/0x590 [ 174.958709] generic_file_write_iter+0x36f/0x650 [ 174.958724] __vfs_write+0x44c/0x630 [ 174.958733] ? do_truncate+0x129/0x1a0 [ 174.958743] ? kernel_read+0x110/0x110 [ 174.958771] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 174.958784] vfs_write+0x17f/0x4d0 [ 174.958798] SyS_pwrite64+0x116/0x140 [ 174.958809] ? SyS_pread64+0x140/0x140 [ 174.958818] ? fput+0xb/0x140 [ 174.958828] ? do_syscall_64+0x4c/0x640 [ 174.958838] ? SyS_pread64+0x140/0x140 [ 174.958850] do_syscall_64+0x1d5/0x640 [ 174.958868] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 174.958876] RIP: 0033:0x417a17 [ 174.958881] RSP: 002b:00007f37146daa20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 174.958891] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000417a17 [ 174.958897] RDX: 0000000000000069 RSI: 0000000020010000 RDI: 0000000000000006 [ 174.958902] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 174.958908] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000002 [ 174.958913] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000210 [ 174.971650] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 174.971659] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 174.984690] FAULT_INJECTION: forcing a failure. [ 174.984690] name failslab, interval 1, probability 0, space 0, times 0 [ 175.252623] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 175.268147] CPU: 0 PID: 13988 Comm: syz-executor.5 Not tainted 4.14.210-syzkaller #0 [ 175.666971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 175.666976] Call Trace: [ 175.666997] dump_stack+0x1b2/0x283 [ 175.682734] should_fail.cold+0x10a/0x154 [ 175.686976] should_failslab+0xd6/0x130 [ 175.691140] kmem_cache_alloc_trace+0x29a/0x3d0 [ 175.695796] apparmor_file_alloc_security+0x129/0x800 [ 175.701245] security_file_alloc+0x66/0xa0 [ 175.705475] ? selinux_is_enabled+0x5/0x50 [ 175.709692] get_empty_filp+0x15c/0x3e0 [ 175.713653] path_openat+0x84/0x2970 [ 175.717365] ? generic_file_write_iter+0x437/0x650 [ 175.722276] ? path_lookupat+0x780/0x780 [ 175.726329] ? trace_hardirqs_on+0x10/0x10 [ 175.730586] do_filp_open+0x179/0x3c0 [ 175.734387] ? may_open_dev+0xe0/0xe0 [ 175.738437] ? __alloc_fd+0x1be/0x490 [ 175.742266] ? lock_downgrade+0x740/0x740 [ 175.746496] ? do_raw_spin_unlock+0x164/0x220 [ 175.751072] ? _raw_spin_unlock+0x29/0x40 [ 175.755325] ? __alloc_fd+0x1be/0x490 [ 175.759128] do_sys_open+0x296/0x410 [ 175.762823] ? filp_open+0x60/0x60 [ 175.766360] ? SyS_pwrite64+0xca/0x140 [ 175.770226] ? fput+0xb/0x140 [ 175.773320] ? do_syscall_64+0x4c/0x640 [ 175.777276] ? do_sys_open+0x410/0x410 [ 175.781159] do_syscall_64+0x1d5/0x640 [ 175.785130] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 175.790384] RIP: 0033:0x4179b1 [ 175.793554] RSP: 002b:00007fe3e4e3da20 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 175.801244] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004179b1 [ 175.808503] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007fe3e4e3dae0 [ 175.815785] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 175.823229] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000002 [ 175.830503] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 19:41:58 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:41:58 executing program 4 (fault-call:3 fault-nth:6): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x0, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:58 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000002c0)) ioctl$TIOCNXCL(r1, 0x540d) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000140)=0x2000000) read$dsp(r3, &(0x7f0000000040)=""/18, 0x12) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000180)={0xd42d, 0x1c7, 0x7ff}) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2b68f8195335807620163d7dea00b9e1cce312cf540428528eee2c15f1197cbfd234f2742e8423552153475a5ec6bfb1813e42ad"]) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup(r4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={[], [], @remote}, 0x9, 0x2, 0x0, 0x9, 0x2c5, 0x5}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$llc_int(r5, 0x10c, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x240080, 0x0) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000240)={0x2, 0x7, 0x6ec, 0xb0, 0x14, "b39b16121b7910e70c5ad68fcc43f8b9753b6f"}) 19:41:58 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:58 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 175.898489] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 175.980151] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 175.989555] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 175.993722] FAULT_INJECTION: forcing a failure. [ 175.993722] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 176.027665] CPU: 0 PID: 14046 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 176.035597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 176.044953] Call Trace: [ 176.047551] dump_stack+0x1b2/0x283 [ 176.051187] should_fail.cold+0x10a/0x154 [ 176.055345] __alloc_pages_nodemask+0x22c/0x2720 [ 176.060113] ? __lock_acquire+0x5fc/0x3f20 [ 176.064529] ? static_obj+0x50/0x50 [ 176.068277] ? trace_hardirqs_on+0x10/0x10 [ 176.072512] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 176.077358] ? __lock_acquire+0x5fc/0x3f20 [ 176.081583] ? __lock_acquire+0x5fc/0x3f20 [ 176.085807] alloc_pages_vma+0xd2/0x6d0 [ 176.089767] shmem_alloc_page+0xe0/0x180 [ 176.093829] ? shmem_swapin+0x180/0x180 [ 176.097803] ? trace_hardirqs_on+0x10/0x10 [ 176.102037] ? shmem_add_to_page_cache+0x3bf/0x730 [ 176.106952] ? __radix_tree_lookup+0x1b5/0x2e0 [ 176.111516] ? find_get_entry+0x312/0x630 [ 176.115737] ? check_preemption_disabled+0x35/0x240 [ 176.120742] ? __vm_enough_memory+0x261/0x520 [ 176.125224] shmem_alloc_and_acct_page+0x126/0x620 [ 176.130142] shmem_getpage_gfp+0x302/0x2810 [ 176.134453] ? shmem_alloc_and_acct_page+0x620/0x620 [ 176.139553] shmem_write_begin+0xeb/0x190 [ 176.143686] generic_perform_write+0x1c9/0x420 [ 176.148266] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 176.152921] ? current_time+0xb0/0xb0 [ 176.156711] ? lock_acquire+0x170/0x3f0 [ 176.160683] __generic_file_write_iter+0x227/0x590 [ 176.165657] generic_file_write_iter+0x36f/0x650 [ 176.170402] __vfs_write+0x44c/0x630 [ 176.174096] ? kernel_read+0x110/0x110 [ 176.177971] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 176.182979] vfs_write+0x17f/0x4d0 [ 176.186504] SyS_pwrite64+0x116/0x140 [ 176.190375] ? SyS_pread64+0x140/0x140 [ 176.194267] ? fput+0xb/0x140 [ 176.197368] ? do_syscall_64+0x4c/0x640 [ 176.201369] ? SyS_pread64+0x140/0x140 [ 176.205268] do_syscall_64+0x1d5/0x640 [ 176.209156] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 176.214357] RIP: 0033:0x417a17 [ 176.217665] RSP: 002b:00007f37146daa20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 19:41:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x0, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:58 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:58 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 176.225725] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000417a17 [ 176.233159] RDX: 00000000000000a6 RSI: 0000000020000040 RDI: 0000000000000006 [ 176.240536] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 176.248041] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000002 [ 176.255304] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000228 19:41:58 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:41:58 executing program 4 (fault-call:3 fault-nth:7): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:58 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, 0x0) [ 176.295281] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.380558] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.405948] FAULT_INJECTION: forcing a failure. [ 176.405948] name failslab, interval 1, probability 0, space 0, times 0 [ 176.417482] CPU: 0 PID: 14080 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 176.425445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 176.434804] Call Trace: [ 176.437391] dump_stack+0x1b2/0x283 [ 176.441028] should_fail.cold+0x10a/0x154 [ 176.445165] should_failslab+0xd6/0x130 [ 176.449228] kmem_cache_alloc+0x40/0x3c0 [ 176.453298] radix_tree_node_alloc.constprop.0+0x1b0/0x2f0 [ 176.459032] radix_tree_extend+0x158/0x3e0 [ 176.463283] __radix_tree_create+0x3a2/0x4b0 [ 176.467815] __radix_tree_insert+0x98/0x4f0 [ 176.472134] ? shmem_add_to_page_cache+0x3bf/0x730 [ 176.477066] ? __radix_tree_create+0x4b0/0x4b0 [ 176.481779] ? shmem_add_to_page_cache+0x1e7/0x730 [ 176.486800] shmem_add_to_page_cache+0x503/0x730 [ 176.491564] ? shmem_recalc_inode+0x2f0/0x2f0 [ 176.496255] ? __radix_tree_preload+0x1c3/0x250 [ 176.500921] shmem_getpage_gfp+0x115b/0x2810 [ 176.505319] ? shmem_alloc_and_acct_page+0x620/0x620 [ 176.510416] shmem_write_begin+0xeb/0x190 [ 176.514547] generic_perform_write+0x1c9/0x420 [ 176.519114] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 176.523760] ? current_time+0xb0/0xb0 [ 176.527989] ? lock_acquire+0x170/0x3f0 [ 176.531944] __generic_file_write_iter+0x227/0x590 [ 176.537040] generic_file_write_iter+0x36f/0x650 [ 176.541808] __vfs_write+0x44c/0x630 [ 176.545509] ? kernel_read+0x110/0x110 [ 176.549399] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 176.554410] vfs_write+0x17f/0x4d0 [ 176.557940] SyS_pwrite64+0x116/0x140 [ 176.561731] ? SyS_pread64+0x140/0x140 [ 176.565602] ? fput+0xb/0x140 [ 176.568699] ? do_syscall_64+0x4c/0x640 [ 176.572655] ? SyS_pread64+0x140/0x140 [ 176.576529] do_syscall_64+0x1d5/0x640 [ 176.580412] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 176.585794] RIP: 0033:0x417a17 [ 176.588988] RSP: 002b:00007f37146daa20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 176.599508] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000417a17 [ 176.607145] RDX: 00000000000000a6 RSI: 0000000020000040 RDI: 0000000000000006 [ 176.614844] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 176.622656] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000002 [ 176.630225] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000228 19:41:59 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000100)) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) 19:41:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x0, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:41:59 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00ccbff5a68d812dad241f9f4052000568fd407fa585d0b6b9b93f4752e81efb64b1aa546204e6b58c72298fc613b3e82c6b9cea76e3cd3c1ae6585a6b1267ab605e6398e9bbd68feb723d916932ca3f0e427f58bfed6d21a007"]) 19:41:59 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:41:59 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, 0x0) 19:41:59 executing program 4 (fault-call:3 fault-nth:8): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) [ 176.774841] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 176.840224] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 176.850346] FAULT_INJECTION: forcing a failure. [ 176.850346] name failslab, interval 1, probability 0, space 0, times 0 [ 176.861644] CPU: 0 PID: 14111 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 176.869513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 176.878868] Call Trace: [ 176.881458] dump_stack+0x1b2/0x283 [ 176.885070] should_fail.cold+0x10a/0x154 [ 176.889212] should_failslab+0xd6/0x130 [ 176.893176] kmem_cache_alloc+0x40/0x3c0 [ 176.897245] radix_tree_node_alloc.constprop.0+0x1b0/0x2f0 [ 176.902884] radix_tree_extend+0x158/0x3e0 [ 176.907134] __radix_tree_create+0x3a2/0x4b0 [ 176.911679] __radix_tree_insert+0x98/0x4f0 [ 176.915996] ? shmem_add_to_page_cache+0x3bf/0x730 [ 176.920931] ? __radix_tree_create+0x4b0/0x4b0 [ 176.925697] ? shmem_add_to_page_cache+0x1e7/0x730 [ 176.930874] shmem_add_to_page_cache+0x503/0x730 [ 176.935737] ? shmem_recalc_inode+0x2f0/0x2f0 [ 176.940628] ? __radix_tree_preload+0x1c3/0x250 [ 176.945656] shmem_getpage_gfp+0x115b/0x2810 [ 176.950367] ? shmem_alloc_and_acct_page+0x620/0x620 [ 176.955506] shmem_write_begin+0xeb/0x190 [ 176.959656] generic_perform_write+0x1c9/0x420 [ 176.965905] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 176.970662] ? current_time+0xb0/0xb0 [ 176.974450] ? lock_acquire+0x170/0x3f0 [ 176.978446] __generic_file_write_iter+0x227/0x590 [ 176.984181] generic_file_write_iter+0x36f/0x650 [ 176.989051] __vfs_write+0x44c/0x630 [ 176.992861] ? kernel_read+0x110/0x110 [ 176.996753] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 177.001807] vfs_write+0x17f/0x4d0 [ 177.005355] SyS_pwrite64+0x116/0x140 [ 177.009142] ? SyS_pread64+0x140/0x140 [ 177.013013] ? fput+0xb/0x140 [ 177.016202] ? do_syscall_64+0x4c/0x640 [ 177.020168] ? SyS_pread64+0x140/0x140 [ 177.024054] do_syscall_64+0x1d5/0x640 [ 177.027945] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 177.033129] RIP: 0033:0x417a17 19:41:59 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, 0x0) 19:41:59 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:41:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 177.036329] RSP: 002b:00007f37146daa20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 177.044020] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000417a17 [ 177.051287] RDX: 00000000000000a6 RSI: 0000000020000040 RDI: 0000000000000006 [ 177.058599] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 177.065854] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000002 [ 177.073103] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000228 19:41:59 executing program 5: ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000040)={'veth0_to_bridge\x00', {0x2, 0x0, @multicast2}}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0xc1, 0x400000}], 0x2800044, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]) 19:41:59 executing program 4 (fault-call:3 fault-nth:9): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:41:59 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 177.249523] FAULT_INJECTION: forcing a failure. [ 177.249523] name failslab, interval 1, probability 0, space 0, times 0 [ 177.260760] CPU: 0 PID: 14152 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 177.268625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.277988] Call Trace: [ 177.280602] dump_stack+0x1b2/0x283 [ 177.284225] should_fail.cold+0x10a/0x154 [ 177.288375] should_failslab+0xd6/0x130 [ 177.292332] kmem_cache_alloc+0x40/0x3c0 [ 177.296378] radix_tree_node_alloc.constprop.0+0x1b0/0x2f0 [ 177.302000] __radix_tree_create+0x323/0x4b0 [ 177.306415] __radix_tree_insert+0x98/0x4f0 [ 177.310731] ? shmem_add_to_page_cache+0x3bf/0x730 [ 177.315685] ? __radix_tree_create+0x4b0/0x4b0 [ 177.320268] ? shmem_add_to_page_cache+0x1e7/0x730 [ 177.325198] shmem_add_to_page_cache+0x503/0x730 [ 177.329937] ? shmem_recalc_inode+0x2f0/0x2f0 [ 177.334415] ? __radix_tree_preload+0x1c3/0x250 [ 177.339066] shmem_getpage_gfp+0x115b/0x2810 [ 177.343473] ? shmem_alloc_and_acct_page+0x620/0x620 [ 177.348601] shmem_write_begin+0xeb/0x190 [ 177.352875] generic_perform_write+0x1c9/0x420 [ 177.357464] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 177.362124] ? current_time+0xb0/0xb0 [ 177.365908] ? lock_acquire+0x170/0x3f0 [ 177.369870] __generic_file_write_iter+0x227/0x590 [ 177.374809] generic_file_write_iter+0x36f/0x650 [ 177.379562] __vfs_write+0x44c/0x630 [ 177.383256] ? kernel_read+0x110/0x110 [ 177.387130] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 177.392133] vfs_write+0x17f/0x4d0 [ 177.395656] SyS_pwrite64+0x116/0x140 [ 177.399452] ? SyS_pread64+0x140/0x140 [ 177.403334] ? fput+0xb/0x140 [ 177.406442] ? do_syscall_64+0x4c/0x640 [ 177.410400] ? SyS_pread64+0x140/0x140 [ 177.414283] do_syscall_64+0x1d5/0x640 [ 177.418164] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 177.423343] RIP: 0033:0x417a17 [ 177.426522] RSP: 002b:00007f37146daa20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 177.434227] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000417a17 [ 177.441529] RDX: 00000000000000a6 RSI: 0000000020000040 RDI: 0000000000000006 [ 177.448779] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 177.456204] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000002 [ 177.463460] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000228 19:42:00 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x1, 0xfe) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0xfffffffd}, 0xf) 19:42:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:00 executing program 1 (fault-call:3 fault-nth:0): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) [ 177.633080] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:42:00 executing program 4 (fault-call:3 fault-nth:10): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:00 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x28000, 0x0) r3 = inotify_init() r4 = openat$vcs(0xffffff9c, &(0x7f00000004c0)='/dev/vcs\x00', 0x4440, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {}, {0x0, @struct, 0x0}, {0x0, @struct}}) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f0000000600)={{r4}, 0x0, 0x0, @inherit={0x0, 0x0}, @devid=r5}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000240)={r5, 0x4, 0x1, [0x5, 0x4, 0xfff, 0x9, 0x40], [0x81, 0x7, 0x200, 0x0, 0x54, 0xce6, 0x7, 0x3, 0x1ff, 0x8000, 0x6, 0x698f1bf, 0x9, 0x7fffffff, 0x8000, 0x7ff, 0x1000, 0x2, 0x6, 0xff, 0x9, 0x27, 0x6, 0x1b, 0x3, 0xfa77, 0x2d, 0x5, 0x9, 0x100000000, 0x14, 0x9, 0x1000, 0xfffffffffffffc01, 0x80000000, 0x1f, 0x9, 0x8, 0x3, 0x1, 0x8, 0x76940e18, 0x0, 0x1, 0xee, 0x5, 0x9, 0x7f, 0xc5c, 0x8, 0x7, 0x46, 0x1000, 0x7, 0x14, 0x0, 0x7, 0x3, 0xd4, 0x3, 0x800, 0xfa6, 0x10000, 0x3, 0x0, 0x35, 0x3, 0x77d2cabf, 0xfffffffffffffffd, 0x3ff, 0x5, 0x80000001, 0x8, 0xe6, 0x8, 0xfffffffffffffff7, 0x2, 0x40, 0x1000, 0x8001, 0x2, 0xda, 0x7ff, 0x5, 0xffff, 0xe0d, 0x80000000, 0x7, 0x7, 0xf9a7, 0x18000000, 0x6870, 0x9c7a, 0x5, 0x0, 0xfffffffffffff7e9, 0x9, 0x8, 0x10000, 0x100000000, 0x8, 0xffffffff, 0xf6f, 0x4, 0x0, 0x2c, 0x5, 0x0, 0x100000000, 0xfb, 0xffff, 0x3ff, 0xee7, 0x6, 0x8, 0x8001, 0x7fffffff, 0x686, 0x1, 0x2, 0x2]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:00 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 177.731538] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 177.736280] FAULT_INJECTION: forcing a failure. [ 177.736280] name failslab, interval 1, probability 0, space 0, times 0 [ 177.756152] FAULT_INJECTION: forcing a failure. [ 177.756152] name failslab, interval 1, probability 0, space 0, times 0 19:42:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0x0, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 177.784633] CPU: 1 PID: 14177 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 177.792722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.802256] Call Trace: [ 177.804853] dump_stack+0x1b2/0x283 [ 177.808494] should_fail.cold+0x10a/0x154 [ 177.812692] should_failslab+0xd6/0x130 [ 177.816684] kmem_cache_alloc+0x28e/0x3c0 [ 177.820846] getname_flags+0xc8/0x550 [ 177.824658] do_sys_open+0x1ce/0x410 19:42:00 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x29c) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x3) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0xffffffff, @empty, 0xfffffffc}, 0x1c) [ 177.825152] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 177.828458] ? filp_open+0x60/0x60 [ 177.840003] ? SyS_pwrite64+0xca/0x140 [ 177.844018] ? fput+0xb/0x140 [ 177.847141] ? do_syscall_64+0x4c/0x640 [ 177.851209] ? do_sys_open+0x410/0x410 [ 177.855115] do_syscall_64+0x1d5/0x640 [ 177.859007] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 177.864480] RIP: 0033:0x4179b1 [ 177.867686] RSP: 002b:00007f37146daa20 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 177.875476] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004179b1 [ 177.882837] RDX: 00000000000000a6 RSI: 0000000000000002 RDI: 00007f37146daae0 [ 177.890245] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 177.897503] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000002 [ 177.904754] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 19:42:00 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 177.929066] CPU: 0 PID: 14183 Comm: syz-executor.1 Not tainted 4.14.210-syzkaller #0 [ 177.936992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.946346] Call Trace: [ 177.949030] dump_stack+0x1b2/0x283 [ 177.952673] should_fail.cold+0x10a/0x154 [ 177.956834] should_failslab+0xd6/0x130 [ 177.960821] __kmalloc+0x2c1/0x400 [ 177.964362] ? SyS_memfd_create+0xbc/0x3c0 [ 177.968689] SyS_memfd_create+0xbc/0x3c0 [ 177.972761] ? shmem_fcntl+0x120/0x120 [ 177.976659] ? SyS_clock_settime+0x1a0/0x1a0 [ 177.981072] ? do_syscall_64+0x4c/0x640 [ 177.985049] ? shmem_fcntl+0x120/0x120 [ 177.988941] do_syscall_64+0x1d5/0x640 [ 177.992828] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 177.998000] RIP: 0033:0x45deb9 [ 178.001168] RSP: 002b:00007f7485806a28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 178.008959] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045deb9 [ 178.016235] RDX: 0000000020000230 RSI: 0000000000000000 RDI: 00000000004c2927 [ 178.023489] RBP: 0000000000800000 R08: 0000000020000230 R09: 0000000000000000 19:42:00 executing program 4 (fault-call:3 fault-nth:11): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:00 executing program 1 (fault-call:3 fault-nth:1): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:00 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f00000000c0), &(0x7f0000000140)=0x4) write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x20, 0x2}, 0x81}}, 0x18) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x118, r3, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4c59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8714}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xedd}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x8001}, 0xc000) 19:42:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0x0, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 178.030762] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000002 [ 178.038286] R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020014900 [ 178.104427] nla_parse: 4 callbacks suppressed [ 178.104434] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 178.139312] FAULT_INJECTION: forcing a failure. [ 178.139312] name failslab, interval 1, probability 0, space 0, times 0 [ 178.151430] FAULT_INJECTION: forcing a failure. [ 178.151430] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 178.163246] CPU: 0 PID: 14210 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 178.171132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.180597] Call Trace: [ 178.183184] dump_stack+0x1b2/0x283 [ 178.186982] should_fail.cold+0x10a/0x154 [ 178.191115] __alloc_pages_nodemask+0x22c/0x2720 [ 178.195856] ? __lock_acquire+0x5fc/0x3f20 [ 178.200159] ? generic_file_write_iter+0x37a/0x650 [ 178.205066] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 178.209974] ? trace_hardirqs_on+0x10/0x10 [ 178.214186] ? lock_downgrade+0x740/0x740 [ 178.218491] ? up_write+0x17/0x60 [ 178.222192] ? generic_file_write_iter+0x2f8/0x650 [ 178.227110] cache_grow_begin+0x8f/0x420 [ 178.231156] cache_alloc_refill+0x273/0x350 [ 178.235517] kmem_cache_alloc+0x333/0x3c0 [ 178.239681] getname_flags+0xc8/0x550 [ 178.243472] do_sys_open+0x1ce/0x410 [ 178.247431] ? filp_open+0x60/0x60 [ 178.250981] ? SyS_pwrite64+0xca/0x140 [ 178.254860] ? fput+0xb/0x140 [ 178.258030] ? do_syscall_64+0x4c/0x640 [ 178.261980] ? do_sys_open+0x410/0x410 [ 178.265845] do_syscall_64+0x1d5/0x640 [ 178.269719] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 178.274912] RIP: 0033:0x4179b1 [ 178.278079] RSP: 002b:00007f37146daa20 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 178.285777] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004179b1 [ 178.293028] RDX: 00000000000000a6 RSI: 0000000000000002 RDI: 00007f37146daae0 [ 178.300289] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 178.307894] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000002 [ 178.315143] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 [ 178.359808] CPU: 0 PID: 14211 Comm: syz-executor.1 Not tainted 4.14.210-syzkaller #0 [ 178.367729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.377076] Call Trace: [ 178.379838] dump_stack+0x1b2/0x283 [ 178.383548] should_fail.cold+0x10a/0x154 [ 178.387690] should_failslab+0xd6/0x130 [ 178.391752] kmem_cache_alloc+0x28e/0x3c0 [ 178.395884] __d_alloc+0x2a/0xa20 [ 178.399326] ? lock_downgrade+0x740/0x740 [ 178.403535] __shmem_file_setup.part.0+0xcb/0x3c0 [ 178.408622] ? shmem_create+0x30/0x30 [ 178.412412] ? __alloc_fd+0x1be/0x490 [ 178.416220] SyS_memfd_create+0x1fc/0x3c0 [ 178.420354] ? shmem_fcntl+0x120/0x120 [ 178.424227] ? SyS_clock_settime+0x1a0/0x1a0 [ 178.428621] ? do_syscall_64+0x4c/0x640 [ 178.432580] ? shmem_fcntl+0x120/0x120 [ 178.436453] do_syscall_64+0x1d5/0x640 [ 178.440328] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 178.445524] RIP: 0033:0x45deb9 [ 178.448697] RSP: 002b:00007f7485806a28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 19:42:00 executing program 1 (fault-call:3 fault-nth:2): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0x0, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 178.456498] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045deb9 [ 178.463748] RDX: 0000000020000230 RSI: 0000000000000000 RDI: 00000000004c2927 [ 178.471087] RBP: 0000000000800000 R08: 0000000020000230 R09: 0000000000000000 [ 178.478336] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000002 [ 178.486773] R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020014900 [ 178.497796] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:42:00 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x3fe}, {0x0, 0x13, 0x400000}], 0x0, &(0x7f0000000080)={[{@noinline_dentry='noinline_dentry'}, {@alloc_mode_def='alloc_mode=default'}]}) [ 178.544558] FAULT_INJECTION: forcing a failure. [ 178.544558] name failslab, interval 1, probability 0, space 0, times 0 [ 178.558359] CPU: 0 PID: 14236 Comm: syz-executor.1 Not tainted 4.14.210-syzkaller #0 [ 178.566410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.575770] Call Trace: [ 178.578365] dump_stack+0x1b2/0x283 [ 178.582005] should_fail.cold+0x10a/0x154 [ 178.586174] should_failslab+0xd6/0x130 [ 178.590599] kmem_cache_alloc+0x28e/0x3c0 [ 178.594741] ? shmem_destroy_callback+0xa0/0xa0 [ 178.600542] shmem_alloc_inode+0x18/0x40 [ 178.604585] ? shmem_destroy_callback+0xa0/0xa0 [ 178.609605] alloc_inode+0x5d/0x170 [ 178.613214] new_inode+0x1d/0xf0 [ 178.616997] shmem_get_inode+0x8b/0x890 [ 178.621130] __shmem_file_setup.part.0+0x104/0x3c0 [ 178.626049] ? shmem_create+0x30/0x30 [ 178.629829] ? __alloc_fd+0x1be/0x490 [ 178.633614] SyS_memfd_create+0x1fc/0x3c0 [ 178.637749] ? shmem_fcntl+0x120/0x120 [ 178.641714] ? SyS_clock_settime+0x1a0/0x1a0 [ 178.646103] ? do_syscall_64+0x4c/0x640 [ 178.650061] ? shmem_fcntl+0x120/0x120 [ 178.653932] do_syscall_64+0x1d5/0x640 [ 178.657824] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 178.662993] RIP: 0033:0x45deb9 [ 178.666336] RSP: 002b:00007f7485806a28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 178.674039] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045deb9 [ 178.681291] RDX: 0000000020000230 RSI: 0000000000000000 RDI: 00000000004c2927 19:42:01 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) read$proc_mixer(0xffffffffffffffff, &(0x7f0000000080)=""/69, 0x45) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x1, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 19:42:01 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:01 executing program 4 (fault-call:3 fault-nth:12): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) [ 178.688667] RBP: 0000000000800000 R08: 0000000020000230 R09: 0000000000000000 [ 178.695915] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000002 [ 178.703166] R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020014900 19:42:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x0, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:01 executing program 1 (fault-call:3 fault-nth:3): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x0, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 178.799271] FAULT_INJECTION: forcing a failure. [ 178.799271] name failslab, interval 1, probability 0, space 0, times 0 [ 178.803788] FAULT_INJECTION: forcing a failure. [ 178.803788] name failslab, interval 1, probability 0, space 0, times 0 [ 178.836606] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 178.851635] CPU: 0 PID: 14253 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 178.859556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.869174] Call Trace: [ 178.871766] dump_stack+0x1b2/0x283 [ 178.875399] should_fail.cold+0x10a/0x154 [ 178.879587] should_failslab+0xd6/0x130 [ 178.883565] kmem_cache_alloc+0x28e/0x3c0 [ 178.887908] get_empty_filp+0x86/0x3e0 [ 178.891795] path_openat+0x84/0x2970 [ 178.895529] ? generic_file_write_iter+0x37a/0x650 [ 178.900482] ? path_lookupat+0x780/0x780 [ 178.904540] ? trace_hardirqs_on+0x10/0x10 [ 178.908788] do_filp_open+0x179/0x3c0 [ 178.912595] ? may_open_dev+0xe0/0xe0 [ 178.916526] ? __alloc_fd+0x1be/0x490 [ 178.920337] ? lock_downgrade+0x740/0x740 [ 178.924499] ? do_raw_spin_unlock+0x164/0x220 [ 178.928999] ? _raw_spin_unlock+0x29/0x40 [ 178.933324] ? __alloc_fd+0x1be/0x490 [ 178.937242] do_sys_open+0x296/0x410 [ 178.940962] ? filp_open+0x60/0x60 [ 178.944586] ? SyS_pwrite64+0xca/0x140 [ 178.948477] ? fput+0xb/0x140 [ 178.951610] ? do_syscall_64+0x4c/0x640 [ 178.955659] ? do_sys_open+0x410/0x410 [ 178.959542] do_syscall_64+0x1d5/0x640 [ 178.963420] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 178.968594] RIP: 0033:0x4179b1 [ 178.971777] RSP: 002b:00007f37146daa20 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 178.979471] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004179b1 [ 178.986725] RDX: 00000000000000a6 RSI: 0000000000000002 RDI: 00007f37146daae0 [ 178.993985] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 179.001335] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000002 [ 179.009564] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 [ 179.016837] CPU: 1 PID: 14250 Comm: syz-executor.1 Not tainted 4.14.210-syzkaller #0 [ 179.024951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 179.035340] Call Trace: [ 179.038027] dump_stack+0x1b2/0x283 [ 179.041665] should_fail.cold+0x10a/0x154 [ 179.046004] should_failslab+0xd6/0x130 [ 179.049984] kmem_cache_alloc+0x28e/0x3c0 [ 179.054599] get_empty_filp+0x86/0x3e0 [ 179.058508] alloc_file+0x23/0x440 [ 179.062247] __shmem_file_setup.part.0+0x198/0x3c0 [ 179.067167] ? shmem_create+0x30/0x30 [ 179.071134] ? __alloc_fd+0x1be/0x490 [ 179.075908] SyS_memfd_create+0x1fc/0x3c0 [ 179.080128] ? shmem_fcntl+0x120/0x120 [ 179.084001] ? SyS_clock_settime+0x1a0/0x1a0 [ 179.088402] ? do_syscall_64+0x4c/0x640 [ 179.092447] ? shmem_fcntl+0x120/0x120 [ 179.096333] do_syscall_64+0x1d5/0x640 19:42:01 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x401}, {0x0, 0x0, 0x400001}], 0x84012, &(0x7f0000000140)=ANY=[@ANYBLOB="6170707261699e6859345ac19e09ee99937dae4f4eb2c70d799a51e3bc592e69466eb7f8c639f317d9766173e517719f155b0e5d109945fda7a99a010000000000116586ab8be885c29922"]) [ 179.100294] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 179.105467] RIP: 0033:0x45deb9 [ 179.108637] RSP: 002b:00007f7485806a28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 179.116413] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045deb9 [ 179.123680] RDX: 0000000020000230 RSI: 0000000000000000 RDI: 00000000004c2927 [ 179.130935] RBP: 0000000000800000 R08: 0000000020000230 R09: 0000000000000000 [ 179.138226] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000002 [ 179.145741] R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020014900 19:42:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x0, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:01 executing program 4 (fault-call:3 fault-nth:13): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:01 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0x0, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 179.237253] FAULT_INJECTION: forcing a failure. [ 179.237253] name failslab, interval 1, probability 0, space 0, times 0 [ 179.249540] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 179.270056] CPU: 0 PID: 14278 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 179.277968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 19:42:01 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000140)=0x2000000) read$dsp(r0, &(0x7f0000000040)=""/18, 0x12) r1 = syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x253e, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000180)="c3e9b87231c771eb9dfee8b0602cca8481dead147c3c0867400a2b4b45b1d87b2fdee3984ada67e20f3fcd75706195aa9b3ce2760957911eb0cac87c271ebb4cceee9907", 0x44, 0x4}, {&(0x7f0000000240)="82d86ccb80b1d85714c12d3ade3d4d2f6e2e09994f9110473a8cafe3fbbace29b29428ba2161beffc137e68e3e628cc91ca4976dc1eab9d2543d7b18c124b01ccdbb1c2daca4f542e07bf485f3c33b174e431321aa8f37d2948e3b6c0bd00b3363ac85e4192876501cc99a9182b7825dec49b3538f36d5b97308c06427cc58b553d6f42c3543dae7a8b1211105d5", 0x8e}, {&(0x7f0000000300)="1ebad8b867a74ef4aff0d8b4dbe601cd94e92a98597a1c9bc0b832ff04027d7fc14535bd7efde76e704ecc00d7c1eb30c83f61964fc3c2a59a405970095283b08312ec438544df4703ecb660481dd61faee4221a0951e8042e58abfd940c7e7d09edf2109b3e9dbba7d7dbb14552ba0759c6b646b3f75c428b1df2001fc5c801aedee3bfd67ca1453f5d68c5b51d3bfe2348db02cf6ac685e4bf656592b27d4021bc84c3c5a79de4443b52ce807cb0f39a841eef016bbdb290c59da1b71a267e01a150f5728eb1ac2103dafa6d7b9c7eead0f44f9b3b4084f95062d6", 0xdc, 0xe00}, {&(0x7f0000000400)="19391dc36bd3284cff016074f254aef7829bde595cd89cc5f57e0c511446a10b09b70db7023bbced4b13de6af2bf520e8145f02ede718f5064e0dd3db1da12682e2a1e6d80ba6d8dc1cacbd244fec3456e44ac549745ac2f6c54022052097bc83d3ed3ffeb4fa14644a2962f89e27ac23620257e1c232bf0e6d7597e0b783b87e53fea6766449f66e9fa2d66f2021faa8aaa", 0x92, 0x9}], 0x1003, &(0x7f0000000540)={[{@force='force'}, {@nobarrier='nobarrier'}, {@force='force'}], [{@context={'context', 0x3d, 'unconfined_u'}}]}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)=ANY=[@ANYBLOB='\x00']) [ 179.287350] Call Trace: [ 179.289947] dump_stack+0x1b2/0x283 [ 179.293605] should_fail.cold+0x10a/0x154 [ 179.297762] should_failslab+0xd6/0x130 [ 179.301748] kmem_cache_alloc_trace+0x29a/0x3d0 [ 179.306428] apparmor_file_alloc_security+0x129/0x800 [ 179.311639] security_file_alloc+0x66/0xa0 [ 179.315891] ? selinux_is_enabled+0x5/0x50 [ 179.320137] get_empty_filp+0x15c/0x3e0 [ 179.324209] path_openat+0x84/0x2970 [ 179.327932] ? generic_file_write_iter+0x37a/0x650 [ 179.332964] ? path_lookupat+0x780/0x780 [ 179.337134] ? trace_hardirqs_on+0x10/0x10 [ 179.341474] do_filp_open+0x179/0x3c0 [ 179.345387] ? may_open_dev+0xe0/0xe0 [ 179.349197] ? __alloc_fd+0x1be/0x490 [ 179.353014] ? lock_downgrade+0x740/0x740 [ 179.357185] ? do_raw_spin_unlock+0x164/0x220 [ 179.361702] ? _raw_spin_unlock+0x29/0x40 [ 179.365947] ? __alloc_fd+0x1be/0x490 [ 179.369773] do_sys_open+0x296/0x410 [ 179.373844] ? filp_open+0x60/0x60 [ 179.377482] ? SyS_pwrite64+0xca/0x140 [ 179.385204] ? fput+0xb/0x140 [ 179.388743] ? do_syscall_64+0x4c/0x640 [ 179.392928] ? do_sys_open+0x410/0x410 [ 179.397522] do_syscall_64+0x1d5/0x640 [ 179.401428] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 179.406620] RIP: 0033:0x4179b1 [ 179.410019] RSP: 002b:00007f37146daa20 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 179.417731] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004179b1 [ 179.425005] RDX: 00000000000000a6 RSI: 0000000000000002 RDI: 00007f37146daae0 [ 179.432461] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 179.440087] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000002 [ 179.447564] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 [ 179.465698] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:42:01 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x4, 0x4a8bff69a5d89b56) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) dup2(r1, r0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) 19:42:01 executing program 1 (fault-call:3 fault-nth:4): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:01 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0x0, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:01 executing program 4 (fault-call:3 fault-nth:14): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) [ 179.486569] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:42:01 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="1020f5f201000c0800000900000002000000010000000000000000400000000000000b0000001e000000020000000200000002000000020000001600000000049ba616aa00e7ff070000000c000000100000001400000300000001006add07ffff00000000000035d6c700000d00"/119, 0x77, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f00000000c0)) [ 179.557599] print_req_error: I/O error, dev loop5, sector 0 [ 179.559441] FAULT_INJECTION: forcing a failure. [ 179.559441] name failslab, interval 1, probability 0, space 0, times 0 [ 179.580124] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 179.590105] FAULT_INJECTION: forcing a failure. [ 179.590105] name failslab, interval 1, probability 0, space 0, times 0 [ 179.598014] CPU: 0 PID: 14315 Comm: syz-executor.1 Not tainted 4.14.210-syzkaller #0 [ 179.611198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 179.613815] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 179.621341] Call Trace: [ 179.621359] dump_stack+0x1b2/0x283 [ 179.621373] should_fail.cold+0x10a/0x154 [ 179.621384] should_failslab+0xd6/0x130 [ 179.621396] kmem_cache_alloc_trace+0x29a/0x3d0 [ 179.621413] apparmor_file_alloc_security+0x129/0x800 [ 179.654751] security_file_alloc+0x66/0xa0 [ 179.659004] ? selinux_is_enabled+0x5/0x50 [ 179.663249] get_empty_filp+0x15c/0x3e0 [ 179.667237] alloc_file+0x23/0x440 [ 179.670790] __shmem_file_setup.part.0+0x198/0x3c0 [ 179.675732] ? shmem_create+0x30/0x30 [ 179.679542] ? __alloc_fd+0x1be/0x490 [ 179.683410] SyS_memfd_create+0x1fc/0x3c0 [ 179.688085] ? shmem_fcntl+0x120/0x120 [ 179.692299] ? SyS_clock_settime+0x1a0/0x1a0 [ 179.696704] ? do_syscall_64+0x4c/0x640 [ 179.700862] ? shmem_fcntl+0x120/0x120 [ 179.704925] do_syscall_64+0x1d5/0x640 [ 179.708910] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 179.714191] RIP: 0033:0x45deb9 [ 179.717382] RSP: 002b:00007f7485806a28 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 179.725103] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 000000000045deb9 [ 179.732746] RDX: 0000000020000230 RSI: 0000000000000000 RDI: 00000000004c2927 [ 179.741434] RBP: 0000000000800000 R08: 0000000020000230 R09: 0000000000000000 [ 179.749316] R10: fe03f80fe03f80ff R11: 0000000000000246 R12: 0000000000000002 [ 179.756575] R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020014900 [ 179.763854] CPU: 1 PID: 14319 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 179.771838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 179.781201] Call Trace: [ 179.783794] dump_stack+0x1b2/0x283 [ 179.787436] should_fail.cold+0x10a/0x154 [ 179.791615] should_failslab+0xd6/0x130 [ 179.791824] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 179.795600] kmem_cache_alloc_trace+0x29a/0x3d0 [ 179.795633] ? loop_get_status64+0x100/0x100 [ 179.795649] __kthread_create_on_node+0xbe/0x3a0 [ 179.795659] ? kthread_park+0x130/0x130 [ 179.795676] ? __fget+0x1fe/0x360 [ 179.795685] ? loop_get_status64+0x100/0x100 [ 179.795693] kthread_create_on_node+0xa8/0xd0 [ 179.795702] ? __kthread_create_on_node+0x3a0/0x3a0 [ 179.795714] ? __lockdep_init_map+0x100/0x560 [ 179.795726] ? __lockdep_init_map+0x100/0x560 [ 179.850131] lo_ioctl+0xcd9/0x1cd0 [ 179.853714] ? loop_set_status64+0xe0/0xe0 19:42:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0x0, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 179.857960] blkdev_ioctl+0x540/0x1830 [ 179.861860] ? blkpg_ioctl+0x8d0/0x8d0 [ 179.865757] ? trace_hardirqs_on+0x10/0x10 [ 179.870002] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 179.875116] ? debug_check_no_obj_freed+0x2c0/0x674 [ 179.880231] block_ioctl+0xd9/0x120 [ 179.883869] ? blkdev_fallocate+0x3a0/0x3a0 [ 179.888201] do_vfs_ioctl+0x75a/0xff0 [ 179.892015] ? ioctl_preallocate+0x1a0/0x1a0 [ 179.896451] ? lock_downgrade+0x740/0x740 [ 179.900612] ? __fget+0x225/0x360 [ 179.904095] ? do_vfs_ioctl+0xff0/0xff0 [ 179.908071] ? security_file_ioctl+0x83/0xb0 [ 179.912480] SyS_ioctl+0x7f/0xb0 [ 179.915851] ? do_vfs_ioctl+0xff0/0xff0 [ 179.919839] do_syscall_64+0x1d5/0x640 [ 179.923825] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 179.929169] RIP: 0033:0x45dd27 [ 179.932340] RSP: 002b:00007f37146daa28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.940040] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 179.948171] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 19:42:02 executing program 0: inotify_init1(0xc0000) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)={0x0, 0x3, 0x4, 0x40, 0x40, {0x0, 0xea60}, {0x3, 0x2, 0x6, 0x3, 0x0, 0xf4, "e3f33e71"}, 0xfffffff8, 0x1, @offset=0xbf5c}) 19:42:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r2, 0xb000) socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r4, 0x0) write$P9_RSTAT(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:02 executing program 1 (fault-call:3 fault-nth:5): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r2, 0xb000) socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r4, 0x0) write$P9_RSTAT(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 179.955434] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 179.962685] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 179.969936] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 19:42:02 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:02 executing program 5: ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x1f) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)={[], [{@dont_hash='dont_hash'}, {@obj_type={'obj_type', 0x3d, '^\\\\--\xfc!\xdbA\x95\xfe/\xef+\bAJ\"\x11+\xcf\x16W\xd0\xff\x11\xf1\xb3lB\xa9\xa4\xd2\xb6\xa3\x81\x00\xa2\x9aeH]\xa7\n_\xbeS\xa8\x88\xab\xd0\xca}:\x9a\xb0\x9a\xcd'}}]}) [ 180.057229] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 180.070471] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.070564] FAULT_INJECTION: forcing a failure. [ 180.070564] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 180.093940] CPU: 0 PID: 14349 Comm: syz-executor.1 Not tainted 4.14.210-syzkaller #0 [ 180.101849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 180.111207] Call Trace: [ 180.113803] dump_stack+0x1b2/0x283 [ 180.117448] should_fail.cold+0x10a/0x154 [ 180.121606] __alloc_pages_nodemask+0x22c/0x2720 [ 180.126372] ? __lock_acquire+0x5fc/0x3f20 [ 180.130616] ? static_obj+0x50/0x50 [ 180.134270] ? trace_hardirqs_on+0x10/0x10 [ 180.138546] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 180.143482] ? __lock_acquire+0x5fc/0x3f20 [ 180.147726] ? __lock_acquire+0x5fc/0x3f20 [ 180.151976] ? __lock_acquire+0x5fc/0x3f20 [ 180.156224] alloc_pages_vma+0xd2/0x6d0 [ 180.160206] shmem_alloc_page+0xe0/0x180 [ 180.164281] ? shmem_swapin+0x180/0x180 [ 180.168356] ? __radix_tree_lookup+0x1b5/0x2e0 [ 180.173179] ? find_get_entry+0x312/0x630 [ 180.177933] ? check_preemption_disabled+0x35/0x240 [ 180.182969] ? __vm_enough_memory+0x261/0x520 [ 180.187489] shmem_alloc_and_acct_page+0x126/0x620 [ 180.192422] ? simple_xattr_get+0xe5/0x160 [ 180.196793] shmem_getpage_gfp+0x302/0x2810 [ 180.201429] ? simple_xattr_get+0xe5/0x160 [ 180.205977] ? shmem_alloc_and_acct_page+0x620/0x620 [ 180.211065] shmem_write_begin+0xeb/0x190 [ 180.215372] generic_perform_write+0x1c9/0x420 [ 180.221980] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 180.226638] ? current_time+0xb0/0xb0 [ 180.230450] ? lock_acquire+0x170/0x3f0 [ 180.234423] __generic_file_write_iter+0x227/0x590 [ 180.239549] generic_file_write_iter+0x36f/0x650 [ 180.244819] __vfs_write+0x44c/0x630 [ 180.248520] ? do_truncate+0x129/0x1a0 [ 180.252390] ? kernel_read+0x110/0x110 [ 180.256314] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 180.261330] vfs_write+0x17f/0x4d0 [ 180.264861] SyS_pwrite64+0x116/0x140 [ 180.268647] ? SyS_pread64+0x140/0x140 [ 180.272679] ? fput+0xb/0x140 [ 180.275766] ? do_syscall_64+0x4c/0x640 [ 180.279723] ? SyS_pread64+0x140/0x140 [ 180.283615] do_syscall_64+0x1d5/0x640 [ 180.287491] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 180.292680] RIP: 0033:0x417a17 [ 180.295849] RSP: 002b:00007f7485806a20 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 19:42:02 executing program 4 (fault-call:3 fault-nth:15): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) [ 180.303540] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000417a17 [ 180.311088] RDX: 0000000000000069 RSI: 0000000020010000 RDI: 0000000000000006 [ 180.318353] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 180.325616] R10: 0000000000000400 R11: 0000000000000293 R12: 0000000000000002 [ 180.332909] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000210 [ 180.349998] f2fs_msg: 176 callbacks suppressed [ 180.350006] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 180.371136] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 180.379993] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 180.387520] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 180.401368] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 180.409052] FAULT_INJECTION: forcing a failure. [ 180.409052] name failslab, interval 1, probability 0, space 0, times 0 [ 180.419751] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 180.423175] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 180.441162] CPU: 0 PID: 14376 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 180.449065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 180.458419] Call Trace: [ 180.459223] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 180.461069] dump_stack+0x1b2/0x283 [ 180.461085] should_fail.cold+0x10a/0x154 [ 180.461100] should_failslab+0xd6/0x130 [ 180.461116] kmem_cache_alloc+0x28e/0x3c0 [ 180.484433] __kernfs_new_node+0x6f/0x470 [ 180.488592] kernfs_create_dir_ns+0x8c/0x200 [ 180.493025] internal_create_group+0xe9/0x710 [ 180.494967] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 180.497525] lo_ioctl+0x1137/0x1cd0 19:42:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r3, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r2, 0xb000) socket$netlink(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r4, 0x0) write$P9_RSTAT(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:02 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 180.497540] ? loop_set_status64+0xe0/0xe0 [ 180.497553] blkdev_ioctl+0x540/0x1830 [ 180.497566] ? blkpg_ioctl+0x8d0/0x8d0 [ 180.504732] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 180.508193] ? trace_hardirqs_on+0x10/0x10 [ 180.508206] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 180.508217] ? debug_check_no_obj_freed+0x2c0/0x674 [ 180.508231] block_ioctl+0xd9/0x120 [ 180.508241] ? blkdev_fallocate+0x3a0/0x3a0 [ 180.508252] do_vfs_ioctl+0x75a/0xff0 [ 180.508265] ? ioctl_preallocate+0x1a0/0x1a0 [ 180.508272] ? lock_downgrade+0x740/0x740 [ 180.508286] ? __fget+0x225/0x360 [ 180.566628] ? do_vfs_ioctl+0xff0/0xff0 [ 180.569208] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.570603] ? security_file_ioctl+0x83/0xb0 [ 180.570617] SyS_ioctl+0x7f/0xb0 [ 180.570626] ? do_vfs_ioctl+0xff0/0xff0 [ 180.570639] do_syscall_64+0x1d5/0x640 [ 180.570655] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 180.599985] RIP: 0033:0x45dd27 19:42:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:03 executing program 4 (fault-call:3 fault-nth:16): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) [ 180.603166] RSP: 002b:00007f37146daa28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.612340] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 180.619703] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 180.627176] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 180.634650] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 180.642013] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 19:42:03 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 180.764457] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.803208] FAULT_INJECTION: forcing a failure. [ 180.803208] name failslab, interval 1, probability 0, space 0, times 0 [ 180.815658] CPU: 1 PID: 14412 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 180.823558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 180.832911] Call Trace: [ 180.835513] dump_stack+0x1b2/0x283 [ 180.839144] should_fail.cold+0x10a/0x154 [ 180.843290] should_failslab+0xd6/0x130 [ 180.847256] kmem_cache_alloc+0x28e/0x3c0 [ 180.851407] __kernfs_new_node+0x6f/0x470 [ 180.855552] kernfs_new_node+0x7b/0xe0 [ 180.859221] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 180.859440] __kernfs_create_file+0x3d/0x320 [ 180.871903] sysfs_add_file_mode_ns+0x1e1/0x450 [ 180.876564] ? kernfs_create_dir_ns+0x171/0x200 [ 180.881234] internal_create_group+0x22b/0x710 [ 180.885909] lo_ioctl+0x1137/0x1cd0 [ 180.889644] ? loop_set_status64+0xe0/0xe0 [ 180.893882] blkdev_ioctl+0x540/0x1830 [ 180.897764] ? blkpg_ioctl+0x8d0/0x8d0 [ 180.901643] ? trace_hardirqs_on+0x10/0x10 [ 180.905862] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 180.910949] ? debug_check_no_obj_freed+0x2c0/0x674 [ 180.915965] block_ioctl+0xd9/0x120 [ 180.919684] ? blkdev_fallocate+0x3a0/0x3a0 [ 180.924012] do_vfs_ioctl+0x75a/0xff0 [ 180.927824] ? ioctl_preallocate+0x1a0/0x1a0 [ 180.932246] ? lock_downgrade+0x740/0x740 [ 180.936411] ? __fget+0x225/0x360 [ 180.939864] ? do_vfs_ioctl+0xff0/0xff0 [ 180.943833] ? security_file_ioctl+0x83/0xb0 [ 180.948228] SyS_ioctl+0x7f/0xb0 [ 180.952025] ? do_vfs_ioctl+0xff0/0xff0 [ 180.956068] do_syscall_64+0x1d5/0x640 [ 180.959950] entry_SYSCALL_64_after_hwframe+0x46/0xbb 19:42:03 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x1, 0xfffffffd) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl(r1, 0x4, &(0x7f0000000000)="aee4e39887") 19:42:03 executing program 1 (fault-call:3 fault-nth:6): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:03 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000140)=0x2000000) read$dsp(r0, &(0x7f0000000040)=""/18, 0x12) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000140)=0x2000000) read$dsp(r1, &(0x7f0000000040)=""/18, 0x12) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0xfffffffffffffffb, 0x5, 0x0, 0x101}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:03 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 180.965123] RIP: 0033:0x45dd27 [ 180.968295] RSP: 002b:00007f37146daa28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.976000] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 180.983257] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 180.990511] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 180.997850] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 181.005117] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 19:42:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 181.071854] FAULT_INJECTION: forcing a failure. [ 181.071854] name failslab, interval 1, probability 0, space 0, times 0 [ 181.110516] CPU: 1 PID: 14428 Comm: syz-executor.1 Not tainted 4.14.210-syzkaller #0 19:42:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 181.118438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 181.128839] Call Trace: [ 181.131443] dump_stack+0x1b2/0x283 [ 181.135087] should_fail.cold+0x10a/0x154 [ 181.140284] should_failslab+0xd6/0x130 [ 181.144266] kmem_cache_alloc+0x28e/0x3c0 [ 181.148423] getname_flags+0xc8/0x550 [ 181.152232] do_sys_open+0x1ce/0x410 [ 181.155950] ? filp_open+0x60/0x60 [ 181.159492] ? SyS_pwrite64+0xca/0x140 [ 181.163399] ? fput+0xb/0x140 [ 181.166507] ? do_syscall_64+0x4c/0x640 [ 181.170522] ? do_sys_open+0x410/0x410 [ 181.174430] do_syscall_64+0x1d5/0x640 [ 181.178332] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 181.183613] RIP: 0033:0x4179b1 [ 181.186822] RSP: 002b:00007f7485806a20 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 181.194827] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004179b1 [ 181.202634] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f7485806ae0 [ 181.210437] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 19:42:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:03 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:03 executing program 4 (fault-call:3 fault-nth:17): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:03 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) socket$inet6(0xa, 0x1, 0x0) [ 181.217714] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000002 [ 181.225069] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 19:42:03 executing program 1 (fault-call:3 fault-nth:7): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:03 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x4000, 0x0) ioctl$CHAR_RAW_GETSIZE64(r1, 0x80081272, &(0x7f0000000080)) r2 = syz_mount_image$f2fs(&(0x7f00000000c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="c77b09b161bd955617df445afee396706e174b8b518a940374c365f8f374d5dd809f53d41cfe4b586bb2e7764ac3aaaf821b0606ecdc681fa56e1c14449b60674cd84516fbb8203a5b4fb595eaf6e6f8272d39b45b6b6b573039b3b6660e881d2556db39cb033cc4577a69aa65a17233c8356a16590186a69d3b30eade89eb885f403ddf816ad21ec8483eb2e2a69a9011c5083e92c6e0f3f5e2438ef9126d7de97d72698a0b3dcf97b191a1b7350dbdc98a3f2248c309ba931f64fe5e65586cafca60", 0xc3, 0x4}, {&(0x7f0000000240)="24c7ef8341f2777819aa5218b5a88a95762211093f81e98bac8c4ba6ba08edea33c6791bfd342228714be9a25565d10006ef156d24", 0x35, 0x401}], 0x2802000, &(0x7f00000002c0)={[{@noflush_merge='noflush_merge'}, {@usrjquota={'usrjquota', 0x3d, '/dev/ocfs2_control\x00'}}, {@usrquota={'usrquota', 0x3d, '!'}}, {@noquota='noquota'}, {@whint_mode_off='whint_mode=off'}, {@norecovery='norecovery'}], [{@uid_eq={'uid', 0x3d, 0xee01}}, {@fowner_lt={'fowner<'}}, {@uid_gt={'uid>', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fowner_eq={'fowner'}}, {@obj_type={'obj_type', 0x3d, 'ip_vti0\x00'}}, {@seclabel='seclabel'}, {@uid_lt={'uid<', 0xee01}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@audit='audit'}]}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000400)={0x0, r2, 0x0, 0x7f, 0x6, 0x5}) r3 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 181.330002] FAULT_INJECTION: forcing a failure. [ 181.330002] name failslab, interval 1, probability 0, space 0, times 0 [ 181.344496] FAULT_INJECTION: forcing a failure. [ 181.344496] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 181.356325] CPU: 1 PID: 14464 Comm: syz-executor.1 Not tainted 4.14.210-syzkaller #0 [ 181.364462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 181.373810] Call Trace: [ 181.376398] dump_stack+0x1b2/0x283 [ 181.380739] should_fail.cold+0x10a/0x154 [ 181.384995] __alloc_pages_nodemask+0x22c/0x2720 [ 181.389855] ? __lock_acquire+0x5fc/0x3f20 [ 181.394116] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 181.398964] ? trace_hardirqs_on+0x10/0x10 [ 181.403213] ? lock_downgrade+0x740/0x740 [ 181.407372] ? _raw_spin_unlock_irq+0x24/0x80 [ 181.411907] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 181.417022] cache_grow_begin+0x8f/0x420 [ 181.421085] cache_alloc_refill+0x273/0x350 [ 181.425415] kmem_cache_alloc+0x333/0x3c0 [ 181.429558] getname_flags+0xc8/0x550 [ 181.433357] do_sys_open+0x1ce/0x410 [ 181.437068] ? filp_open+0x60/0x60 [ 181.440676] ? do_syscall_64+0x4c/0x640 [ 181.444654] ? do_sys_open+0x410/0x410 [ 181.448538] do_syscall_64+0x1d5/0x640 [ 181.452422] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 181.457698] RIP: 0033:0x4179b1 [ 181.460880] RSP: 002b:00007f7485806a20 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 181.468581] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004179b1 [ 181.475854] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f7485806ae0 [ 181.483122] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 181.490386] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000002 [ 181.497654] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 [ 181.536935] CPU: 0 PID: 14455 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 181.544871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 181.554229] Call Trace: [ 181.556827] dump_stack+0x1b2/0x283 [ 181.560498] should_fail.cold+0x10a/0x154 [ 181.564960] should_failslab+0xd6/0x130 [ 181.568931] kmem_cache_alloc+0x28e/0x3c0 [ 181.573079] __kernfs_new_node+0x6f/0x470 [ 181.577224] kernfs_new_node+0x7b/0xe0 [ 181.581109] __kernfs_create_file+0x3d/0x320 19:42:03 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x22c3, @private2={0xfc, 0x2, [], 0x1}, 0x7ff}, @in6={0xa, 0x4e22, 0x4, @private0, 0x2}, @in6={0xa, 0x4e22, 0x9de, @mcast1, 0x1}], 0x54) 19:42:03 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 181.586222] sysfs_add_file_mode_ns+0x1e1/0x450 [ 181.590902] ? kernfs_create_dir_ns+0x171/0x200 [ 181.595580] internal_create_group+0x22b/0x710 [ 181.600178] lo_ioctl+0x1137/0x1cd0 [ 181.603813] ? loop_set_status64+0xe0/0xe0 [ 181.608058] blkdev_ioctl+0x540/0x1830 [ 181.612436] ? blkpg_ioctl+0x8d0/0x8d0 [ 181.616336] ? trace_hardirqs_on+0x10/0x10 [ 181.620772] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 181.626352] ? debug_check_no_obj_freed+0x2c0/0x674 [ 181.631376] block_ioctl+0xd9/0x120 [ 181.635097] ? blkdev_fallocate+0x3a0/0x3a0 [ 181.639453] do_vfs_ioctl+0x75a/0xff0 [ 181.643260] ? ioctl_preallocate+0x1a0/0x1a0 [ 181.647665] ? lock_downgrade+0x740/0x740 [ 181.651799] ? __fget+0x225/0x360 [ 181.655237] ? do_vfs_ioctl+0xff0/0xff0 [ 181.659197] ? security_file_ioctl+0x83/0xb0 [ 181.663595] SyS_ioctl+0x7f/0xb0 [ 181.666974] ? do_vfs_ioctl+0xff0/0xff0 [ 181.670946] do_syscall_64+0x1d5/0x640 [ 181.674885] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 181.680088] RIP: 0033:0x45dd27 [ 181.683452] RSP: 002b:00007f37146daa28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.691246] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 181.698516] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 181.706014] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 181.713367] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 181.720724] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 19:42:04 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:04 executing program 1 (fault-call:3 fault-nth:8): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:04 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 181.839195] FAULT_INJECTION: forcing a failure. [ 181.839195] name failslab, interval 1, probability 0, space 0, times 0 [ 181.866683] CPU: 0 PID: 14503 Comm: syz-executor.1 Not tainted 4.14.210-syzkaller #0 [ 181.874691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 181.884179] Call Trace: [ 181.886758] dump_stack+0x1b2/0x283 [ 181.890467] should_fail.cold+0x10a/0x154 [ 181.894606] should_failslab+0xd6/0x130 [ 181.898575] kmem_cache_alloc+0x28e/0x3c0 [ 181.902813] get_empty_filp+0x86/0x3e0 [ 181.906687] path_openat+0x84/0x2970 [ 181.910416] ? generic_file_write_iter+0x437/0x650 [ 181.915375] ? path_lookupat+0x780/0x780 [ 181.919422] ? trace_hardirqs_on+0x10/0x10 [ 181.923654] do_filp_open+0x179/0x3c0 [ 181.927499] ? may_open_dev+0xe0/0xe0 [ 181.931305] ? __alloc_fd+0x1be/0x490 [ 181.935100] ? lock_downgrade+0x740/0x740 [ 181.939233] ? do_raw_spin_unlock+0x164/0x220 [ 181.943813] ? _raw_spin_unlock+0x29/0x40 [ 181.947959] ? __alloc_fd+0x1be/0x490 [ 181.951766] do_sys_open+0x296/0x410 [ 181.955460] ? filp_open+0x60/0x60 [ 181.958994] ? SyS_pwrite64+0xca/0x140 [ 181.962877] ? fput+0xb/0x140 [ 181.965973] ? do_syscall_64+0x4c/0x640 [ 181.969926] ? do_sys_open+0x410/0x410 [ 181.973794] do_syscall_64+0x1d5/0x640 [ 181.977667] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 181.982986] RIP: 0033:0x4179b1 19:42:04 executing program 4 (fault-call:3 fault-nth:18): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:04 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 181.986246] RSP: 002b:00007f7485806a20 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 181.993939] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004179b1 [ 182.001642] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f7485806ae0 [ 182.009599] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 182.016868] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000002 [ 182.024645] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 19:42:04 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000040)={0x956f27380dc8c66f}) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) [ 182.104410] FAULT_INJECTION: forcing a failure. [ 182.104410] name failslab, interval 1, probability 0, space 0, times 0 [ 182.132651] CPU: 0 PID: 14520 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 182.140573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.150019] Call Trace: [ 182.152620] dump_stack+0x1b2/0x283 [ 182.156261] should_fail.cold+0x10a/0x154 [ 182.160421] should_failslab+0xd6/0x130 [ 182.164702] kmem_cache_alloc+0x28e/0x3c0 [ 182.168897] __kernfs_new_node+0x6f/0x470 [ 182.173229] kernfs_new_node+0x7b/0xe0 [ 182.177123] __kernfs_create_file+0x3d/0x320 [ 182.181669] sysfs_add_file_mode_ns+0x1e1/0x450 [ 182.186959] ? kernfs_create_dir_ns+0x171/0x200 [ 182.191635] internal_create_group+0x22b/0x710 [ 182.196485] lo_ioctl+0x1137/0x1cd0 [ 182.200120] ? loop_set_status64+0xe0/0xe0 [ 182.204785] blkdev_ioctl+0x540/0x1830 [ 182.208671] ? blkpg_ioctl+0x8d0/0x8d0 [ 182.212553] ? trace_hardirqs_on+0x10/0x10 [ 182.216798] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 182.221894] ? debug_check_no_obj_freed+0x2c0/0x674 [ 182.226921] block_ioctl+0xd9/0x120 [ 182.230555] ? blkdev_fallocate+0x3a0/0x3a0 [ 182.235741] do_vfs_ioctl+0x75a/0xff0 [ 182.240416] ? ioctl_preallocate+0x1a0/0x1a0 [ 182.244885] ? lock_downgrade+0x740/0x740 [ 182.250081] ? __fget+0x225/0x360 [ 182.253735] ? do_vfs_ioctl+0xff0/0xff0 [ 182.257721] ? security_file_ioctl+0x83/0xb0 [ 182.262304] SyS_ioctl+0x7f/0xb0 [ 182.266066] ? do_vfs_ioctl+0xff0/0xff0 [ 182.270039] do_syscall_64+0x1d5/0x640 [ 182.273932] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 182.279125] RIP: 0033:0x45dd27 [ 182.282398] RSP: 002b:00007f37146daa28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.290090] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 182.297707] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 182.305085] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 182.312361] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 182.319614] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 19:42:04 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x4, 0x3, 0x5}) syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000080)='./file0\x00', 0x4, 0x4, &(0x7f0000000300)=[{&(0x7f00000000c0)="3ef3cbdb2d4538ae86d8c58e5d854696a07239b4cfa2d3dde9f9ba23d9c4b73e55", 0x21, 0x6}, {&(0x7f0000000400)="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", 0x101, 0x8}, {&(0x7f00000001c0)="f49b32b5c1781f2d7d48db39964381ec119f94994bf8a5721749a867d594340651ff867f1dd87d64a148d2a5cdcb6bbd59c0105052bbcb2540e462e7f071e19815d3b10aa4583e66d1fcc2ee4aba99bad51026f4d7352f229686ab2b4d2d78c6c736a81bb59695a0e7cf35f3040cab345fa57efe01d78252d7443729ef4d75a9881c1d372fecd8810aba6e58ceff64c15dcd3f01a77fa094f2e09e3e7db616e8d2085ac19e9281e502ebc8ac2f1af5b1f631945a2b6a7058be0d3194851e2795fb597a46ca76d6d0", 0xc8, 0x1}, {&(0x7f00000002c0), 0x0, 0x3}], 0x180e040, &(0x7f0000000380)=ANY=[@ANYBLOB="005f31002c736d6120c0d7421044b151ed636b66737472616e736d7574653d62617461647630002c726f6f74636f6e746578743d726f6f8d2c00"]) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x202, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup=r2, r3, 0x19}, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:42:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:04 executing program 1 (fault-call:3 fault-nth:9): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:04 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:04 executing program 4 (fault-call:3 fault-nth:19): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:04 executing program 5: setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040)={0x200, 0x8, 0x0, 0x74}, 0x8) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6ade18d433a9e9b72dcb72dc14bb1228257bd5221cfc4f9179d9c31efdff49209fd6491621795e3adc74e6a7d57fa9275a44da9bd7a23f9dfcc9f3416bb6514f15d42b0636ef71c1f842b9e884329fb058613ee1d20e02177d6925e8101678c1037a463e0f78d348c11023a6c2ccb882587f1d18a2ad9b34f0dcd3315d016cb2b321179f8c5972b257d62971bf60c47f11de7d03ee26d27f2d5349265ef94088cd73c2b071e16b55a35c4ed2e244d8f75b4633e2cabe5d069cc782890b84b42febfd01442e"]) [ 182.585804] print_req_error: I/O error, dev loop0, sector 0 [ 182.627130] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 182.637112] FAULT_INJECTION: forcing a failure. [ 182.637112] name failslab, interval 1, probability 0, space 0, times 0 [ 182.652625] CPU: 0 PID: 14551 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 182.658010] FAULT_INJECTION: forcing a failure. [ 182.658010] name failslab, interval 1, probability 0, space 0, times 0 [ 182.660635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.660640] Call Trace: [ 182.660655] dump_stack+0x1b2/0x283 [ 182.660673] should_fail.cold+0x10a/0x154 [ 182.692077] should_failslab+0xd6/0x130 [ 182.696256] kmem_cache_alloc+0x28e/0x3c0 [ 182.700390] __kernfs_new_node+0x6f/0x470 [ 182.704520] kernfs_new_node+0x7b/0xe0 [ 182.708394] __kernfs_create_file+0x3d/0x320 [ 182.712793] sysfs_add_file_mode_ns+0x1e1/0x450 [ 182.717447] ? kernfs_create_dir_ns+0x171/0x200 [ 182.722108] internal_create_group+0x22b/0x710 [ 182.726691] lo_ioctl+0x1137/0x1cd0 [ 182.731218] ? loop_set_status64+0xe0/0xe0 [ 182.735470] blkdev_ioctl+0x540/0x1830 [ 182.739366] ? blkpg_ioctl+0x8d0/0x8d0 [ 182.743419] ? trace_hardirqs_on+0x10/0x10 [ 182.748175] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 182.753268] ? debug_check_no_obj_freed+0x2c0/0x674 [ 182.758290] block_ioctl+0xd9/0x120 [ 182.761898] ? blkdev_fallocate+0x3a0/0x3a0 [ 182.766203] do_vfs_ioctl+0x75a/0xff0 [ 182.769986] ? ioctl_preallocate+0x1a0/0x1a0 [ 182.774376] ? lock_downgrade+0x740/0x740 [ 182.778510] ? __fget+0x225/0x360 [ 182.782120] ? do_vfs_ioctl+0xff0/0xff0 [ 182.786085] ? security_file_ioctl+0x83/0xb0 [ 182.790483] SyS_ioctl+0x7f/0xb0 [ 182.793835] ? do_vfs_ioctl+0xff0/0xff0 [ 182.797797] do_syscall_64+0x1d5/0x640 [ 182.801672] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 182.806848] RIP: 0033:0x45dd27 [ 182.810105] RSP: 002b:00007f37146daa28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.817797] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 19:42:05 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 182.825135] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 182.832399] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 182.839660] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 182.846952] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 [ 182.868331] CPU: 1 PID: 14555 Comm: syz-executor.1 Not tainted 4.14.210-syzkaller #0 19:42:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 182.876240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.885949] Call Trace: [ 182.888547] dump_stack+0x1b2/0x283 [ 182.892269] should_fail.cold+0x10a/0x154 [ 182.896425] should_failslab+0xd6/0x130 [ 182.900408] kmem_cache_alloc_trace+0x29a/0x3d0 [ 182.905084] apparmor_file_alloc_security+0x129/0x800 [ 182.910287] security_file_alloc+0x66/0xa0 [ 182.914552] ? selinux_is_enabled+0x5/0x50 [ 182.918805] get_empty_filp+0x15c/0x3e0 [ 182.923422] path_openat+0x84/0x2970 [ 182.927673] ? generic_file_write_iter+0x437/0x650 [ 182.932611] ? path_lookupat+0x780/0x780 [ 182.936675] ? trace_hardirqs_on+0x10/0x10 [ 182.941010] do_filp_open+0x179/0x3c0 [ 182.944800] ? may_open_dev+0xe0/0xe0 [ 182.948592] ? __alloc_fd+0x1be/0x490 [ 182.952380] ? lock_downgrade+0x740/0x740 [ 182.956519] ? do_raw_spin_unlock+0x164/0x220 [ 182.961003] ? _raw_spin_unlock+0x29/0x40 [ 182.965138] ? __alloc_fd+0x1be/0x490 [ 182.968930] do_sys_open+0x296/0x410 [ 182.972629] ? filp_open+0x60/0x60 [ 182.976156] ? SyS_pwrite64+0xca/0x140 [ 182.980037] ? fput+0xb/0x140 [ 182.983124] ? do_syscall_64+0x4c/0x640 [ 182.987081] ? do_sys_open+0x410/0x410 [ 182.990955] do_syscall_64+0x1d5/0x640 [ 182.994838] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 183.000014] RIP: 0033:0x4179b1 [ 183.003201] RSP: 002b:00007f7485806a20 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 183.011808] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00000000004179b1 [ 183.019340] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f7485806ae0 [ 183.026693] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 183.034223] R10: 0000000000400000 R11: 0000000000000293 R12: 0000000000000002 [ 183.041672] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 19:42:05 executing program 4 (fault-call:3 fault-nth:20): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 183.076087] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.107186] net_ratelimit: 6 callbacks suppressed [ 183.107190] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:42:05 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 183.131011] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 183.142984] FAULT_INJECTION: forcing a failure. [ 183.142984] name failslab, interval 1, probability 0, space 0, times 0 [ 183.191300] CPU: 1 PID: 14578 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 183.199342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.208809] Call Trace: [ 183.211408] dump_stack+0x1b2/0x283 [ 183.213094] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.215083] should_fail.cold+0x10a/0x154 [ 183.215098] should_failslab+0xd6/0x130 [ 183.215111] kmem_cache_alloc+0x28e/0x3c0 [ 183.215123] __kernfs_new_node+0x6f/0x470 [ 183.215135] kernfs_new_node+0x7b/0xe0 [ 183.215146] __kernfs_create_file+0x3d/0x320 [ 183.215162] sysfs_add_file_mode_ns+0x1e1/0x450 [ 183.215173] ? kernfs_create_dir_ns+0x171/0x200 [ 183.258973] internal_create_group+0x22b/0x710 [ 183.263948] lo_ioctl+0x1137/0x1cd0 [ 183.267596] ? loop_set_status64+0xe0/0xe0 [ 183.271851] blkdev_ioctl+0x540/0x1830 [ 183.275768] ? blkpg_ioctl+0x8d0/0x8d0 [ 183.280185] ? trace_hardirqs_on+0x10/0x10 [ 183.284416] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 183.289620] ? debug_check_no_obj_freed+0x2c0/0x674 [ 183.294784] block_ioctl+0xd9/0x120 [ 183.298628] ? blkdev_fallocate+0x3a0/0x3a0 [ 183.302952] do_vfs_ioctl+0x75a/0xff0 [ 183.306774] ? ioctl_preallocate+0x1a0/0x1a0 [ 183.311418] ? lock_downgrade+0x740/0x740 [ 183.315564] ? __fget+0x225/0x360 [ 183.319107] ? do_vfs_ioctl+0xff0/0xff0 [ 183.323212] ? security_file_ioctl+0x83/0xb0 [ 183.327762] SyS_ioctl+0x7f/0xb0 [ 183.331131] ? do_vfs_ioctl+0xff0/0xff0 [ 183.335110] do_syscall_64+0x1d5/0x640 [ 183.339141] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 183.344931] RIP: 0033:0x45dd27 [ 183.348122] RSP: 002b:00007f37146daa28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.356598] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 183.364618] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 183.372264] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 183.379686] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 19:42:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:05 executing program 1 (fault-call:3 fault-nth:10): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:05 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:42:05 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 183.387132] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 19:42:05 executing program 4 (fault-call:3 fault-nth:21): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) [ 183.469709] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.480115] FAULT_INJECTION: forcing a failure. [ 183.480115] name failslab, interval 1, probability 0, space 0, times 0 [ 183.496440] CPU: 0 PID: 14603 Comm: syz-executor.1 Not tainted 4.14.210-syzkaller #0 [ 183.506796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.516683] Call Trace: [ 183.519531] dump_stack+0x1b2/0x283 [ 183.523530] should_fail.cold+0x10a/0x154 [ 183.528700] should_failslab+0xd6/0x130 [ 183.533216] kmem_cache_alloc+0x28e/0x3c0 [ 183.538083] __kernfs_new_node+0x6f/0x470 [ 183.543382] kernfs_create_dir_ns+0x8c/0x200 [ 183.549788] internal_create_group+0xe9/0x710 [ 183.554772] lo_ioctl+0x1137/0x1cd0 [ 183.558428] ? loop_set_status64+0xe0/0xe0 [ 183.562972] blkdev_ioctl+0x540/0x1830 [ 183.567506] ? blkpg_ioctl+0x8d0/0x8d0 [ 183.572856] ? trace_hardirqs_on+0x10/0x10 [ 183.581336] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 183.587898] ? debug_check_no_obj_freed+0x2c0/0x674 [ 183.595551] block_ioctl+0xd9/0x120 [ 183.599421] ? blkdev_fallocate+0x3a0/0x3a0 [ 183.605561] do_vfs_ioctl+0x75a/0xff0 [ 183.613789] ? ioctl_preallocate+0x1a0/0x1a0 [ 183.621423] ? lock_downgrade+0x740/0x740 [ 183.628923] ? __fget+0x225/0x360 [ 183.634494] ? do_vfs_ioctl+0xff0/0xff0 [ 183.639115] ? security_file_ioctl+0x83/0xb0 [ 183.644274] SyS_ioctl+0x7f/0xb0 [ 183.647978] ? do_vfs_ioctl+0xff0/0xff0 [ 183.652083] do_syscall_64+0x1d5/0x640 [ 183.656131] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 183.661606] RIP: 0033:0x45dd27 [ 183.665482] RSP: 002b:00007f7485806a28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.673796] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 183.681562] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 183.690446] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 183.697984] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 183.705581] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 [ 183.730461] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 183.741405] FAULT_INJECTION: forcing a failure. [ 183.741405] name failslab, interval 1, probability 0, space 0, times 0 [ 183.755073] CPU: 0 PID: 14610 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 183.763754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.773815] Call Trace: [ 183.776426] dump_stack+0x1b2/0x283 [ 183.780425] should_fail.cold+0x10a/0x154 [ 183.785346] should_failslab+0xd6/0x130 [ 183.789344] kmem_cache_alloc+0x28e/0x3c0 [ 183.793971] __kernfs_new_node+0x6f/0x470 [ 183.798144] kernfs_new_node+0x7b/0xe0 [ 183.802151] __kernfs_create_file+0x3d/0x320 [ 183.806757] sysfs_add_file_mode_ns+0x1e1/0x450 [ 183.811934] ? kernfs_create_dir_ns+0x171/0x200 [ 183.818386] internal_create_group+0x22b/0x710 [ 183.823420] lo_ioctl+0x1137/0x1cd0 [ 183.827628] ? loop_set_status64+0xe0/0xe0 [ 183.831888] blkdev_ioctl+0x540/0x1830 [ 183.835824] ? blkpg_ioctl+0x8d0/0x8d0 [ 183.839936] ? trace_hardirqs_on+0x10/0x10 [ 183.845786] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 183.851026] ? debug_check_no_obj_freed+0x2c0/0x674 [ 183.856639] block_ioctl+0xd9/0x120 [ 183.860398] ? blkdev_fallocate+0x3a0/0x3a0 [ 183.864799] do_vfs_ioctl+0x75a/0xff0 [ 183.868913] ? ioctl_preallocate+0x1a0/0x1a0 [ 183.873520] ? lock_downgrade+0x740/0x740 [ 183.878522] ? __fget+0x225/0x360 [ 183.882077] ? do_vfs_ioctl+0xff0/0xff0 [ 183.887005] ? security_file_ioctl+0x83/0xb0 [ 183.895744] SyS_ioctl+0x7f/0xb0 [ 183.899111] ? do_vfs_ioctl+0xff0/0xff0 [ 183.903522] do_syscall_64+0x1d5/0x640 [ 183.907789] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 183.913390] RIP: 0033:0x45dd27 [ 183.917239] RSP: 002b:00007f37146daa28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 19:42:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:06 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001440)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$sock_netdev_private(r2, 0x0, &(0x7f0000002180)) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3f}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x20}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x18000}, 0x10004881) r4 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="2d6811bf28ae"}, 0x14) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="d00800002400ffff01009e000000000000000000", @ANYRES32=r7, @ANYBLOB="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"], 0x8d0}}, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r8, &(0x7f00000000c0)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @random="2d6811bf28ae"}, 0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x10b8, r3, 0x414, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x310, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x128, 0x3, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x613}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3ff}, @ETHTOOL_A_BITSET_BITS={0x8c, 0x3, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '-:)@{-s\x99*&\\(\\,}&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '\':^(\x1f)^^]\x80\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10c, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x1a\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd66}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-%@,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '.!^*).\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x1a8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xaa, 0x4, "4b3170a0f7eb7a6fc686d042c9c9ed274e0cf6e4181dd17bff2744a8868b930e55fdb495e6927be02d22d537aee3b76048bfe30b93a1c1b6841112cece43bb6374fa3ebb530a1d5893ddc57e3682c96782340c62bde6b3fbd180ed581c8b154f55d0a06b2d229a11bde3cdfe91c7d24fd9b3cde6ccd735bc8e5f68f4e6f7fb57fc27350412040f3860cf1d3c4a01cf63c19bb267c8c5d14bc93747a10db03d305934b3c8c17f"}, @ETHTOOL_A_BITSET_MASK={0xf8, 0x5, "944a007cb5adf465d46f8808d3f5f6507b9490663b716276d2ed86a0fb8ab6a46e95ee1c40a75f61f55fdc4d3b3430ec0390b69a7252990c0ba761128433db25d433666196d52321a0a0818719663705ce2e3a5b2c6e179cef18618eae1248e2b62e7794549c0435cc89a9e35d77c3ff9002dc498ed79f5e9e28db2857a844738e23593efa1296e2e83668ab1b45df41936008a3bf8ed7f1ff93069b33a5f426df4572482a17c695c7b7f13e99203bec0af339f06f794c82206a79d5e649855ef7663c87ad5bcfa24a754c995319ce68e4d3f9a01b32264f29dbd4150610ed90b875a35b6b6e41e5e6c4867a38f048365e69d5ef"}]}, @ETHTOOL_A_FEATURES_WANTED={0xf4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x709}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.)/}*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '%.]\\:(]^$&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x87}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x54b}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '/#]2,}+.)(]})\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x80, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40000}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x64, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x494, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x456}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\'$@{*\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[n}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{\x8d$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_BITS={0x240, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\\#}[\')\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x49}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '(]%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#*/-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x18[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '!\tR%{n\\^]:)*\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '\'&${*i,^.:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf2db}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x71}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x30cf62e6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x94}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcdd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x72}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x208}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}{$#\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0x66, 0x4, "6c870e9ede343e2d36639bdb948ff5fe728f4a106251fec352dde2be048d01fcceef1a7c5756bc0b338982ff871bf56c1d1ed573ac28cb5f4053b116567981dc4c976e3f3584ee15d7175a33a4e6a3030dd5df8959aa8a261b71f296836e06403cbd"}, @ETHTOOL_A_BITSET_MASK={0xaa, 0x5, "62b159e5894fe7f62964124daa9f58cb9bb936b50770f698624bc691eee2567fb2ee23230dec875f8edafdb0076fb65c732e3662707d81c62bac4bf71d21edba6b195924f703a7645ecb42203a880e864bf5010a8fc0dc0657fa5ef8fc95a3c0b54a5f61858585a09e118d171d648f07f5846bc41c590cbd0966ec8cac63fae32efb01601fc7e6bc3d13bd35f7ca6a389bec624edf0bff67a792a5951668a1080556da5c71a1"}, @ETHTOOL_A_BITSET_MASK={0x4e, 0x5, "5ead48b58bd0fa12fd4f6304368f884750eccd6b94f52be82f84158690979b8132175ec53c34614b931a94a252502d67726915976c2c9781415351ca3612da220afec02ad827e32a16d4"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x6c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xebc}, @ETHTOOL_A_BITSET_VALUE={0x57, 0x4, "772a1518601b8833a2c364024697de4d225e64c92bfb5c72df4e15e28d1be80bd3bcd4493806f1f03ee642d03044c4a64404c99b7140eaf9409eae9b09b8adae8f6197a67626ac1c602b00f85c8d5da44ab092"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_FEATURES_WANTED={0x478, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fffffff}, @ETHTOOL_A_BITSET_BITS={0x100, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\\*\'\'$\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x16}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x92c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}]}, {0x4}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6bf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/\\[\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xb8, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4a}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6569fe70}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',\\+^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x47, 0x4, "a9892a9b2c85bfc53e5ac799d6878dca3bfca937c0f3516116e8dd4bf789f46b4a158f1ee66200c196dc0c3d257890d8848714f6865005f6c34ddd742e2e762ca6e4fe"}, @ETHTOOL_A_BITSET_MASK={0xa6, 0x5, "5387ba3fbdb81afba416fdb2f87af3346a9a1007c037531c8117e18cc609995c5e2480b9418e10a0ff240238d18346d43274496cacf1d08fe42135e0b516d11218cd402fdf6e417337de65eb20e8f61a3f6186674d7d07f783d50db69316f112c363526635833fa030113c1568420ff132712c5825c48f53d0d98843a6bb87f007bb11eea4e7b00371bf87045b4d0e1f100af1f865892b24156921dde33e1c83d8ff"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80}, @ETHTOOL_A_BITSET_BITS={0x1b8, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '+-\\\'\'\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '{!:@\t(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '-/{$]!+[^{.*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '(\'/V[%:-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xba\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'f2fs\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}]}]}, 0x10b8}, 0x1, 0x0, 0x0, 0x81}, 0x800) 19:42:06 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:06 executing program 1 (fault-call:3 fault-nth:11): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) [ 183.925635] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 183.933306] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 183.940801] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 183.948457] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 183.956291] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 19:42:06 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:06 executing program 4 (fault-call:3 fault-nth:22): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) [ 184.055188] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 19:42:06 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 184.099947] FAULT_INJECTION: forcing a failure. [ 184.099947] name failslab, interval 1, probability 0, space 0, times 0 [ 184.150457] CPU: 1 PID: 14642 Comm: syz-executor.1 Not tainted 4.14.210-syzkaller #0 [ 184.158910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.168537] Call Trace: [ 184.171326] dump_stack+0x1b2/0x283 [ 184.175421] should_fail.cold+0x10a/0x154 [ 184.179681] should_failslab+0xd6/0x130 [ 184.183667] kmem_cache_alloc+0x28e/0x3c0 [ 184.188005] __kernfs_new_node+0x6f/0x470 [ 184.192172] kernfs_new_node+0x7b/0xe0 [ 184.196161] __kernfs_create_file+0x3d/0x320 [ 184.200585] sysfs_add_file_mode_ns+0x1e1/0x450 [ 184.205354] ? kernfs_create_dir_ns+0x171/0x200 [ 184.210120] internal_create_group+0x22b/0x710 [ 184.214805] lo_ioctl+0x1137/0x1cd0 [ 184.218452] ? loop_set_status64+0xe0/0xe0 [ 184.223006] blkdev_ioctl+0x540/0x1830 [ 184.227127] ? blkpg_ioctl+0x8d0/0x8d0 [ 184.228905] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.231026] ? trace_hardirqs_on+0x10/0x10 [ 184.244112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 184.249251] ? debug_check_no_obj_freed+0x2c0/0x674 [ 184.254582] block_ioctl+0xd9/0x120 [ 184.258375] FAULT_INJECTION: forcing a failure. [ 184.258375] name failslab, interval 1, probability 0, space 0, times 0 [ 184.258400] ? blkdev_fallocate+0x3a0/0x3a0 [ 184.274859] do_vfs_ioctl+0x75a/0xff0 [ 184.278759] ? ioctl_preallocate+0x1a0/0x1a0 [ 184.283183] ? lock_downgrade+0x740/0x740 [ 184.287416] ? __fget+0x225/0x360 [ 184.290947] ? do_vfs_ioctl+0xff0/0xff0 [ 184.294928] ? security_file_ioctl+0x83/0xb0 [ 184.299490] SyS_ioctl+0x7f/0xb0 [ 184.302982] ? do_vfs_ioctl+0xff0/0xff0 [ 184.307038] do_syscall_64+0x1d5/0x640 [ 184.311199] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 184.317406] RIP: 0033:0x45dd27 [ 184.320924] RSP: 002b:00007f7485806a28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.329494] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 184.337060] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 184.344331] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 184.351716] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 184.359075] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 [ 184.366944] CPU: 0 PID: 14654 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 184.374851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.385521] Call Trace: [ 184.388387] dump_stack+0x1b2/0x283 [ 184.393222] should_fail.cold+0x10a/0x154 [ 184.397813] should_failslab+0xd6/0x130 [ 184.401806] kmem_cache_alloc_trace+0x29a/0x3d0 [ 184.406749] ? dev_uevent_filter+0xd0/0xd0 [ 184.411351] kobject_uevent_env+0x20c/0xf40 [ 184.417417] ? internal_create_group+0x48f/0x710 [ 184.422557] lo_ioctl+0x11a6/0x1cd0 [ 184.426379] ? loop_set_status64+0xe0/0xe0 [ 184.431039] blkdev_ioctl+0x540/0x1830 [ 184.435553] ? blkpg_ioctl+0x8d0/0x8d0 [ 184.440123] ? trace_hardirqs_on+0x10/0x10 [ 184.445197] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 184.451213] ? debug_check_no_obj_freed+0x2c0/0x674 [ 184.456236] block_ioctl+0xd9/0x120 [ 184.460009] ? blkdev_fallocate+0x3a0/0x3a0 [ 184.464376] do_vfs_ioctl+0x75a/0xff0 [ 184.468445] ? ioctl_preallocate+0x1a0/0x1a0 [ 184.473044] ? lock_downgrade+0x740/0x740 [ 184.477382] ? __fget+0x225/0x360 [ 184.481048] ? do_vfs_ioctl+0xff0/0xff0 [ 184.485701] ? security_file_ioctl+0x83/0xb0 [ 184.490377] SyS_ioctl+0x7f/0xb0 [ 184.493801] ? do_vfs_ioctl+0xff0/0xff0 [ 184.497951] do_syscall_64+0x1d5/0x640 [ 184.502004] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 184.507513] RIP: 0033:0x45dd27 [ 184.510712] RSP: 002b:00007f37146daa28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.518592] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 184.526538] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 184.534068] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 184.541985] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 19:42:07 executing program 0: ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000000)={0x1, [0x0]}) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:42:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:07 executing program 1 (fault-call:3 fault-nth:12): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:07 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 184.551180] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 [ 184.583875] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:42:07 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) readlink(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240)=""/219, 0xdb) 19:42:07 executing program 4 (fault-call:3 fault-nth:23): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) [ 184.668276] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.703298] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:42:07 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x10, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 184.724859] FAULT_INJECTION: forcing a failure. [ 184.724859] name failslab, interval 1, probability 0, space 0, times 0 [ 184.741470] FAULT_INJECTION: forcing a failure. [ 184.741470] name failslab, interval 1, probability 0, space 0, times 0 [ 184.799193] CPU: 0 PID: 14679 Comm: syz-executor.1 Not tainted 4.14.210-syzkaller #0 [ 184.808064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.817874] Call Trace: [ 184.820683] dump_stack+0x1b2/0x283 [ 184.824557] should_fail.cold+0x10a/0x154 [ 184.829114] should_failslab+0xd6/0x130 [ 184.833982] kmem_cache_alloc+0x28e/0x3c0 [ 184.838242] __kernfs_new_node+0x6f/0x470 [ 184.843359] kernfs_new_node+0x7b/0xe0 [ 184.848596] __kernfs_create_file+0x3d/0x320 [ 184.853115] sysfs_add_file_mode_ns+0x1e1/0x450 [ 184.858239] ? kernfs_create_dir_ns+0x171/0x200 [ 184.864060] internal_create_group+0x22b/0x710 [ 184.869198] lo_ioctl+0x1137/0x1cd0 [ 184.874337] ? loop_set_status64+0xe0/0xe0 [ 184.879171] blkdev_ioctl+0x540/0x1830 [ 184.883432] ? blkpg_ioctl+0x8d0/0x8d0 [ 184.884961] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.889795] ? trace_hardirqs_on+0x10/0x10 [ 184.889809] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 184.889825] ? debug_check_no_obj_freed+0x2c0/0x674 [ 184.915630] block_ioctl+0xd9/0x120 [ 184.920360] ? blkdev_fallocate+0x3a0/0x3a0 [ 184.925662] do_vfs_ioctl+0x75a/0xff0 [ 184.931166] ? ioctl_preallocate+0x1a0/0x1a0 [ 184.937003] ? lock_downgrade+0x740/0x740 [ 184.941874] ? __fget+0x225/0x360 [ 184.946998] ? do_vfs_ioctl+0xff0/0xff0 [ 184.951803] ? security_file_ioctl+0x83/0xb0 [ 184.957820] SyS_ioctl+0x7f/0xb0 [ 184.962272] ? do_vfs_ioctl+0xff0/0xff0 [ 184.966705] do_syscall_64+0x1d5/0x640 [ 184.971527] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 184.980375] RIP: 0033:0x45dd27 [ 184.984034] RSP: 002b:00007f7485806a28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.993339] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 185.001224] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 185.010072] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 185.018686] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 185.026414] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 [ 185.062383] CPU: 1 PID: 14681 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 185.070580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.080220] Call Trace: [ 185.082834] dump_stack+0x1b2/0x283 [ 185.086877] should_fail.cold+0x10a/0x154 [ 185.091460] should_failslab+0xd6/0x130 [ 185.095637] kmem_cache_alloc_trace+0x29a/0x3d0 [ 185.100502] ? dev_uevent_filter+0xd0/0xd0 [ 185.104763] kobject_uevent_env+0x20c/0xf40 19:42:07 executing program 5: ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000080)={0x9, 0x68a, {0x52, 0x6, 0x3, {0xfff, 0x200}, {0x81, 0x8}, @period={0x5b, 0x1, 0xfffe, 0xfff, 0x8, {0x9, 0x4, 0x8005, 0x7}, 0x1, &(0x7f0000000040)=[0x7ff]}}, {0x56, 0x7, 0xef0, {0x1, 0xffff}, {0x7fff, 0x1f}, @cond=[{0x0, 0x2, 0x8001, 0x1ff, 0x3ff, 0xfffc}, {0xf888, 0x3f, 0x9, 0x1fe0, 0x3ff, 0x8}]}}) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000140)=0x2000000) read$dsp(r0, &(0x7f0000000040)=""/18, 0x12) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) [ 185.109300] ? internal_create_group+0x48f/0x710 [ 185.114481] lo_ioctl+0x11a6/0x1cd0 [ 185.118233] ? loop_set_status64+0xe0/0xe0 [ 185.123022] blkdev_ioctl+0x540/0x1830 [ 185.127157] ? blkpg_ioctl+0x8d0/0x8d0 [ 185.131264] ? trace_hardirqs_on+0x10/0x10 [ 185.135650] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 185.140893] ? debug_check_no_obj_freed+0x2c0/0x674 [ 185.146853] block_ioctl+0xd9/0x120 [ 185.150718] ? blkdev_fallocate+0x3a0/0x3a0 [ 185.155288] do_vfs_ioctl+0x75a/0xff0 [ 185.160090] ? ioctl_preallocate+0x1a0/0x1a0 [ 185.164527] ? lock_downgrade+0x740/0x740 [ 185.168962] ? __fget+0x225/0x360 [ 185.172430] ? do_vfs_ioctl+0xff0/0xff0 [ 185.176530] ? security_file_ioctl+0x83/0xb0 [ 185.180992] SyS_ioctl+0x7f/0xb0 [ 185.184601] ? do_vfs_ioctl+0xff0/0xff0 [ 185.188945] do_syscall_64+0x1d5/0x640 [ 185.193103] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 185.198501] RIP: 0033:0x45dd27 [ 185.201723] RSP: 002b:00007f37146daa28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 19:42:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x10, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:07 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 185.209527] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 185.217002] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 185.224288] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 185.231573] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 185.239156] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 19:42:07 executing program 1 (fault-call:3 fault-nth:13): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) [ 185.326568] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 185.394114] FAULT_INJECTION: forcing a failure. [ 185.394114] name failslab, interval 1, probability 0, space 0, times 0 [ 185.442340] CPU: 1 PID: 14726 Comm: syz-executor.1 Not tainted 4.14.210-syzkaller #0 [ 185.450622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.460496] Call Trace: [ 185.463190] dump_stack+0x1b2/0x283 [ 185.467082] should_fail.cold+0x10a/0x154 [ 185.471261] should_failslab+0xd6/0x130 [ 185.475470] kmem_cache_alloc+0x28e/0x3c0 [ 185.480385] __kernfs_new_node+0x6f/0x470 [ 185.484911] kernfs_new_node+0x7b/0xe0 [ 185.488831] __kernfs_create_file+0x3d/0x320 [ 185.494061] sysfs_add_file_mode_ns+0x1e1/0x450 [ 185.498842] ? kernfs_create_dir_ns+0x171/0x200 [ 185.503537] internal_create_group+0x22b/0x710 [ 185.508580] lo_ioctl+0x1137/0x1cd0 [ 185.512412] ? loop_set_status64+0xe0/0xe0 [ 185.517185] blkdev_ioctl+0x540/0x1830 [ 185.521301] ? blkpg_ioctl+0x8d0/0x8d0 [ 185.525206] ? trace_hardirqs_on+0x10/0x10 [ 185.530247] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 185.535754] ? debug_check_no_obj_freed+0x2c0/0x674 [ 185.541394] block_ioctl+0xd9/0x120 [ 185.546159] ? blkdev_fallocate+0x3a0/0x3a0 [ 185.550667] do_vfs_ioctl+0x75a/0xff0 [ 185.555054] ? ioctl_preallocate+0x1a0/0x1a0 [ 185.559743] ? lock_downgrade+0x740/0x740 [ 185.563926] ? __fget+0x225/0x360 [ 185.567575] ? do_vfs_ioctl+0xff0/0xff0 [ 185.571569] ? security_file_ioctl+0x83/0xb0 [ 185.576039] SyS_ioctl+0x7f/0xb0 [ 185.579505] ? do_vfs_ioctl+0xff0/0xff0 [ 185.583704] do_syscall_64+0x1d5/0x640 [ 185.587795] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 185.593523] RIP: 0033:0x45dd27 [ 185.596730] RSP: 002b:00007f7485806a28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.604913] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 185.615505] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 185.624566] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 185.633513] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 185.641406] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 [ 185.672045] f2fs_msg: 246 callbacks suppressed [ 185.672053] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 19:42:08 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="565ea77823df80d290cc08052dec6ad9afdda98f4f6ea92812e89cac0e7aa6830da5c892fb92356c266259cbe37b5dd6b182ce1d29e3e7fb9e44", 0x3a, 0x1, &(0x7f0000000140)={0x2, 0x4e24, @private=0xa010102}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000080)=0x1) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000180)=""/54, &(0x7f00000001c0)=0x36) 19:42:08 executing program 4 (fault-call:3 fault-nth:24): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:08 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="48000000100005070000000000000000000004", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x10, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 185.694815] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 185.711917] F2FS-fs (loop1): invalid crc value [ 185.718273] F2FS-fs (loop1): invalid crc value [ 185.723201] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 185.737420] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 185.750330] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 185.780532] F2FS-fs (loop1): invalid crc value [ 185.789980] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 19:42:08 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000140)=0x2000000) read$dsp(0xffffffffffffffff, &(0x7f0000000040)=""/18, 0x12) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000000a00)=ANY=[@ANYBLOB="f50c00000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff00"/79624]) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4, 0x0, @loopback}, 0x1c) [ 185.806380] F2FS-fs (loop1): invalid crc value [ 185.812764] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 185.836918] FAULT_INJECTION: forcing a failure. [ 185.836918] name failslab, interval 1, probability 0, space 0, times 0 [ 185.852014] CPU: 1 PID: 14746 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 185.860740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.870730] Call Trace: [ 185.873775] dump_stack+0x1b2/0x283 [ 185.879109] should_fail.cold+0x10a/0x154 [ 185.885542] should_failslab+0xd6/0x130 [ 185.889903] __kmalloc+0x2c1/0x400 [ 185.893572] ? kobject_get_path+0xb5/0x230 [ 185.899642] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 185.906327] kobject_get_path+0xb5/0x230 [ 185.911305] kobject_uevent_env+0x230/0xf40 [ 185.916902] ? internal_create_group+0x48f/0x710 [ 185.923668] lo_ioctl+0x11a6/0x1cd0 [ 185.929062] ? loop_set_status64+0xe0/0xe0 [ 185.936404] blkdev_ioctl+0x540/0x1830 [ 185.940833] ? blkpg_ioctl+0x8d0/0x8d0 [ 185.944925] ? trace_hardirqs_on+0x10/0x10 [ 185.950355] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 185.955688] ? debug_check_no_obj_freed+0x2c0/0x674 [ 185.960961] block_ioctl+0xd9/0x120 [ 185.964849] ? blkdev_fallocate+0x3a0/0x3a0 [ 185.969891] do_vfs_ioctl+0x75a/0xff0 [ 185.974141] ? ioctl_preallocate+0x1a0/0x1a0 [ 185.978814] ? lock_downgrade+0x740/0x740 [ 185.983371] ? __fget+0x225/0x360 [ 185.987295] ? do_vfs_ioctl+0xff0/0xff0 [ 185.994107] ? security_file_ioctl+0x83/0xb0 [ 185.999724] SyS_ioctl+0x7f/0xb0 [ 186.004007] ? do_vfs_ioctl+0xff0/0xff0 [ 186.008391] do_syscall_64+0x1d5/0x640 [ 186.012557] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 186.017751] RIP: 0033:0x45dd27 [ 186.021215] RSP: 002b:00007f37146daa28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.029381] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 186.037500] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 186.045501] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 19:42:08 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="48000000100005070000000000000000000004", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:08 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)={[], [{@appraise='appraise'}, {@smackfsdef={'smackfsdef', 0x3d, 'f2fs\x00'}}, {@subj_role={'subj_role', 0x3d, 'appraise'}}]}) [ 186.053078] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 186.061329] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 19:42:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, 0xffffffffffffffff, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:08 executing program 1 (fault-call:3 fault-nth:14): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) [ 186.102112] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:42:08 executing program 4 (fault-call:3 fault-nth:25): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, 0xffffffffffffffff, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 186.187741] FAULT_INJECTION: forcing a failure. [ 186.187741] name failslab, interval 1, probability 0, space 0, times 0 [ 186.200995] CPU: 0 PID: 14773 Comm: syz-executor.1 Not tainted 4.14.210-syzkaller #0 [ 186.209381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.219478] Call Trace: [ 186.222208] dump_stack+0x1b2/0x283 [ 186.225950] should_fail.cold+0x10a/0x154 [ 186.230336] should_failslab+0xd6/0x130 [ 186.235391] kmem_cache_alloc+0x28e/0x3c0 [ 186.242041] __kernfs_new_node+0x6f/0x470 [ 186.246211] kernfs_new_node+0x7b/0xe0 [ 186.250205] __kernfs_create_file+0x3d/0x320 [ 186.254843] sysfs_add_file_mode_ns+0x1e1/0x450 [ 186.259792] ? kernfs_create_dir_ns+0x171/0x200 [ 186.263756] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 186.264930] internal_create_group+0x22b/0x710 [ 186.264949] lo_ioctl+0x1137/0x1cd0 [ 186.264961] ? loop_set_status64+0xe0/0xe0 [ 186.264972] blkdev_ioctl+0x540/0x1830 [ 186.264981] ? blkpg_ioctl+0x8d0/0x8d0 [ 186.264991] ? trace_hardirqs_on+0x10/0x10 [ 186.265006] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 186.304622] ? debug_check_no_obj_freed+0x2c0/0x674 [ 186.309914] block_ioctl+0xd9/0x120 [ 186.313555] ? blkdev_fallocate+0x3a0/0x3a0 [ 186.317894] do_vfs_ioctl+0x75a/0xff0 [ 186.321712] ? ioctl_preallocate+0x1a0/0x1a0 [ 186.326137] ? lock_downgrade+0x740/0x740 [ 186.330913] ? __fget+0x225/0x360 [ 186.334736] ? do_vfs_ioctl+0xff0/0xff0 [ 186.337976] FAULT_INJECTION: forcing a failure. [ 186.337976] name failslab, interval 1, probability 0, space 0, times 0 [ 186.339535] ? security_file_ioctl+0x83/0xb0 [ 186.339549] SyS_ioctl+0x7f/0xb0 [ 186.339559] ? do_vfs_ioctl+0xff0/0xff0 [ 186.339571] do_syscall_64+0x1d5/0x640 [ 186.339589] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 186.339597] RIP: 0033:0x45dd27 [ 186.339601] RSP: 002b:00007f7485806a28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 19:42:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, 0xffffffffffffffff, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 186.339610] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 186.339614] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 186.339617] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 186.339621] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 186.339625] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 19:42:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 186.437097] CPU: 1 PID: 14784 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 186.445616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.456500] Call Trace: [ 186.459236] dump_stack+0x1b2/0x283 [ 186.462873] should_fail.cold+0x10a/0x154 [ 186.467433] should_failslab+0xd6/0x130 [ 186.472036] kmem_cache_alloc_node_trace+0x25a/0x400 [ 186.478247] __kmalloc_node_track_caller+0x38/0x70 [ 186.483945] __alloc_skb+0x96/0x510 19:42:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 186.487872] kobject_uevent_env+0x882/0xf40 [ 186.492316] lo_ioctl+0x11a6/0x1cd0 [ 186.496360] ? loop_set_status64+0xe0/0xe0 [ 186.500708] blkdev_ioctl+0x540/0x1830 [ 186.504699] ? blkpg_ioctl+0x8d0/0x8d0 [ 186.508691] ? trace_hardirqs_on+0x10/0x10 [ 186.513755] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 186.519737] ? debug_check_no_obj_freed+0x2c0/0x674 [ 186.525744] block_ioctl+0xd9/0x120 [ 186.529757] ? blkdev_fallocate+0x3a0/0x3a0 [ 186.535746] do_vfs_ioctl+0x75a/0xff0 19:42:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(0x0, 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 186.540173] ? ioctl_preallocate+0x1a0/0x1a0 [ 186.545584] ? lock_downgrade+0x740/0x740 [ 186.550986] ? __fget+0x225/0x360 [ 186.555075] ? do_vfs_ioctl+0xff0/0xff0 [ 186.559087] ? security_file_ioctl+0x83/0xb0 [ 186.563853] SyS_ioctl+0x7f/0xb0 [ 186.567349] ? do_vfs_ioctl+0xff0/0xff0 [ 186.572266] do_syscall_64+0x1d5/0x640 [ 186.576911] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 186.582457] RIP: 0033:0x45dd27 [ 186.586011] RSP: 002b:00007f37146daa28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.595746] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 186.603915] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 186.617041] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 186.634815] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 186.649297] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 [ 186.680262] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:42:09 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="48000000100005070000000000000000000004", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(0x0, 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:09 executing program 1 (fault-call:3 fault-nth:15): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:09 executing program 4 (fault-call:3 fault-nth:26): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:09 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@security={'security\x00', 0xe, 0x4, 0x4c0, 0xffffffff, 0x0, 0x128, 0x360, 0xffffffff, 0xffffffff, 0x428, 0x428, 0x428, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}, @common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}, {{@uncond, 0x0, 0x1c8, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'netdevsim0\x00', {0x2, 0x0, 0x50, 0x0, 0x0, 0x1f, 0x1, 0x4a7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "794b8970f502233f7abf4cf012d89aae2e8ece83ebedc0823188395ed552d3805bd5823eedcd4dfaaf39827c4560faaee33cf1c9fbec2870b1aa308bef280334"}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x4e22, @empty}, 0x0, 0x0, 0x0, 0x0, 0xcbe3, &(0x7f0000000040)='wg1\x00', 0x1000000000000000, 0xa79, 0x9}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400}], 0x0, &(0x7f0000014900)) 19:42:09 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x4, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x3) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r2, r3, &(0x7f0000000040), 0xffff) fcntl$addseals(r3, 0x409, 0x8) ioctl$SNDCTL_SEQ_RESETSAMPLES(0xffffffffffffffff, 0x40045109, &(0x7f0000000140)=0x7) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000000)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) dup3(r4, r3, 0x0) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000000080)) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$IOCTL_STOP_ACCEL_DEV(r6, 0x40096101, &(0x7f0000000400)={{&(0x7f0000000380)={'KERNEL\x00', {&(0x7f0000000240)=@adf_str={@format={'Cy', '0', 'RingAsymRx\x00'}, {"820300413e020fca7d92a81ed58ff7fc1b6f41776b099a962778bb0bbf228c977288c09966e2995eb4d4eb6f58757e8556e8af69528c3243b62c2e3ad933537d"}, {&(0x7f0000000180)=@adf_hex={@normal='NumberDcInstances\x00', {0x9}}}}}, {&(0x7f0000000300)={'Accelerator\x00'}}}}, 0x7}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e22, @empty}}}, 0x84) [ 186.794292] FAULT_INJECTION: forcing a failure. [ 186.794292] name failslab, interval 1, probability 0, space 0, times 0 [ 186.799773] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 19:42:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(0x0, 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 186.836190] CPU: 1 PID: 14816 Comm: syz-executor.1 Not tainted 4.14.210-syzkaller #0 [ 186.848949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.859958] Call Trace: [ 186.863645] dump_stack+0x1b2/0x283 [ 186.869155] should_fail.cold+0x10a/0x154 [ 186.873592] should_failslab+0xd6/0x130 [ 186.877712] kmem_cache_alloc+0x28e/0x3c0 [ 186.882505] __kernfs_new_node+0x6f/0x470 [ 186.887919] kernfs_new_node+0x7b/0xe0 [ 186.892176] __kernfs_create_file+0x3d/0x320 [ 186.896790] sysfs_add_file_mode_ns+0x1e1/0x450 [ 186.901736] ? kernfs_create_dir_ns+0x171/0x200 [ 186.906434] internal_create_group+0x22b/0x710 [ 186.910677] FAULT_INJECTION: forcing a failure. [ 186.910677] name failslab, interval 1, probability 0, space 0, times 0 [ 186.911036] lo_ioctl+0x1137/0x1cd0 [ 186.929849] ? loop_set_status64+0xe0/0xe0 [ 186.934844] blkdev_ioctl+0x540/0x1830 [ 186.939213] ? blkpg_ioctl+0x8d0/0x8d0 19:42:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 186.943589] ? trace_hardirqs_on+0x10/0x10 [ 186.948349] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 186.953476] ? debug_check_no_obj_freed+0x2c0/0x674 [ 186.958600] block_ioctl+0xd9/0x120 [ 186.962241] ? blkdev_fallocate+0x3a0/0x3a0 [ 186.966784] do_vfs_ioctl+0x75a/0xff0 [ 186.970849] ? ioctl_preallocate+0x1a0/0x1a0 [ 186.976323] ? lock_downgrade+0x740/0x740 [ 186.981423] ? __fget+0x225/0x360 [ 186.985679] ? do_vfs_ioctl+0xff0/0xff0 [ 186.990335] ? security_file_ioctl+0x83/0xb0 19:42:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 186.995386] SyS_ioctl+0x7f/0xb0 [ 186.998965] ? do_vfs_ioctl+0xff0/0xff0 [ 187.003293] do_syscall_64+0x1d5/0x640 [ 187.007504] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 187.013060] RIP: 0033:0x45dd27 [ 187.016513] RSP: 002b:00007f7485806a28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.024776] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 187.033079] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 187.040679] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 187.048296] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 187.055695] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 [ 187.063071] CPU: 0 PID: 14824 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 187.071320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.080853] Call Trace: [ 187.083448] dump_stack+0x1b2/0x283 [ 187.087220] should_fail.cold+0x10a/0x154 [ 187.091370] should_failslab+0xd6/0x130 [ 187.095432] kmem_cache_alloc_node+0x263/0x410 [ 187.100538] __alloc_skb+0x5c/0x510 [ 187.105467] kobject_uevent_env+0x882/0xf40 [ 187.109883] lo_ioctl+0x11a6/0x1cd0 [ 187.113595] ? loop_set_status64+0xe0/0xe0 [ 187.118014] blkdev_ioctl+0x540/0x1830 [ 187.122748] ? blkpg_ioctl+0x8d0/0x8d0 [ 187.126837] ? trace_hardirqs_on+0x10/0x10 [ 187.131355] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 187.136672] ? debug_check_no_obj_freed+0x2c0/0x674 [ 187.141949] block_ioctl+0xd9/0x120 [ 187.146508] ? blkdev_fallocate+0x3a0/0x3a0 [ 187.151180] do_vfs_ioctl+0x75a/0xff0 [ 187.154981] ? ioctl_preallocate+0x1a0/0x1a0 [ 187.159377] ? lock_downgrade+0x740/0x740 [ 187.163721] ? __fget+0x225/0x360 [ 187.167273] ? do_vfs_ioctl+0xff0/0xff0 [ 187.171350] ? security_file_ioctl+0x83/0xb0 [ 187.176542] SyS_ioctl+0x7f/0xb0 [ 187.180353] ? do_vfs_ioctl+0xff0/0xff0 [ 187.184416] do_syscall_64+0x1d5/0x640 [ 187.188304] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 187.193756] RIP: 0033:0x45dd27 [ 187.196940] RSP: 002b:00007f37146b9a28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.206047] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 187.213576] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 187.221883] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 187.230435] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 19:42:09 executing program 3: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) 19:42:09 executing program 1 (fault-call:3 fault-nth:16): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) [ 187.238107] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 [ 187.264030] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:42:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:09 executing program 4 (fault-call:3 fault-nth:27): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:09 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) write$tun(r1, &(0x7f0000000040)={@void, @val={0x2, 0x1, 0x5, 0xfff, 0x101, 0xfbff}, @arp=@generic={0x20, 0x88fb, 0x6, 0xc, 0x3, @multicast, "3148de64d71b3349863153a9", @local, "1511a29e81c01a798fee"}}, 0x34) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="d299c6f6f5a7a33d8b38599eb87bfd25c919ba1d8fef8ddcc1557c3652b53c149b9bb4990c817f5e6c21a07c8968ea193df1dc3d481338ca88b545e7901883725d51f4168d2ac273aa7c3c35332e136aaf799d2dd5e0b30f529255fcf387e33f2ca74a8ac287af7615f9a144d934"]) getsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000140), &(0x7f0000000180)=0x4) [ 187.397045] print_req_error: I/O error, dev loop5, sector 0 [ 187.403603] Buffer I/O error on dev loop5, logical block 0, async page read [ 187.421187] FAULT_INJECTION: forcing a failure. [ 187.421187] name failslab, interval 1, probability 0, space 0, times 0 [ 187.421261] FAULT_INJECTION: forcing a failure. [ 187.421261] name failslab, interval 1, probability 0, space 0, times 0 [ 187.459665] CPU: 0 PID: 14856 Comm: syz-executor.1 Not tainted 4.14.210-syzkaller #0 [ 187.468637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.479396] Call Trace: [ 187.481991] dump_stack+0x1b2/0x283 [ 187.485877] should_fail.cold+0x10a/0x154 [ 187.490997] should_failslab+0xd6/0x130 [ 187.495638] kmem_cache_alloc+0x28e/0x3c0 [ 187.499896] __kernfs_new_node+0x6f/0x470 [ 187.504603] kernfs_new_node+0x7b/0xe0 [ 187.508843] __kernfs_create_file+0x3d/0x320 [ 187.513780] sysfs_add_file_mode_ns+0x1e1/0x450 [ 187.518646] ? kernfs_create_dir_ns+0x171/0x200 [ 187.523737] internal_create_group+0x22b/0x710 [ 187.528594] lo_ioctl+0x1137/0x1cd0 [ 187.532227] ? loop_set_status64+0xe0/0xe0 [ 187.536694] blkdev_ioctl+0x540/0x1830 [ 187.541297] ? blkpg_ioctl+0x8d0/0x8d0 [ 187.545793] ? trace_hardirqs_on+0x10/0x10 [ 187.551075] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 187.556358] ? debug_check_no_obj_freed+0x2c0/0x674 [ 187.561394] block_ioctl+0xd9/0x120 [ 187.565215] ? blkdev_fallocate+0x3a0/0x3a0 [ 187.569917] do_vfs_ioctl+0x75a/0xff0 [ 187.573861] ? ioctl_preallocate+0x1a0/0x1a0 [ 187.578495] ? lock_downgrade+0x740/0x740 [ 187.586251] ? __fget+0x225/0x360 [ 187.589841] ? do_vfs_ioctl+0xff0/0xff0 [ 187.594104] ? security_file_ioctl+0x83/0xb0 [ 187.600148] SyS_ioctl+0x7f/0xb0 [ 187.603645] ? do_vfs_ioctl+0xff0/0xff0 [ 187.609529] do_syscall_64+0x1d5/0x640 [ 187.615607] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 187.621896] RIP: 0033:0x45dd27 [ 187.625983] RSP: 002b:00007f7485806a28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.637317] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 187.644677] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 187.653172] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 187.660655] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 187.668546] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 [ 187.676226] CPU: 1 PID: 14854 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 187.684843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.694813] Call Trace: [ 187.697785] dump_stack+0x1b2/0x283 [ 187.701835] should_fail.cold+0x10a/0x154 [ 187.706132] should_failslab+0xd6/0x130 [ 187.710777] kmem_cache_alloc_node+0x263/0x410 [ 187.716039] __alloc_skb+0x5c/0x510 [ 187.719763] kobject_uevent_env+0x882/0xf40 [ 187.724712] lo_ioctl+0x11a6/0x1cd0 [ 187.729350] ? loop_set_status64+0xe0/0xe0 [ 187.733962] blkdev_ioctl+0x540/0x1830 [ 187.738127] ? blkpg_ioctl+0x8d0/0x8d0 [ 187.742024] ? trace_hardirqs_on+0x10/0x10 [ 187.746558] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 187.752348] ? debug_check_no_obj_freed+0x2c0/0x674 [ 187.757391] block_ioctl+0xd9/0x120 [ 187.761134] ? blkdev_fallocate+0x3a0/0x3a0 [ 187.766120] do_vfs_ioctl+0x75a/0xff0 [ 187.769972] ? ioctl_preallocate+0x1a0/0x1a0 [ 187.774688] ? lock_downgrade+0x740/0x740 [ 187.779207] ? __fget+0x225/0x360 [ 187.783365] ? do_vfs_ioctl+0xff0/0xff0 [ 187.789431] ? security_file_ioctl+0x83/0xb0 [ 187.794446] SyS_ioctl+0x7f/0xb0 [ 187.797880] ? do_vfs_ioctl+0xff0/0xff0 [ 187.801861] do_syscall_64+0x1d5/0x640 [ 187.805857] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 187.812447] RIP: 0033:0x45dd27 [ 187.815979] RSP: 002b:00007f37146daa28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.825456] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 187.834880] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 187.843064] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 187.851886] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 187.859426] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 19:42:10 executing program 1 (fault-call:3 fault-nth:17): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:10 executing program 4 (fault-call:3 fault-nth:28): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) [ 187.960862] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 187.965664] FAULT_INJECTION: forcing a failure. [ 187.965664] name failslab, interval 1, probability 0, space 0, times 0 [ 187.983654] CPU: 0 PID: 14896 Comm: syz-executor.1 Not tainted 4.14.210-syzkaller #0 [ 187.991647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 188.001763] Call Trace: [ 188.004382] dump_stack+0x1b2/0x283 [ 188.008330] should_fail.cold+0x10a/0x154 [ 188.014871] should_failslab+0xd6/0x130 [ 188.019312] kmem_cache_alloc+0x40/0x3c0 [ 188.023732] radix_tree_node_alloc.constprop.0+0x1b0/0x2f0 [ 188.029823] idr_get_free_cmn+0x595/0x8d0 [ 188.034881] idr_alloc_cmn+0xe8/0x1e0 [ 188.039490] ? __fprop_inc_percpu_max+0x1d0/0x1d0 [ 188.044448] ? kernfs_add_one+0x4c/0x3a0 [ 188.050300] ? fs_reclaim_release+0xd0/0x110 [ 188.055359] idr_alloc_cyclic+0xc2/0x1d0 [ 188.059594] ? idr_alloc_cmn+0x1e0/0x1e0 [ 188.064027] ? __radix_tree_preload+0x1c3/0x250 [ 188.069294] __kernfs_new_node+0xaf/0x470 [ 188.073803] kernfs_new_node+0x7b/0xe0 [ 188.078375] __kernfs_create_file+0x3d/0x320 [ 188.083471] sysfs_add_file_mode_ns+0x1e1/0x450 [ 188.088667] ? kernfs_create_dir_ns+0x171/0x200 [ 188.094682] internal_create_group+0x22b/0x710 [ 188.099881] lo_ioctl+0x1137/0x1cd0 [ 188.103786] ? loop_set_status64+0xe0/0xe0 [ 188.108335] blkdev_ioctl+0x540/0x1830 [ 188.112426] ? blkpg_ioctl+0x8d0/0x8d0 [ 188.116465] ? trace_hardirqs_on+0x10/0x10 [ 188.120936] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 188.126705] ? debug_check_no_obj_freed+0x2c0/0x674 [ 188.132419] block_ioctl+0xd9/0x120 [ 188.136927] ? blkdev_fallocate+0x3a0/0x3a0 [ 188.142540] do_vfs_ioctl+0x75a/0xff0 [ 188.146764] ? ioctl_preallocate+0x1a0/0x1a0 [ 188.151462] ? lock_downgrade+0x740/0x740 [ 188.156728] ? __fget+0x225/0x360 [ 188.161361] ? do_vfs_ioctl+0xff0/0xff0 [ 188.166141] ? security_file_ioctl+0x83/0xb0 [ 188.174618] SyS_ioctl+0x7f/0xb0 [ 188.179589] ? do_vfs_ioctl+0xff0/0xff0 [ 188.185559] do_syscall_64+0x1d5/0x640 [ 188.190146] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 188.196105] RIP: 0033:0x45dd27 [ 188.199873] RSP: 002b:00007f7485806a28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.209002] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 188.216734] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 188.225145] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 188.234050] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 188.245466] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 19:42:10 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400000, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x6f, @private2, 0x7ff}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:42:10 executing program 3: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) 19:42:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 188.266626] FAULT_INJECTION: forcing a failure. [ 188.266626] name failslab, interval 1, probability 0, space 0, times 0 [ 188.307292] CPU: 1 PID: 14900 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 188.315574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 188.325906] Call Trace: [ 188.328852] dump_stack+0x1b2/0x283 [ 188.333636] should_fail.cold+0x10a/0x154 [ 188.338141] should_failslab+0xd6/0x130 [ 188.342179] kmem_cache_alloc_node+0x263/0x410 [ 188.346854] __alloc_skb+0x5c/0x510 [ 188.351523] kobject_uevent_env+0x882/0xf40 [ 188.356111] lo_ioctl+0x11a6/0x1cd0 [ 188.359973] ? loop_set_status64+0xe0/0xe0 [ 188.364697] blkdev_ioctl+0x540/0x1830 [ 188.368670] ? blkpg_ioctl+0x8d0/0x8d0 [ 188.372990] ? trace_hardirqs_on+0x10/0x10 [ 188.377688] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 188.383274] ? debug_check_no_obj_freed+0x2c0/0x674 [ 188.388678] block_ioctl+0xd9/0x120 [ 188.392713] ? blkdev_fallocate+0x3a0/0x3a0 [ 188.397031] do_vfs_ioctl+0x75a/0xff0 [ 188.401001] ? ioctl_preallocate+0x1a0/0x1a0 [ 188.405983] ? lock_downgrade+0x740/0x740 [ 188.410856] ? __fget+0x225/0x360 [ 188.418635] ? do_vfs_ioctl+0xff0/0xff0 [ 188.423281] ? security_file_ioctl+0x83/0xb0 [ 188.428401] SyS_ioctl+0x7f/0xb0 [ 188.432310] ? do_vfs_ioctl+0xff0/0xff0 [ 188.436997] do_syscall_64+0x1d5/0x640 [ 188.441470] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 188.448759] RIP: 0033:0x45dd27 [ 188.453056] RSP: 002b:00007f37146daa28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.464177] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 188.472062] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 188.479417] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 188.487313] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 188.495164] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 19:42:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r3, 0xff, "396617", "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"}}, 0x110) [ 188.503532] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:42:10 executing program 1 (fault-call:3 fault-nth:18): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 188.560143] nla_parse: 1 callbacks suppressed [ 188.560151] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:42:11 executing program 4 (fault-call:3 fault-nth:29): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) [ 188.701972] FAULT_INJECTION: forcing a failure. [ 188.701972] name failslab, interval 1, probability 0, space 0, times 0 [ 188.706790] FAULT_INJECTION: forcing a failure. [ 188.706790] name failslab, interval 1, probability 0, space 0, times 0 [ 188.723848] CPU: 1 PID: 14937 Comm: syz-executor.1 Not tainted 4.14.210-syzkaller #0 [ 188.736127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 188.746901] Call Trace: [ 188.749706] dump_stack+0x1b2/0x283 [ 188.753727] should_fail.cold+0x10a/0x154 [ 188.758901] should_failslab+0xd6/0x130 [ 188.763342] kmem_cache_alloc+0x28e/0x3c0 [ 188.768215] __kernfs_new_node+0x6f/0x470 [ 188.772856] kernfs_new_node+0x7b/0xe0 [ 188.777011] __kernfs_create_file+0x3d/0x320 [ 188.781524] sysfs_add_file_mode_ns+0x1e1/0x450 [ 188.787037] ? kernfs_create_dir_ns+0x171/0x200 [ 188.792897] internal_create_group+0x22b/0x710 [ 188.797977] lo_ioctl+0x1137/0x1cd0 [ 188.801993] ? loop_set_status64+0xe0/0xe0 [ 188.806613] blkdev_ioctl+0x540/0x1830 [ 188.810851] ? blkpg_ioctl+0x8d0/0x8d0 [ 188.814834] ? trace_hardirqs_on+0x10/0x10 [ 188.819313] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 188.824620] ? debug_check_no_obj_freed+0x2c0/0x674 [ 188.829790] block_ioctl+0xd9/0x120 [ 188.834327] ? blkdev_fallocate+0x3a0/0x3a0 [ 188.838791] do_vfs_ioctl+0x75a/0xff0 [ 188.843008] ? ioctl_preallocate+0x1a0/0x1a0 [ 188.848368] ? lock_downgrade+0x740/0x740 [ 188.852629] ? __fget+0x225/0x360 [ 188.856253] ? do_vfs_ioctl+0xff0/0xff0 [ 188.860544] ? security_file_ioctl+0x83/0xb0 [ 188.865203] SyS_ioctl+0x7f/0xb0 [ 188.869273] ? do_vfs_ioctl+0xff0/0xff0 [ 188.873925] do_syscall_64+0x1d5/0x640 [ 188.878156] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 188.884180] RIP: 0033:0x45dd27 [ 188.887716] RSP: 002b:00007f74857e5a28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 19:42:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x10, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 188.896580] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 188.905263] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 188.912831] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 188.921400] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 188.929806] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 19:42:11 executing program 3: socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) [ 188.976028] CPU: 1 PID: 14943 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 188.984484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 188.995520] Call Trace: [ 188.998142] dump_stack+0x1b2/0x283 [ 188.998807] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 189.001795] should_fail.cold+0x10a/0x154 [ 189.001811] should_failslab+0xd6/0x130 [ 189.001827] kmem_cache_alloc_node+0x263/0x410 [ 189.001841] __alloc_skb+0x5c/0x510 [ 189.028056] kobject_uevent_env+0x882/0xf40 [ 189.032948] lo_ioctl+0x11a6/0x1cd0 [ 189.037117] ? loop_set_status64+0xe0/0xe0 [ 189.041585] blkdev_ioctl+0x540/0x1830 [ 189.045566] ? blkpg_ioctl+0x8d0/0x8d0 [ 189.049899] ? trace_hardirqs_on+0x10/0x10 [ 189.054515] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 189.060332] ? debug_check_no_obj_freed+0x2c0/0x674 [ 189.065381] block_ioctl+0xd9/0x120 [ 189.069249] ? blkdev_fallocate+0x3a0/0x3a0 [ 189.073584] do_vfs_ioctl+0x75a/0xff0 [ 189.077667] ? ioctl_preallocate+0x1a0/0x1a0 [ 189.082597] ? lock_downgrade+0x740/0x740 [ 189.087193] ? __fget+0x225/0x360 [ 189.091301] ? do_vfs_ioctl+0xff0/0xff0 [ 189.095603] ? security_file_ioctl+0x83/0xb0 [ 189.100567] SyS_ioctl+0x7f/0xb0 [ 189.104446] ? do_vfs_ioctl+0xff0/0xff0 [ 189.108979] do_syscall_64+0x1d5/0x640 [ 189.113157] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 189.119600] RIP: 0033:0x45dd27 [ 189.124180] RSP: 002b:00007f37146daa28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.136715] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 189.145039] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 189.152919] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 189.160373] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 189.168753] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 19:42:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x10, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:11 executing program 1 (fault-call:3 fault-nth:19): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:11 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4004) ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000000180)={@bcast, @bcast}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:11 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:11 executing program 4 (fault-call:3 fault-nth:30): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:11 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa4, 0x464, 0x1, 0xca2b, 0x25dfdbfd, "d9b3e7caff39c3aec8561b20734b4389aab7a7205acb76688325395af3d41b33391c1deb19d5c1bd56d33b989b70667216e646fe20d60f044f6f99d9487823e6f0305545fde35ac03fae557b93a43f2ae18e18119a1b869ce6a399e71b8e32283bd44b68d0d35bd33fc8530f4794b9493d0698d88fcf0b896972905e15e3a610435ed0fe3ede1135ca35952822d641b2daa23252", ["", ""]}, 0xa4}, 0x1, 0x0, 0x0, 0x40800}, 0x20840) r1 = socket$inet6(0xa, 0x3, 0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000440)=@security={'security\x00', 0xe, 0x4, 0x4c0, 0xffffffff, 0x0, 0x128, 0x360, 0xffffffff, 0xffffffff, 0x428, 0x428, 0x428, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}, @common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}, {{@uncond, 0x0, 0x1c8, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'netdevsim0\x00', {0x2, 0x0, 0x50, 0x0, 0x0, 0x1f, 0x1, 0x4a7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "794b8970f502233f7abf4cf012d89aae2e8ece83ebedc0823188395ed552d3805bd5823eedcd4dfaaf39827c4560faaee33cf1c9fbec2870b1aa308bef280334"}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000000)={0x2, 0x81, 0x9}, 0xc) syz_open_dev$swradio(&(0x7f0000000a00)='/dev/swradio#\x00', 0x1, 0x2) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000140)=0x2000000) read$dsp(r3, &(0x7f0000000040)=""/18, 0x12) ioctl(r3, 0x1000, &(0x7f00000003c0)="afb9b3b03e8f79332d4801f60a99ee302e4411497bf9d2") setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000400)=0x1, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240)='ethtool\x00') sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x8c, r4, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x4}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x8000}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xec}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x4}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x20}, @ETHTOOL_A_RINGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x40010) [ 189.343103] FAULT_INJECTION: forcing a failure. [ 189.343103] name failslab, interval 1, probability 0, space 0, times 0 [ 189.343359] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 189.361101] CPU: 0 PID: 14985 Comm: syz-executor.1 Not tainted 4.14.210-syzkaller #0 [ 189.371627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.381082] Call Trace: [ 189.383679] dump_stack+0x1b2/0x283 [ 189.387405] should_fail.cold+0x10a/0x154 [ 189.391576] should_failslab+0xd6/0x130 [ 189.395652] kmem_cache_alloc_node+0x263/0x410 [ 189.400229] __alloc_skb+0x5c/0x510 [ 189.403891] kobject_uevent_env+0x882/0xf40 [ 189.408280] lo_ioctl+0x11a6/0x1cd0 [ 189.411896] ? loop_set_status64+0xe0/0xe0 [ 189.416132] blkdev_ioctl+0x540/0x1830 [ 189.420029] ? blkpg_ioctl+0x8d0/0x8d0 [ 189.424005] ? trace_hardirqs_on+0x10/0x10 [ 189.428714] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 189.433839] ? debug_check_no_obj_freed+0x2c0/0x674 [ 189.439403] block_ioctl+0xd9/0x120 [ 189.443107] ? blkdev_fallocate+0x3a0/0x3a0 [ 189.447771] do_vfs_ioctl+0x75a/0xff0 [ 189.451651] ? ioctl_preallocate+0x1a0/0x1a0 [ 189.456599] ? lock_downgrade+0x740/0x740 [ 189.460738] ? __fget+0x225/0x360 [ 189.464171] ? do_vfs_ioctl+0xff0/0xff0 [ 189.468272] ? security_file_ioctl+0x83/0xb0 [ 189.472783] SyS_ioctl+0x7f/0xb0 [ 189.476229] ? do_vfs_ioctl+0xff0/0xff0 [ 189.480192] do_syscall_64+0x1d5/0x640 [ 189.484254] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 189.489545] RIP: 0033:0x45dd27 19:42:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x10, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 189.492841] RSP: 002b:00007f7485806a28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.500656] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 189.508282] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 189.516307] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 189.523786] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 189.531221] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 [ 189.563630] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 189.581497] FAULT_INJECTION: forcing a failure. [ 189.581497] name failslab, interval 1, probability 0, space 0, times 0 [ 189.610440] CPU: 0 PID: 14994 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 189.619164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.629304] Call Trace: [ 189.632038] dump_stack+0x1b2/0x283 [ 189.635927] should_fail.cold+0x10a/0x154 [ 189.640175] should_failslab+0xd6/0x130 [ 189.644157] kmem_cache_alloc_node+0x263/0x410 [ 189.648725] __alloc_skb+0x5c/0x510 [ 189.652369] kobject_uevent_env+0x882/0xf40 [ 189.656724] lo_ioctl+0x11a6/0x1cd0 [ 189.660352] ? loop_set_status64+0xe0/0xe0 [ 189.664940] blkdev_ioctl+0x540/0x1830 [ 189.668867] ? blkpg_ioctl+0x8d0/0x8d0 [ 189.672751] ? trace_hardirqs_on+0x10/0x10 [ 189.677006] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 189.682138] ? debug_check_no_obj_freed+0x2c0/0x674 [ 189.687439] block_ioctl+0xd9/0x120 [ 189.691053] ? blkdev_fallocate+0x3a0/0x3a0 [ 189.695461] do_vfs_ioctl+0x75a/0xff0 [ 189.699250] ? ioctl_preallocate+0x1a0/0x1a0 [ 189.703651] ? lock_downgrade+0x740/0x740 [ 189.707831] ? __fget+0x225/0x360 [ 189.711289] ? do_vfs_ioctl+0xff0/0xff0 [ 189.715266] ? security_file_ioctl+0x83/0xb0 [ 189.719677] SyS_ioctl+0x7f/0xb0 [ 189.723026] ? do_vfs_ioctl+0xff0/0xff0 [ 189.726984] do_syscall_64+0x1d5/0x640 [ 189.730871] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 189.736178] RIP: 0033:0x45dd27 [ 189.739372] RSP: 002b:00007f37146b9a28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.747075] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 189.754376] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 19:42:12 executing program 1 (fault-call:3 fault-nth:20): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) [ 189.761666] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 189.768922] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 189.776190] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 19:42:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, 0xffffffffffffffff, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:12 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 189.822329] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:42:12 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) fcntl$setown(r2, 0x8, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_mount_image$nfs(&(0x7f0000000040)='nfs\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="d32e8c2190669a833328baf7f8496de94f7246476130a0a14c805b39af6a0698ec77dbf74cd7dbabf2061bf281ae3fadb5843f5a13db16fc92628b611431dd22176b79d14f6ca9e07097cf6a6dedd5253e9b7932f5586dfabe440b025f7a7e6545b01380ed8757a031308ae3b6c0ce208144c54008f3e3a522285ed4f773733d52ff6b3499f2153557882fc777f2b43540f67d1910cfa25f9abdff59d9a8b29c9e5c348774ce556bb5dccbbed237a6d497a943", 0xb3, 0x401}], 0x0, &(0x7f0000000240)={[{'.^:(['}, {'f2fs\x00'}], [{@uid_lt={'uid<', 0xee00}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) [ 189.903783] FAULT_INJECTION: forcing a failure. [ 189.903783] name failslab, interval 1, probability 0, space 0, times 0 [ 189.908795] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 189.945991] CPU: 1 PID: 15027 Comm: syz-executor.1 Not tainted 4.14.210-syzkaller #0 [ 189.953911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.963273] Call Trace: [ 189.965960] dump_stack+0x1b2/0x283 [ 189.969826] should_fail.cold+0x10a/0x154 [ 189.974102] should_failslab+0xd6/0x130 [ 189.978097] kmem_cache_alloc_trace+0x29a/0x3d0 [ 189.982780] ? dev_uevent_filter+0xd0/0xd0 [ 189.987027] kobject_uevent_env+0x20c/0xf40 [ 189.991384] ? internal_create_group+0x48f/0x710 [ 189.996240] lo_ioctl+0x11a6/0x1cd0 [ 189.999869] ? loop_set_status64+0xe0/0xe0 [ 190.004113] blkdev_ioctl+0x540/0x1830 [ 190.008027] ? blkpg_ioctl+0x8d0/0x8d0 [ 190.012103] ? trace_hardirqs_on+0x10/0x10 [ 190.016358] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 190.021647] ? debug_check_no_obj_freed+0x2c0/0x674 [ 190.026854] block_ioctl+0xd9/0x120 [ 190.030487] ? blkdev_fallocate+0x3a0/0x3a0 [ 190.034905] do_vfs_ioctl+0x75a/0xff0 [ 190.039588] ? ioctl_preallocate+0x1a0/0x1a0 [ 190.044001] ? lock_downgrade+0x740/0x740 [ 190.048247] ? __fget+0x225/0x360 [ 190.051707] ? do_vfs_ioctl+0xff0/0xff0 [ 190.055688] ? security_file_ioctl+0x83/0xb0 [ 190.060105] SyS_ioctl+0x7f/0xb0 [ 190.063611] ? do_vfs_ioctl+0xff0/0xff0 [ 190.067582] do_syscall_64+0x1d5/0x640 [ 190.071622] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 190.076893] RIP: 0033:0x45dd27 [ 190.080062] RSP: 002b:00007f7485806a28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.087764] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 19:42:12 executing program 4 (fault-call:3 fault-nth:31): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:12 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = fcntl$dupfd(r0, 0x0, r0) connect$ax25(r1, &(0x7f0000000080)={{0x3, @bcast, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:42:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, 0xffffffffffffffff, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 190.095031] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 190.102285] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 190.109539] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 190.116916] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 19:42:12 executing program 1 (fault-call:3 fault-nth:21): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:12 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 190.176609] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 190.207767] FAULT_INJECTION: forcing a failure. [ 190.207767] name failslab, interval 1, probability 0, space 0, times 0 [ 190.232115] CPU: 0 PID: 15063 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 190.240064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.244745] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 190.249504] Call Trace: [ 190.249523] dump_stack+0x1b2/0x283 [ 190.249537] should_fail.cold+0x10a/0x154 [ 190.249550] should_failslab+0xd6/0x130 [ 190.273218] kmem_cache_alloc_node_trace+0x25a/0x400 [ 190.278438] __kmalloc_node_track_caller+0x38/0x70 [ 190.283547] __alloc_skb+0x96/0x510 [ 190.287172] kobject_uevent_env+0x882/0xf40 [ 190.291595] lo_ioctl+0x11a6/0x1cd0 [ 190.295209] ? loop_set_status64+0xe0/0xe0 [ 190.299430] blkdev_ioctl+0x540/0x1830 [ 190.303396] ? blkpg_ioctl+0x8d0/0x8d0 [ 190.307292] ? trace_hardirqs_on+0x10/0x10 [ 190.311510] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 190.316702] ? debug_check_no_obj_freed+0x2c0/0x674 [ 190.321708] block_ioctl+0xd9/0x120 [ 190.325346] ? blkdev_fallocate+0x3a0/0x3a0 [ 190.329655] do_vfs_ioctl+0x75a/0xff0 [ 190.333546] ? ioctl_preallocate+0x1a0/0x1a0 [ 190.338025] ? lock_downgrade+0x740/0x740 [ 190.342177] ? __fget+0x225/0x360 [ 190.345640] ? do_vfs_ioctl+0xff0/0xff0 [ 190.349605] ? security_file_ioctl+0x83/0xb0 [ 190.354001] SyS_ioctl+0x7f/0xb0 [ 190.357438] ? do_vfs_ioctl+0xff0/0xff0 [ 190.361413] do_syscall_64+0x1d5/0x640 [ 190.365488] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 190.371427] RIP: 0033:0x45dd27 [ 190.374821] RSP: 002b:00007f37146daa28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.385804] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 190.393085] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 190.400879] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 190.408134] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 190.415484] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 19:42:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, 0xffffffffffffffff, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 190.439308] FAULT_INJECTION: forcing a failure. [ 190.439308] name failslab, interval 1, probability 0, space 0, times 0 [ 190.459228] CPU: 0 PID: 15072 Comm: syz-executor.1 Not tainted 4.14.210-syzkaller #0 [ 190.467143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.476604] Call Trace: [ 190.479205] dump_stack+0x1b2/0x283 [ 190.482950] should_fail.cold+0x10a/0x154 [ 190.488090] should_failslab+0xd6/0x130 [ 190.492288] kmem_cache_alloc_node_trace+0x25a/0x400 [ 190.497414] __kmalloc_node_track_caller+0x38/0x70 [ 190.502778] __alloc_skb+0x96/0x510 [ 190.507017] kobject_uevent_env+0x882/0xf40 [ 190.511532] lo_ioctl+0x11a6/0x1cd0 [ 190.515474] ? loop_set_status64+0xe0/0xe0 [ 190.519831] blkdev_ioctl+0x540/0x1830 [ 190.523795] ? blkpg_ioctl+0x8d0/0x8d0 [ 190.527932] ? trace_hardirqs_on+0x10/0x10 [ 190.532284] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 190.537669] ? debug_check_no_obj_freed+0x2c0/0x674 [ 190.542864] block_ioctl+0xd9/0x120 [ 190.546726] ? blkdev_fallocate+0x3a0/0x3a0 [ 190.551438] do_vfs_ioctl+0x75a/0xff0 [ 190.555250] ? ioctl_preallocate+0x1a0/0x1a0 [ 190.559815] ? lock_downgrade+0x740/0x740 [ 190.564048] ? __fget+0x225/0x360 [ 190.568003] ? do_vfs_ioctl+0xff0/0xff0 [ 190.572005] ? security_file_ioctl+0x83/0xb0 [ 190.576515] SyS_ioctl+0x7f/0xb0 [ 190.580584] ? do_vfs_ioctl+0xff0/0xff0 [ 190.585454] do_syscall_64+0x1d5/0x640 [ 190.589351] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 190.594718] RIP: 0033:0x45dd27 [ 190.597894] RSP: 002b:00007f7485806a28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.605679] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 190.614032] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 190.621708] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 190.629078] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 19:42:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x2, &(0x7f00000001c0)={0x3, 0x3, 0x80000001, 0x8, r2}) fcntl$setpipe(r4, 0x407, 0x0) keyctl$reject(0x13, 0x0, 0x2, 0x3670c369, 0xfffffffffffffffb) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, &(0x7f00000000c0)={0x101, 0x0, 0x2013, 0x0, 0x1ff, {0x7ff, 0x4}}) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000180)={0x50, 0x4c47504a, 0x1, 0xfffffff7, 0x2, @discrete={0x2, 0x9}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r6) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfc, 0x400000}, 0xc, &(0x7f0000000140)=[{&(0x7f00000002c0)={0xa4, 0x25, 0x400, 0x70bd28, 0x25dfdbfb, "", [@generic="d58a52e413e2f378a3fcfb076f3a1c2cf789137d139e6c93ceddd4b64f301faabcbcbb75e579bb936183e7050c564b5059eeb09177fb202a2d6869d0c691779742654b0f427d38d0eaf72edce87711578c65941962a6cc988c5ff65146caae4c8c4822f8363eff4148079d7dccb8848d1dfda248b41deb0159767c9c9de1c63d81ede300dbc240ede6b23735cac46b9cfaa2c8"]}, 0xa4}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="3800000000000000017d00000001000000", @ANYRES32=r4, @ANYRES32, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r6, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x24004040}, 0x40) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0xc8d9}, {0x0, 0x0, 0x25}], 0x20000, &(0x7f0000000280)=ANY=[@ANYRESDEC=r5, @ANYRESDEC=r6, @ANYBLOB=',\x00']) [ 190.639290] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 [ 190.651948] print_req_error: I/O error, dev loop5, sector 0 19:42:13 executing program 4 (fault-call:3 fault-nth:32): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) [ 190.683489] f2fs_msg: 238 callbacks suppressed [ 190.683499] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 190.700346] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 190.709059] F2FS-fs (loop1): invalid crc value [ 190.718782] F2FS-fs (loop1): invalid crc value 19:42:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 190.729071] F2FS-fs (loop1): Failed to get valid F2FS checkpoint 19:42:13 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 190.767578] FAULT_INJECTION: forcing a failure. [ 190.767578] name failslab, interval 1, probability 0, space 0, times 0 [ 190.783507] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 190.792404] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 190.800711] CPU: 0 PID: 15099 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 190.808601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.817984] Call Trace: [ 190.820580] dump_stack+0x1b2/0x283 [ 190.824219] should_fail.cold+0x10a/0x154 [ 190.828378] should_failslab+0xd6/0x130 [ 190.832359] kmem_cache_alloc_node_trace+0x25a/0x400 [ 190.835071] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 190.837469] __kmalloc_node_track_caller+0x38/0x70 [ 190.837483] __alloc_skb+0x96/0x510 [ 190.837497] kobject_uevent_env+0x882/0xf40 [ 190.837514] lo_ioctl+0x11a6/0x1cd0 [ 190.862616] ? loop_set_status64+0xe0/0xe0 [ 190.866861] blkdev_ioctl+0x540/0x1830 [ 190.870768] ? blkpg_ioctl+0x8d0/0x8d0 [ 190.874671] ? trace_hardirqs_on+0x10/0x10 [ 190.878921] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 190.884570] ? debug_check_no_obj_freed+0x2c0/0x674 [ 190.889873] block_ioctl+0xd9/0x120 [ 190.893501] ? blkdev_fallocate+0x3a0/0x3a0 [ 190.897824] do_vfs_ioctl+0x75a/0xff0 [ 190.901654] ? ioctl_preallocate+0x1a0/0x1a0 [ 190.906058] ? lock_downgrade+0x740/0x740 [ 190.910217] ? __fget+0x225/0x360 [ 190.913676] ? do_vfs_ioctl+0xff0/0xff0 [ 190.917667] ? security_file_ioctl+0x83/0xb0 [ 190.922080] SyS_ioctl+0x7f/0xb0 [ 190.925624] ? do_vfs_ioctl+0xff0/0xff0 [ 190.929780] do_syscall_64+0x1d5/0x640 [ 190.934642] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 190.939834] RIP: 0033:0x45dd27 [ 190.943019] RSP: 002b:00007f37146daa28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.950784] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 190.958089] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 19:42:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:13 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002793ced83d57b2947460ff56e2da8a54ea6202c455000000000000"]) [ 190.965797] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 190.973064] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 190.980458] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 [ 190.990045] F2FS-fs (loop1): invalid crc value [ 190.997382] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 191.004672] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 19:42:13 executing program 4 (fault-call:3 fault-nth:33): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) [ 191.079468] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 191.089057] print_req_error: I/O error, dev loop5, sector 0 19:42:13 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x20, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfffffff8}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x104) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) getsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000b67000), &(0x7f0000000000)=0x4) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @private0={0xfc, 0x0, [], 0x1}, 0x3}, 0x1c) 19:42:13 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 191.154217] FAULT_INJECTION: forcing a failure. [ 191.154217] name failslab, interval 1, probability 0, space 0, times 0 [ 191.184005] CPU: 0 PID: 15139 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 191.191926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.201279] Call Trace: [ 191.203855] dump_stack+0x1b2/0x283 [ 191.207466] should_fail.cold+0x10a/0x154 [ 191.211596] should_failslab+0xd6/0x130 [ 191.215564] kmem_cache_alloc_node_trace+0x25a/0x400 [ 191.220652] __kmalloc_node_track_caller+0x38/0x70 [ 191.225576] __alloc_skb+0x96/0x510 [ 191.229374] kobject_uevent_env+0x882/0xf40 [ 191.233682] lo_ioctl+0x11a6/0x1cd0 [ 191.237310] ? loop_set_status64+0xe0/0xe0 [ 191.241552] blkdev_ioctl+0x540/0x1830 [ 191.245426] ? blkpg_ioctl+0x8d0/0x8d0 [ 191.249301] ? trace_hardirqs_on+0x10/0x10 [ 191.253520] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 191.258620] ? debug_check_no_obj_freed+0x2c0/0x674 [ 191.263621] block_ioctl+0xd9/0x120 [ 191.267238] ? blkdev_fallocate+0x3a0/0x3a0 [ 191.271550] do_vfs_ioctl+0x75a/0xff0 [ 191.275345] ? ioctl_preallocate+0x1a0/0x1a0 [ 191.279732] ? lock_downgrade+0x740/0x740 [ 191.284382] ? __fget+0x225/0x360 [ 191.287817] ? do_vfs_ioctl+0xff0/0xff0 [ 191.291781] ? security_file_ioctl+0x83/0xb0 [ 191.296175] SyS_ioctl+0x7f/0xb0 [ 191.299532] ? do_vfs_ioctl+0xff0/0xff0 [ 191.303490] do_syscall_64+0x1d5/0x640 [ 191.307454] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 191.312622] RIP: 0033:0x45dd27 [ 191.315791] RSP: 002b:00007f37146daa28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.323567] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 191.330816] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 191.338065] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 191.345315] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 191.352575] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 19:42:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x800, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000280)=[@in={0x2, 0x4e23, @local}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e22, 0x3, @loopback, 0x1}, @in6={0xa, 0x4e22, 0x6, @local}, @in6={0xa, 0x4e24, 0x9, @private0, 0x5}, @in={0x2, 0x4e21, @rand_addr=0x64010102}], 0x94) 19:42:13 executing program 4 (fault-call:3 fault-nth:34): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, 0x0, 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 191.380259] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 191.402198] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:42:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, 0x0, 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:13 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="2d6811bf28ae"}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="8401005600640000012bbd7000fddbdf07221218e6fe14f12770ab2cae3cbb412500000000", @ANYRES32=r6, @ANYBLOB="0300f3ff00000f00000001000b0001006367726f75700000100102000c0101000801160008000100627066002c0002800c0006002e2f66696c6530000c0006002e2f66696c65300008000500", @ANYRES32=r1, @ANYBLOB="0600030003000000b8000600d0b6a166d04915f1f6c278664b73590452250976fe9e3046b62e65a717d3b2f1dbb009dcce4cfc2861a5ed8b43f2bcb8add283d63716e89aa588a7baae18e7b661cf57f420d00e4cf9662930166d5895594c10463313a81b70a2b8ef4829e28ad4af0e9ea13c31d8a73c2b6675364b2096a609844df571143ef78b4c90b9dc4b4e471e97779e54713ce55d0ca0ae9638a681f37cbfdaf37225b0a786e79dac035886efd89d87cdd305eb7407143202b9274c12ea0c00070000000000010000000c000800010000000300000008000100753332002c00020008000200ffff000008000300e3090000080001000d000600080001000d000d0008000300ff010000060005000400000008000b0080000000"], 0x184}, 0x1, 0x0, 0x0, 0x40001}, 0x20000010) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x8, @mcast1, 0xc000}}, 0x23a5, 0x9, 0xd041, 0x9, 0x5, 0x8, 0x79}, &(0x7f0000000180)=0x9c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={r7, 0x1}, &(0x7f00000004c0)=0x8) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000640)={&(0x7f0000000580), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) bind$unix(r9, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='wlan1\x00') [ 191.470440] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 191.493904] FAULT_INJECTION: forcing a failure. [ 191.493904] name failslab, interval 1, probability 0, space 0, times 0 [ 191.526240] CPU: 0 PID: 15173 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 191.534154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.543520] Call Trace: [ 191.546099] dump_stack+0x1b2/0x283 [ 191.549714] should_fail.cold+0x10a/0x154 [ 191.553858] should_failslab+0xd6/0x130 [ 191.557820] kmem_cache_alloc_node+0x263/0x410 [ 191.562431] __alloc_skb+0x5c/0x510 [ 191.566055] kobject_uevent_env+0x882/0xf40 [ 191.570364] lo_ioctl+0x11a6/0x1cd0 [ 191.573984] ? loop_set_status64+0xe0/0xe0 [ 191.578205] blkdev_ioctl+0x540/0x1830 [ 191.582090] ? blkpg_ioctl+0x8d0/0x8d0 [ 191.585964] ? trace_hardirqs_on+0x10/0x10 [ 191.590195] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 191.595281] ? debug_check_no_obj_freed+0x2c0/0x674 [ 191.600282] block_ioctl+0xd9/0x120 [ 191.603888] ? blkdev_fallocate+0x3a0/0x3a0 [ 191.608293] do_vfs_ioctl+0x75a/0xff0 [ 191.612101] ? ioctl_preallocate+0x1a0/0x1a0 [ 191.616882] ? lock_downgrade+0x740/0x740 [ 191.621174] ? __fget+0x225/0x360 [ 191.624695] ? do_vfs_ioctl+0xff0/0xff0 [ 191.628676] ? security_file_ioctl+0x83/0xb0 [ 191.633067] SyS_ioctl+0x7f/0xb0 [ 191.636431] ? do_vfs_ioctl+0xff0/0xff0 [ 191.640404] do_syscall_64+0x1d5/0x640 [ 191.644337] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 191.649611] RIP: 0033:0x45dd27 [ 191.652804] RSP: 002b:00007f37146daa28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.660668] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 191.667946] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 19:42:14 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="01b3429fb8cf5816eda22a0b5fdaeb38fb383e9b7424d8e4d121c09fd279647f366312c4fcae9eec4e8f5c6928a9bd0fc4e8264ffee3d7abf818b265c17436764c299feda10805c53933b4ef57b18d8d32ee4ba009ec29df9983f2ea9241802042ffb162"], 0x2) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@random={'trusted.', '\x00'}, &(0x7f0000000140)=""/206, 0xce) r3 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:42:14 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 191.675213] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 191.682466] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 191.689827] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 19:42:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, 0x0, 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 191.731663] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 191.768542] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:42:14 executing program 4 (fault-call:3 fault-nth:35): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000200)) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x1, 0x8, &(0x7f0000002340)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002040000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}, {&(0x7f0000000080)="fb0f5bbe12bb6cb2155d7c5ec66e3d7f78c913a955b7cb1b09a434fa098b81dbe76206bb27affb2a3a09df3b4765845c558c9ba223b9dfa95450426ac367b2a89fd625a8ce7aa11a1f128ba8ac2d926850d083", 0x53, 0x8}, {&(0x7f0000000140)="7436c2714c72b73a8411a562649525530168362ec3add6e1a5e75f106f0cc0d6ae517122ae001fd3c538fc75ee4444724f254666fc16ce59f5baff0aac76955484d5fa7f2fc60bb7ad74195463b841ab413c81c8b468402fc93fb6fd84bee12ca5e54ac87a80af64593a740775ec04a4b4344f31da87fb", 0x77, 0x3}, {&(0x7f0000000240)="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", 0x1000, 0x6}, {&(0x7f00000001c0)="dd0ed1df75f7e945f061d2221aa88bf512a1ff14c1cec52fa4dfa24cd9cd921651baa37e8b4c05cb1b961e0f8edcf2eb467d4f8a9f", 0x35, 0xf041}, {&(0x7f0000001240)="fd25f0ee67acec921ecb562fa35b2744f71edc9a7eec02beeec37ce3e36702c96c5ea77c09d28861b17fd951e7a17e8a0c78d12facc370e439e73105e496885a3476471cd8e781203e358f6c59b54b8b7f7adc5abc4f12ecb79e6bacefb559685f264b7b2a8c0828bd2873d8c44f7b263a8f583f9e4469bf3b5d253608fcb58ecca54b7a34114ea017a90a90a570ae47f4c5549623558cb2db2e8c3fcd350ffd2bbe4f46febc5820b6502bf9e4a06bd9fe1ce6b2ea81274b9a8a7f5ff6f336453b6072e382ef57e5bdbe0ac75ad5c3ea435fe222fac98a4d18975d93f37360", 0xdf, 0x7ffe}, {&(0x7f0000001340)="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", 0x1000, 0xffffffff}], 0x0, &(0x7f0000002400)=ANY=[@ANYBLOB="758c726a71756f74613d66326673002c002942152c0c805d5b6f96d6486ea55158495c3b2f13a1540d88122a4f648a8e63f420f6ebb4020855c3b5513594ca36fc859e67d4990ffd5dfc4f8a1d068c6d3410de02fb321797783d0c5080815a64a6e7e7f7bd58fa02830a14a4d9d9bea5aac394711b7316184cc0cba6af989ea3297a3821c0fa336270d20c1b34a71ba096cadd0ce5470c759fecfdeb6063f80d3fcdc8b96232d85373d37175"]) [ 191.851305] FAULT_INJECTION: forcing a failure. [ 191.851305] name failslab, interval 1, probability 0, space 0, times 0 [ 191.869222] CPU: 0 PID: 15216 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 191.877157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.886527] Call Trace: [ 191.889110] dump_stack+0x1b2/0x283 [ 191.892745] should_fail.cold+0x10a/0x154 [ 191.896898] should_failslab+0xd6/0x130 [ 191.900867] kmem_cache_alloc_node_trace+0x25a/0x400 [ 191.905959] __kmalloc_node_track_caller+0x38/0x70 [ 191.910882] __alloc_skb+0x96/0x510 [ 191.914759] kobject_uevent_env+0x882/0xf40 [ 191.919168] lo_ioctl+0x11a6/0x1cd0 [ 191.923275] ? loop_set_status64+0xe0/0xe0 [ 191.927504] blkdev_ioctl+0x540/0x1830 [ 191.931393] ? blkpg_ioctl+0x8d0/0x8d0 [ 191.935875] ? trace_hardirqs_on+0x10/0x10 [ 191.940123] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 191.945737] ? debug_check_no_obj_freed+0x2c0/0x674 [ 191.951030] block_ioctl+0xd9/0x120 [ 191.954661] ? blkdev_fallocate+0x3a0/0x3a0 [ 191.958983] do_vfs_ioctl+0x75a/0xff0 [ 191.962781] ? ioctl_preallocate+0x1a0/0x1a0 [ 191.967450] ? lock_downgrade+0x740/0x740 [ 191.971617] ? __fget+0x225/0x360 [ 191.975083] ? do_vfs_ioctl+0xff0/0xff0 [ 191.979043] ? security_file_ioctl+0x83/0xb0 [ 191.983458] SyS_ioctl+0x7f/0xb0 [ 191.986862] ? do_vfs_ioctl+0xff0/0xff0 [ 191.991053] do_syscall_64+0x1d5/0x640 [ 191.994972] entry_SYSCALL_64_after_hwframe+0x46/0xbb 19:42:14 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 192.000160] RIP: 0033:0x45dd27 [ 192.003337] RSP: 002b:00007f37146daa28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.011326] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 192.018946] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 192.026570] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 192.033844] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 192.041317] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 19:42:14 executing program 1: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VT_DISALLOCATE(r1, 0x5608) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000040)={0x1, 0x4, 0x2, {0x2, 0x6}, 0x9, 0xd5}) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_EXPECT_MASK={0x28, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x200400a0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)=ANY=[@ANYBLOB="a7"]) 19:42:14 executing program 4 (fault-call:3 fault-nth:36): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) [ 192.128994] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:42:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 192.226819] FAULT_INJECTION: forcing a failure. [ 192.226819] name failslab, interval 1, probability 0, space 0, times 0 [ 192.239604] CPU: 1 PID: 15258 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 192.247511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.256875] Call Trace: [ 192.259463] dump_stack+0x1b2/0x283 [ 192.263080] should_fail.cold+0x10a/0x154 [ 192.267477] should_failslab+0xd6/0x130 [ 192.271469] kmem_cache_alloc_node+0x263/0x410 [ 192.276257] __alloc_skb+0x5c/0x510 [ 192.279899] kobject_uevent_env+0x882/0xf40 [ 192.284211] lo_ioctl+0x11a6/0x1cd0 [ 192.287824] ? loop_set_status64+0xe0/0xe0 [ 192.292079] blkdev_ioctl+0x540/0x1830 [ 192.295985] ? blkpg_ioctl+0x8d0/0x8d0 [ 192.299881] ? trace_hardirqs_on+0x10/0x10 [ 192.304719] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 192.309814] ? debug_check_no_obj_freed+0x2c0/0x674 [ 192.314827] block_ioctl+0xd9/0x120 [ 192.318444] ? blkdev_fallocate+0x3a0/0x3a0 [ 192.322750] do_vfs_ioctl+0x75a/0xff0 [ 192.326533] ? ioctl_preallocate+0x1a0/0x1a0 [ 192.330925] ? lock_downgrade+0x740/0x740 [ 192.335098] ? __fget+0x225/0x360 [ 192.338541] ? do_vfs_ioctl+0xff0/0xff0 [ 192.342586] ? security_file_ioctl+0x83/0xb0 [ 192.347438] SyS_ioctl+0x7f/0xb0 [ 192.350900] ? do_vfs_ioctl+0xff0/0xff0 [ 192.354881] do_syscall_64+0x1d5/0x640 [ 192.358966] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 192.364228] RIP: 0033:0x45dd27 [ 192.367402] RSP: 002b:00007f37146daa28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 19:42:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 192.375098] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 192.382359] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 192.389620] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 192.396883] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 192.404160] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 [ 192.531678] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:42:14 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040054}, 0x20000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:42:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000040)=0x5, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)=ANY=[@ANYBLOB='\t']) 19:42:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:14 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:14 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getpgrp(0xffffffffffffffff) getsockopt$inet_int(r1, 0x0, 0x32, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="bafb2f90b6ea100000000000000000007bb0e27bfb188e064d"]) 19:42:14 executing program 4 (fault-call:3 fault-nth:37): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 192.657398] FAULT_INJECTION: forcing a failure. [ 192.657398] name failslab, interval 1, probability 0, space 0, times 0 [ 192.669592] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 192.705730] CPU: 0 PID: 15292 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 192.713903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.723513] Call Trace: [ 192.726093] dump_stack+0x1b2/0x283 [ 192.729813] should_fail.cold+0x10a/0x154 [ 192.733972] should_failslab+0xd6/0x130 [ 192.738297] kmem_cache_alloc_node_trace+0x25a/0x400 [ 192.743400] __kmalloc_node_track_caller+0x38/0x70 [ 192.748323] __alloc_skb+0x96/0x510 [ 192.751959] kobject_uevent_env+0x882/0xf40 [ 192.756289] lo_ioctl+0x11a6/0x1cd0 [ 192.760419] ? loop_set_status64+0xe0/0xe0 [ 192.764779] blkdev_ioctl+0x540/0x1830 [ 192.769288] ? blkpg_ioctl+0x8d0/0x8d0 [ 192.773179] ? trace_hardirqs_on+0x10/0x10 [ 192.777416] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 192.782825] ? debug_check_no_obj_freed+0x2c0/0x674 [ 192.787844] block_ioctl+0xd9/0x120 [ 192.791457] ? blkdev_fallocate+0x3a0/0x3a0 [ 192.795795] do_vfs_ioctl+0x75a/0xff0 [ 192.799618] ? ioctl_preallocate+0x1a0/0x1a0 [ 192.804035] ? lock_downgrade+0x740/0x740 [ 192.808311] ? __fget+0x225/0x360 [ 192.811868] ? do_vfs_ioctl+0xff0/0xff0 [ 192.816031] ? security_file_ioctl+0x83/0xb0 [ 192.820709] SyS_ioctl+0x7f/0xb0 [ 192.824090] ? do_vfs_ioctl+0xff0/0xff0 [ 192.828056] do_syscall_64+0x1d5/0x640 [ 192.831957] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 192.837218] RIP: 0033:0x45dd27 [ 192.840479] RSP: 002b:00007f37146daa28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.848545] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 19:42:15 executing program 4 (fault-call:3 fault-nth:38): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) [ 192.855809] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 192.863095] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 192.870355] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 192.877629] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 19:42:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:15 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0xf0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, [0xffffffff, 0xff000000, 0xffffffff, 0xff], [0xffffff00, 0xffffff00, 0xffffff, 0xff], 'erspan0\x00', '\x00', {0xff}, {0xff}, 0x13, 0x1, 0x1, 0x8}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [0xffffff00], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @empty, [0x0, 0x0, 0x0, 0xff000000], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000140)=0x2) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = socket$inet6(0xa, 0xa, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) ioctl$KVM_KVMCLOCK_CTRL(r4, 0xaead) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000080)={0x0, 0xf2}) [ 192.920942] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:42:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x1084, 0x14, 0x800, 0x70bd29, 0x25dfdbfd, {0x2b, 0x33}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x6c, 0x1, "6ac15b0345f5af83c5464296de28bfee69b73f4bde6ec69708679e8e99116dfaf9ab70434dafc1ecb6c861d99f0cf77517af2315d0b68f47cd8fe740647a51bf5d1b300d94621eb487ec2dfcc7a8216e3ef4cbfce8e47d40c7f51c8faeb66385a0b03ac7ba2c8926"}]}, 0x1084}, 0x1, 0x0, 0x0, 0x800}, 0x40040) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000180)={@id={0x2, 0x0, @auto="51b0a2963f4db7213b7d74a11b55e2d3"}}) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x2aad084, &(0x7f0000000140)=ANY=[@ANYRES32=r3]) 19:42:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x2) socket$inet6(0xa, 0x3, 0x2) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000140)={0x0, @reserved}) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="31ae1a8abf31e4a6c2d4396bba234cb100"]) 19:42:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:15 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 193.073897] FAULT_INJECTION: forcing a failure. [ 193.073897] name failslab, interval 1, probability 0, space 0, times 0 [ 193.105868] CPU: 0 PID: 15321 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 193.113773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.123133] Call Trace: [ 193.125749] dump_stack+0x1b2/0x283 [ 193.129366] should_fail.cold+0x10a/0x154 [ 193.133504] should_failslab+0xd6/0x130 [ 193.137461] kmem_cache_alloc_trace+0x29a/0x3d0 [ 193.142126] ? kobject_create.cold+0x1f/0x1f [ 193.146791] call_usermodehelper_setup+0x73/0x2e0 [ 193.151640] kobject_uevent_env+0xc28/0xf40 [ 193.156065] lo_ioctl+0x11a6/0x1cd0 [ 193.159705] ? loop_set_status64+0xe0/0xe0 [ 193.166323] blkdev_ioctl+0x540/0x1830 [ 193.170366] ? blkpg_ioctl+0x8d0/0x8d0 [ 193.174507] ? trace_hardirqs_on+0x10/0x10 [ 193.185093] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 193.190283] ? debug_check_no_obj_freed+0x2c0/0x674 [ 193.195473] block_ioctl+0xd9/0x120 [ 193.199104] ? blkdev_fallocate+0x3a0/0x3a0 [ 193.203412] do_vfs_ioctl+0x75a/0xff0 [ 193.207214] ? ioctl_preallocate+0x1a0/0x1a0 [ 193.211622] ? lock_downgrade+0x740/0x740 [ 193.215760] ? __fget+0x225/0x360 [ 193.219306] ? do_vfs_ioctl+0xff0/0xff0 [ 193.223269] ? security_file_ioctl+0x83/0xb0 [ 193.227657] SyS_ioctl+0x7f/0xb0 [ 193.231010] ? do_vfs_ioctl+0xff0/0xff0 [ 193.234971] do_syscall_64+0x1d5/0x640 [ 193.238853] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 193.244102] RIP: 0033:0x45dd27 [ 193.247412] RSP: 002b:00007f37146daa28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.255122] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045dd27 [ 193.262374] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 19:42:15 executing program 4 (fault-call:3 fault-nth:39): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) [ 193.269627] RBP: 0000000000000000 R08: 0000000020000230 R09: 0000000000000000 [ 193.276891] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000002 [ 193.284144] R13: 0000000000000006 R14: 0000000000000006 R15: 0000000020000240 19:42:15 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x5}, 0x4) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000119000002", 0x69, 0x401}, {0x0, 0x0, 0x400000}], 0x200040, &(0x7f0000000140)=ANY=[@ANYBLOB="0017f566d4cc6beb095933560d36f5ea9683d8d0ad2078e0a46bfdc2477f5401f06410473c79"]) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f00000000c0)=0x9) 19:42:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000001340)=[{&(0x7f0000000140)="d7c9976305f21b4528da8465a92583978103370bff8df60b39c951ac408efd11f6da408ffc5ea1bf429bf2cb971aedf860eae222b4e98d592f5392d072a04426eeec4213ac3e7eaa7815b023125051d096b677f5f70c94e8bf6d6bb188b8ad5498fa595efad1063736f64ab8907f3731470a5ec64b54bcc02774c541295ca31909de660171199573faa07326699741d2dad2c9d1622ae4085938c7d2a0b54a787c74f3e6a493b61683a0bfdbcb7c8d3db605fa91694da663b086f6a6c47460217a51bc24a63aad456dcf468cfd5993db9373a757f78d36d0e814855ccb368226693aa92fa83d", 0xe6, 0x9}, {&(0x7f0000000040)="3921100d9eb5a501af97b93860dcd8e16d1dfd53ea1f6e881b76802b76593812982e7bfe0ef66be9de663b504d5c5dd53554f902a074072e29d00b38454aaf07af24d459657f91e845bbddee", 0x4c, 0x7}, {&(0x7f00000024c0)="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", 0x10c4}, {&(0x7f00000000c0)="5442b34b7e359e0287d59f10de94fc0496b9e20c325af20d15550e12d43cb5927873f911e7756a8c89d882466f82b88660", 0x31, 0x3}, {&(0x7f0000001240)="59d54f32dbdd4493e00e63a34b9bd9d954792c8ed002f59e021378cf5c7d50b8dbd106d1457839137cdb091fde3f2111d75ba4e5f7c288c121271dfa5b01a9c0082ba0b36231907bf1f87765784f417034d3484f9dc4c38410907cb5a9a7fcf92b895bbd12372cdb1ffb8a8e3cdf60e5738a231d81b55e906a2e2ae4261e3bb337b5243bc57d25b5daf42e616fe1566fbf5f3c18a93826250f0e69", 0x9b, 0xffffffffffffffbb}, {&(0x7f0000001300)="a4347c12c1829e887b18c2108313851451d300b4ede15811b88ab61ed5161b6df3fd2f13ff78d2a9ae0354", 0x2b, 0x5}], 0x3402, &(0x7f0000014900)=ANY=[@ANYBLOB='_']) 19:42:15 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r2, 0x721}, 0x14}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r2, 0x300, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000140)=0x2000000) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) read$dsp(r5, &(0x7f0000000040)=""/18, 0x12) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)=0x20000) r6 = socket$inet6(0xa, 0x1, 0x0) sched_yield() connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c) r7 = dup2(0xffffffffffffffff, r6) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000000c0)) 19:42:15 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 193.463405] FAULT_INJECTION: forcing a failure. [ 193.463405] name failslab, interval 1, probability 0, space 0, times 0 [ 193.486084] CPU: 1 PID: 15368 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 193.494365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.503724] Call Trace: [ 193.506343] dump_stack+0x1b2/0x283 [ 193.509967] should_fail.cold+0x10a/0x154 [ 193.514102] should_failslab+0xd6/0x130 [ 193.518058] kmem_cache_alloc+0x28e/0x3c0 [ 193.522197] getname_flags+0xc8/0x550 [ 193.526072] SyS_mkdirat+0x83/0x270 [ 193.529768] ? SyS_mknod+0x30/0x30 [ 193.533385] ? fput+0xb/0x140 [ 193.536560] ? do_syscall_64+0x4c/0x640 [ 193.540515] ? SyS_mkdirat+0x270/0x270 [ 193.544392] do_syscall_64+0x1d5/0x640 [ 193.548266] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 193.553643] RIP: 0033:0x45d2d7 [ 193.556822] RSP: 002b:00007f37146daa88 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 193.565159] RAX: ffffffffffffffda RBX: 00007f37146dab20 RCX: 000000000045d2d7 [ 193.573196] RDX: 0000000000000006 RSI: 00000000000001ff RDI: 0000000020000100 [ 193.580543] RBP: 00007f37146daae0 R08: 0000000020000230 R09: 0000000000000000 [ 193.587977] R10: 0000000000400000 R11: 0000000000000213 R12: 0000000020000000 [ 193.596202] R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020014900 19:42:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b01002400000700697076"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:16 executing program 4 (fault-call:3 fault-nth:40): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:16 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x41000000, &(0x7f0000000400)="30ebd9c165ad4ce8c325e3e092080fbd65492e7dad535902761cb398df29d0c3ee84a1fad5b093968cba09d4a4eedce69fdb06e961d3519f2b5ad7af3b08c606f05620cdfa9475176e3ba3ea5e4e789a892b1899755ad692e2d48b974d2f8182e90895d547aa9b642873d7f76e0163002f0de8473484695cbf5f1b915aa6c4ed205c7e083c09e7e38903f0065bd6cabdecffb9b183f648d95fa1c91e306b2c16883277bb147190c7e0c70cfd7373802ddd8f472478502d74aa3777dc355c801e66e36216ea649b7e9cd78409fa33b22c3adabcee99dc3c01bb3f2b8706cebfca90c6eb719eff5501f72a3199591ae623cd265b927d47ec", &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000500)="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") fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r5) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfc, 0x400000}, 0xc, &(0x7f0000000140)=[{&(0x7f00000002c0)={0xa4, 0x25, 0x400, 0x70bd28, 0x25dfdbfb, "", [@generic="d58a52e413e2f378a3fcfb076f3a1c2cf789137d139e6c93ceddd4b64f301faabcbcbb75e579bb936183e7050c564b5059eeb09177fb202a2d6869d0c691779742654b0f427d38d0eaf72edce87711578c65941962a6cc988c5ff65146caae4c8c4822f8363eff4148079d7dccb8848d1dfda248b41deb0159767c9c9de1c63d81ede300dbc240ede6b23735cac46b9cfaa2c8"]}, 0xa4}], 0x1, &(0x7f0000000380)=[@rights={{0x38, 0x1, 0x1, [r4, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {r2, r5, 0xffffffffffffffff}}}], 0x58, 0x24004040}, 0x40) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000000240)={[{@grpjquota={'grpjquota', 0x3d, 'euid<'}}, {@disable_ext_identify='disable_ext_identify'}], [{@obj_role={'obj_role'}}, {@euid_lt={'euid<', r5}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@dont_appraise='dont_appraise'}]}) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000040)={0x1, {0x400, 0x168, 0x61d5, 0x5, 0x7, 0x80000000}}) [ 193.682451] net_ratelimit: 3 callbacks suppressed [ 193.682455] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:42:16 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x210900, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [""]}, 0x14}}, 0x800) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000040)={{0x4, 0x6}, {0x7, 0xcb}, 0x0, 0x1, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) [ 193.773610] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 193.783177] IPVS: ftp: loaded support on port[0] = 21 [ 193.797758] FAULT_INJECTION: forcing a failure. [ 193.797758] name failslab, interval 1, probability 0, space 0, times 0 [ 193.837624] CPU: 0 PID: 15420 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 193.845631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.854989] Call Trace: [ 193.857581] dump_stack+0x1b2/0x283 [ 193.861211] should_fail.cold+0x10a/0x154 [ 193.865367] should_failslab+0xd6/0x130 [ 193.869353] kmem_cache_alloc+0x28e/0x3c0 [ 193.873515] getname_flags+0xc8/0x550 [ 193.877326] SyS_mkdirat+0x83/0x270 [ 193.881051] ? SyS_mknod+0x30/0x30 [ 193.884626] ? fput+0xb/0x140 [ 193.888132] ? do_syscall_64+0x4c/0x640 [ 193.892113] ? SyS_mkdirat+0x270/0x270 [ 193.896002] do_syscall_64+0x1d5/0x640 [ 193.899902] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 193.905093] RIP: 0033:0x45d2d7 [ 193.908303] RSP: 002b:00007f37146daa88 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 193.916885] RAX: ffffffffffffffda RBX: 00007f37146dab20 RCX: 000000000045d2d7 [ 193.924590] RDX: 0000000000000006 RSI: 00000000000001ff RDI: 0000000020000100 19:42:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b01002400000700697076"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 193.931886] RBP: 00007f37146daae0 R08: 0000000020000230 R09: 0000000000000000 [ 193.939294] R10: 0000000000400000 R11: 0000000000000213 R12: 0000000020000000 [ 193.946569] R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020014900 19:42:16 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x4, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 194.121326] nla_parse: 2 callbacks suppressed [ 194.121333] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:42:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b01002400000700697076"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 194.169320] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:42:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400004}], 0x0, &(0x7f0000014900)) 19:42:16 executing program 4 (fault-call:3 fault-nth:41): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:16 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 194.250449] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:42:16 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="2d6811bf28ae"}, 0x14) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$tun(r7, &(0x7f0000001680)={@void, @void, @x25={0x0, 0x3, 0x5, "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"}}, 0x1003) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="d00800002400ffff01009e000000000000000000", @ANYRES32=r5, @ANYBLOB="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"], 0x8d0}}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@remote, @in6=@empty, 0x4e24, 0x6, 0x4e24, 0x2d1, 0x2, 0x20, 0x0, 0x2c, r5, 0xffffffffffffffff}, {0x10000, 0x20, 0x2000000000000, 0x1, 0x100000000, 0x1f, 0x9, 0x3}, {0xfffffffffffffff9, 0x40, 0x7, 0x1f}, 0x80000001, 0x6e6bb5, 0x2, 0x0, 0x2, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d6, 0x32}, 0x2, @in=@loopback, 0x3501, 0x3, 0x1, 0x5, 0x9, 0x1000, 0x5}}, 0xe8) [ 194.345569] FAULT_INJECTION: forcing a failure. [ 194.345569] name failslab, interval 1, probability 0, space 0, times 0 19:42:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb415007"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 194.388018] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 194.389412] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 194.430467] CPU: 0 PID: 15495 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 194.439303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.448658] Call Trace: [ 194.451338] dump_stack+0x1b2/0x283 [ 194.454952] should_fail.cold+0x10a/0x154 [ 194.459183] should_failslab+0xd6/0x130 [ 194.463140] kmem_cache_alloc+0x28e/0x3c0 [ 194.467269] getname_flags+0xc8/0x550 [ 194.471060] SyS_mkdirat+0x83/0x270 [ 194.474692] ? SyS_mknod+0x30/0x30 [ 194.478211] ? fput+0xb/0x140 [ 194.481298] ? do_syscall_64+0x4c/0x640 [ 194.485250] ? SyS_mkdirat+0x270/0x270 [ 194.489116] do_syscall_64+0x1d5/0x640 [ 194.492990] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 194.498170] RIP: 0033:0x45d2d7 [ 194.501338] RSP: 002b:00007f37146daa88 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 194.509025] RAX: ffffffffffffffda RBX: 00007f37146dab20 RCX: 000000000045d2d7 [ 194.516275] RDX: 0000000000000006 RSI: 00000000000001ff RDI: 0000000020000100 [ 194.523553] RBP: 00007f37146daae0 R08: 0000000020000230 R09: 0000000000000000 19:42:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x4c0, 0xffffffff, 0x0, 0x0, 0x360, 0xffffffff, 0xffffffff, 0x428, 0x428, 0x428, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}, @common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}, {{@uncond, 0x0, 0x1c8, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'netdevsim0\x00', {0x2, 0x0, 0x50, 0x0, 0x0, 0x1f, 0x1, 0x4a7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "794b89702e8ece83ebedc0823188395ed552d3805bd5823eedcd4dfaaf39827c4560faaee33cf1c9fbec2870b1aa308bef28033400"}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f00000000c0)) write$nbd(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="07446698010000000000020036000000c345231e04b5cf6bdd5cb1a08b577526c0c8ea1aea6e4475b2a1deaa6d72362ca2045d57dfb77cb1d880dba18fbdd121ff061797622317227d0a6301efe599dc60088e6cabb6a6d97d34e07b8830263c2f28717363e4215ee162593a3569fdd7e4dc46a86ca721a1d95b34adb3ed05743d5cab3f06d8cfdf8644d0694983f01032f69cfcbc"], 0x11) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="83ec1e741ca0f142c39d2a2c85a6ccdd53e60f074d001bf5596b26095823"]) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x4, 0x4026}, &(0x7f00000001c0)=0x8) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$cgroup_type(r6, &(0x7f0000000300)='threaded\x00', 0x9) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000240)={r4, 0x69, "eda75d3069d0f8c9d9592dd169818e04cad9baa12d77f4bc2b3ba5481841b6971f5bbe117019e111d561f93f97834623c345cc3d3a3138242891a314a074e63d128fbafbff1a76f5de69cef02174acdf2e60683168783d94821c9a7e72aa290c9f712fd131da0417ce"}, &(0x7f00000002c0)=0x71) [ 194.530801] R10: 0000000000400000 R11: 0000000000000213 R12: 0000000020000000 [ 194.538063] R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020014900 [ 194.613385] x_tables: ip_tables: ah match: only valid for protocol 51 19:42:17 executing program 4 (fault-call:3 fault-nth:42): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:17 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb415007"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0x9]}, 0x8, 0x800) setns(r6, 0x40000000) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x7) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="004071c6050000000000000001000000010000009325d282b1d08b100100000050347518430cf32e1c51e8a10ae852d6f513bbe9000000000000000000eed52a196460e146b7d483b6d74fd4142879edb616894c91ae9e3c0228d7e9e5596cf4d0775ad79e3247241a5c134e17ef42110250574effebaf8c3cea3527a29d408b81b6c8ae3e0f"]) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {r7, 0xf}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000000c0)={'team0\x00'}) [ 194.723135] x_tables: ip_tables: ah match: only valid for protocol 51 [ 194.760169] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 194.765080] FAULT_INJECTION: forcing a failure. 19:42:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb415007"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 194.765080] name failslab, interval 1, probability 0, space 0, times 0 [ 194.795675] CPU: 1 PID: 15545 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 194.803595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.812949] Call Trace: [ 194.815543] dump_stack+0x1b2/0x283 [ 194.819177] should_fail.cold+0x10a/0x154 [ 194.823335] should_failslab+0xd6/0x130 [ 194.827326] kmem_cache_alloc+0x28e/0x3c0 [ 194.831492] getname_flags+0xc8/0x550 [ 194.835306] SyS_mkdirat+0x83/0x270 [ 194.839022] ? SyS_mknod+0x30/0x30 [ 194.842565] ? fput+0xb/0x140 [ 194.845674] ? do_syscall_64+0x4c/0x640 [ 194.849648] ? SyS_mkdirat+0x270/0x270 [ 194.853684] do_syscall_64+0x1d5/0x640 [ 194.857580] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 194.862763] RIP: 0033:0x45d2d7 [ 194.865947] RSP: 002b:00007f37146daa88 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 19:42:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) r2 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x3, 0x200884) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000080)={0x0, @aes128, 0x0, @desc2}) [ 194.873765] RAX: ffffffffffffffda RBX: 00007f37146dab20 RCX: 000000000045d2d7 [ 194.881040] RDX: 0000000000000006 RSI: 00000000000001ff RDI: 0000000020000100 [ 194.888296] RBP: 00007f37146daae0 R08: 0000000020000230 R09: 0000000000000000 [ 194.895560] R10: 0000000000400000 R11: 0000000000000213 R12: 0000000020000000 [ 194.902826] R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020014900 19:42:17 executing program 4 (fault-call:3 fault-nth:43): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef6"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:17 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 195.032328] FAULT_INJECTION: forcing a failure. [ 195.032328] name failslab, interval 1, probability 0, space 0, times 0 [ 195.045500] CPU: 0 PID: 15580 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 195.053402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.062842] Call Trace: [ 195.065437] dump_stack+0x1b2/0x283 [ 195.069073] should_fail.cold+0x10a/0x154 [ 195.073236] should_failslab+0xd6/0x130 [ 195.075316] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 195.077253] kmem_cache_alloc+0x28e/0x3c0 [ 195.077298] __d_alloc+0x2a/0xa20 [ 195.077306] ? d_lookup+0x172/0x220 [ 195.077318] d_alloc+0x46/0x240 [ 195.077332] __lookup_hash+0x101/0x270 [ 195.077343] filename_create+0x156/0x3f0 [ 195.108457] ? kern_path_mountpoint+0x40/0x40 [ 195.113135] SyS_mkdirat+0x95/0x270 [ 195.116769] ? SyS_mknod+0x30/0x30 [ 195.120313] ? do_syscall_64+0x4c/0x640 [ 195.124288] ? SyS_mkdirat+0x270/0x270 [ 195.128184] do_syscall_64+0x1d5/0x640 [ 195.132091] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 195.137278] RIP: 0033:0x45d2d7 [ 195.140486] RSP: 002b:00007f37146daa88 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 195.148197] RAX: ffffffffffffffda RBX: 00007f37146dab20 RCX: 000000000045d2d7 [ 195.155468] RDX: 0000000000000006 RSI: 00000000000001ff RDI: 0000000020000100 [ 195.162899] RBP: 00007f37146daae0 R08: 0000000020000230 R09: 0000000000000000 [ 195.170163] R10: 0000000000400000 R11: 0000000000000213 R12: 0000000020000000 [ 195.177424] R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020014900 19:42:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="000bb048073aeb330dd59691dff3841557fed489dafbe699726d3ea776b3ade06067a828376c511905e44230ab72655702fd229cb48707e278dfeeb9cec47027e811f301013d83bc0e03821ae20c61a031dda850971716966d8e65648b9d1c00e1ef978d0b5eb5e21c9dee4de55063265aa9a866541094290eec1972258c"]) r2 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x87, 0x2000) vmsplice(r2, &(0x7f0000001440)=[{&(0x7f0000000140)="36ebaa8081974730ea693fd2eaf4320041b03bb678e23200fda055c763b9341d1a181395e83e3b57b6da4ffb0d103f7fcf8a726223c8830b76580397cf7e86bfafd3d3e638f8397a444c2b96296af168fbc1bd6b33de99d59805c5a5940119569c1864cc638636293b16213013e7b25f20ad5a029d407db49e07675fbc675933a85703dc", 0x84}, {&(0x7f0000000240)="21a8ddd3b470f850067e6d44f4de162a945071183d4554a5539b906d4c63cf8f16c9af5ade6d4c996027a64bf14b68885f44d2945c2ce1d7ffdcba65aa337ee2d3a64ad10ef0995ed726f05998f924dd00ad48bdbe9df332144793f51647e4549789bba15ce474c3ea08165a3123b16ffee4da3fd347bab2db0a2b063b906dae58ab7786d265f52f5f15ad5b9dba265cc57a7de4a504178196c1379709056064d6b3d0fb06b041f8fb9993e892d22cb438cc38224ee9a176d1323e9e937e2bad9dcf3c326a90288b0a5583097478fd4b3df2cf7bb5c5f41d4ac8b1681848acc0df53e6d426bbdc29140b8d2cad87d27a8e9d70734f7b71747ae773eba5e2ed03c9be46ca5283aac7a723103cc56038499f7aeae3d1ee944617ce9983bca6202b27ba6115ef616ff72df6f147b7feedc8fd91f2531b708a9fa73088a0a62a6d3be172b6b01664a8524dd24ae911c32d8a6981ffc2d1f843bef6ced515ca121a2fa0ce4281a9aa8bc95c2dabf3d75cffb8d74e610b75700ceeb0a11fa0a7c3d14fab000db229b8a026a7ac8286ddd9c2b5d273088bd5e9543741616605a99ca6d6e90164b33f458fe9a9385f77238bbb281314c3754caab5a9507a4a6e8e9bd719c394ad0edbd00bed1cb9346aba2f6c0652ba57fa90a708acc2f5ff038a0bbf2d36a632a265aaf7f45ffb0468e0fa7aacbe7fa8ae37dfeffa442d1f2215ebc2293068ed6c8160bbf0430459d60f6e66f97921c1dd99d10969767af7f775be9ab28eeca5800c3cdffd42d88b04b69a40f5c42c8006a9f17ac593465bbeaa3e35160313b323670323eabf558b8a3de7a821dae8d9156d7dbddcfaa4d5260fe7c04f334654b433c9494a3c6313caf4e13daf7f12e77fc7fe50df65ec9af856a6ec168286a93f78c20a6d1557ed10eb0f4c30937d956adf0a90a00361112cb95bbc965b1d44167c6e482b5e32bafefecd7aa78431be23503377a3303c2e75bf08df53b2ceb62059c16da0b166d57c913f0ad5fe9ed480559683e7f847bf70fa28dec5b1ca40296085d667c26f509dbeb16885a7b38ad7a67d2b8db596930e6d415e50608f7aaf5e78d8eb93d816b1f5419ffaf5698a3b5522d68d2282a2ed543a1b03c8b5532c6dc15d14befa846b6f730ad7a45e685a45005a2ac5f341a34d625b1f48aa01a6c1861b8fd1207208457cb8c3b47487039fd8779dd13340316d2bea71df20b32c99174565ff0ae19b87473160c91d2a26a3c8106018d5e6cf70140c6469e027d7e036f57ed5573452f7446fe9a875dac4b00361b29d9df7943a584b2da34a2eacce885cdd724d4a22f0e7e626185bdf150fc02c3efa3347851118fc1b75c6b367cddcfdd3d1dc2f05d2bfc1b7a113da2c9166af1d41d0067c40638eb5d60b50fd39f6bc2a937acd9c4abdddb038b9561613b4bd17c82875f93a658851870c66ca1c3567d4c6140eb799296971652304c75913222865de46a44dcc5b628ea377660c6010f24657ec5d1dc1406ebe20b0e4d3766d1f09befd0f772fa0417ed600cd043df5ba25c95c219dc80f199ff1593885b1805fbcf04387f308a6e92ca1e009635ac8bba22b09509fd4246493a1fd4cfda380bcdff602575a21f9bf4c6e9d366382c55239a3da9c6ab109d091eae6d1c85afc88c43016df912c5b72fd5c9842c8d3ed20072828347be27925157c5f9b2a8c6456824874590ab036196d6d1013df580a69a10dfe3c664ec87b2d5d457b651ebb63c06cd586acbed6433e4a5252ee9bd3c4752fe1f18c8c9422336c753008c996c08ca5a786f7075339cd7cd0d2845be01b49832773c7b50c0c834530b7fe93d99710f489cebf787c1b401b435e88c7b4d38e3a5ad8e358a259006323cdfd8f48093905c8e785fb86f239ff4a1069a9dd308f5a5cbcc0e0b448f409ada64b30cbab50b9d7c962fc186fa819a1b7b15d9c1437d2a238c993029c52b6dd352c3ae7eb3d45185d8abbd7ec19e7cd6b0e5bb73fb6646171ca65f99e1db4c9e337bdac8a467a4728fec5d1527b9290a757e3e9cda837395c5c4af00fe6855f371a3f71bf544859955f66545945c8a9f9b36ff1636163e4fba13b10ff379793b3dbefb9223f87dc6f5072b3315c543425b25b9c91baf4beccca1ba87eb8180f03564f4e71626cc31b4ad7b9376c621844b865a7090dd6c7976dde2d6b95ad92e092b199da4f9108388cc3d082d237adfe93fb66aa733ffa5b8e80301e2f1a47d5c437e4f6a494b79b3b710e786451605cc4babadc8407a113a463acbeac8f155dc526c1a6580454962148323b555bd3cadcb20492bf5f7171f2cc6e7e92ade1fbcbd38602f27e76f00524f5913fc91dea963c2c2d432aa2351fcb2a950dcacba0e17c7ac1feb473d8a06ba677741e82ce212c77d254a29ce5f00dde7044d4cb1659d843a6beecbe2c6403331cb1c68ec291e3fa14eb5d98f96984cae7fb4315a79c342bd15964ba3f1d9bfb5d6ed4cdf736a041f2c61a2346205a43451c4225fc80aee360c2d1d450f9258ea6da515bd7d64370559a8aa13efec4fdcfb4ccfe42d11cbc29528230d247a4f89bd8a6c171389d1b3ae84dcd6e87543ffddf17b3131c4f5f261749c5a61a64c46e68816d357098fc5a2585864327cf9342e5da8169255a7a46812b8d991af89c7a3b7c6199b8a5410b2980771b4c2e55b5818612d25db64a1486492e30ea6fe8ae99d60b69c27fa7143d4d575a48a77ef6f463971a7ade4666330c112731a5be639457db344abeac091b5a7033b855b39b8022c5cefeedd7c88c2c6cffe1097d878ae58c7d74f5ec7b78612588bf679f85d38ffcbafd79cf385903bb23b54171e4cec9ae23025373e135bbd585a41639191238b805b4e22b886c0e42220cf1adbed8acea7de06a7c8c97fb2d309ae934752b398975164803c49ef41f01a5521d43985dc5b1b2c37f1d8d367dd20e58a32f326c599d61f2c05ac2c4bc1ee13a869b52143d656eb8e01a1bd5158fc2c3e27d877885c485bf095fc6e8a0d01be00700a4fd1f39cecd64881d49c3fb7848633227cd5df44b5280919c32b804df1cb127ed2f84a6cec461bd5380a5bcb11a8d17c9e1abcfa1a7764ba9f4e892cc5720e24855bf5bd534bbca6ed51fb68bdd646af2aab4a05b0c65050d6ff1927cea9009f654eca180037f9728fd9d5fcb4f870f346be15751faf7defaef512aadb5f8df4ff17992f729a61262fb39daeedfd77eae9a6a8f9f7c147196a89476f04a8dad379406d9312cb5802a09f33230eb61f193a3c3435524103b7856279133cd05e63cbafc1b59115cee2237ed898570391986ad0561e5dd95d98247759b6d09b6120400638f3da3e48674e50bdd78247fa2de7810be145219a2ebef250eb45069bdcfe24f5c08f614a3e968279f9419afbbcca240f0568af6b60a4d1b0b9f70e33cd8e93f9591668d68de6aa140591f1a913fa143a1f52deb78071927c0217688f69937171c689e019bd12f380f62609905bdcabee5b64f7a3df6fc6e39ae28579fe754446d469d178f85858b3dc1d2a0118f09274a57ca1705e1562e87ceb3fe21e63fd5a3d7f80e352b51499ad22baced42e60bf3713e90da1f74236a7fad436cd58aceb44e4b8530cc06dc4dcba4e60ed0fc6305c609f541ac9708d53bad72ecd71f213738419f889d9edee7f9d353d9753875fa942849b5f2dd5aa3caf75408e235d107b559bfca9557cd1ab1a623c84abd051872692b5195b70818cf26e3584fc8f5f12891deb19d1820c0f7e9c694f7585866a40bbbb3970969cdf1b25c48199154f2b4d5a883ed881f296343a015a93286a08751c14f2d9b88827bdfba6ca57d06b259d547064e1ca8ea8303f40f6e1efb9ddb71fdc884720053f069603d02dc048cb21ad79887b9f7e781115a7f6d44488fbfc62eb4c13e8a6a5a72f98e4114aff50eb8886b868713e0a15ccbc802910f764b4d44b82914e415f2f20df4430242e1282c08feaf3e2aae48e41736168a2a2ac1b451939fbd9959385baedc63bc9ee30945a11e3f4af6d324c2bda757b876723130209a78eec98b9df2b2a3caefca6c243a3bacb12cb74983a27503a24cc57083c9cb557329cebd653f535b5d5196374527e9565a88e93803311776fb120c4b1538cc5707c5aa548dfdd0024ff473b17801f9ddea8593ef3d2bcbe3f51ef33ad049af2acb63238d331a55a4150cc1c4436cd83534397901a7fb8299e5b63b1b04737832f6742b5d3becc1c3f2be7a0393f015e730ac11956ca0252ce043cd5a17a9d1e1e6a2c49757644e3268acdadaf54c2f0d1f627ee38a7504392f84b5a522fa318f85ae4734562a5264ff19ae77144ce915e8622347758bf7cbbe02e7f830a26afefa1e77d8d69f83ff8a5af870c7d843d6192bfa5a2bd96d3de58a07f6ae204b83746dd1c58723e3a3e72c5c4e6b40654cebc1899bb649dff589d6e33babb4145a20d59737f6c60e4b8d710114bc09fa975c507799624b4d2458c0565d413b6996ed635d25e6761dee961d4a458db5c16af5e6aca327e0d6463bc4ee07dac2b6ecba45285de69134ae18c725a8938f134482987ed43357e29f611b25342d6fbe6ded3d5148288b53d161daa763ace224154b163423470181b81b4a241e0f4ea4adf09a790247c9e83ebe35358130bf2cbf6a06cc28dbf87af764ee4c622cb69c5da8a8e5f9c245e2a9b636360f7a69007fac2e98cb384b3ac082fbb68ae912156e88e8b613b0d6c9faa8c28f9a13073bf1b8f205f9ea311ef043d3eab737f58d0515a39655cd2567af52958016af378cd20a884d732152ebe635f6a3a79caff88f60d0d77b8ec43d23f7ccb70b68b3b3c4994a84df1c0efd25d5b89bc2c80d9d9954f5a9aff51027b1e0f7a45fa3e259a8e0e33682e8a31d74a70d8f7b75ad4f3959be724996da83a03606311242166e6818728eacff5c95d6fbde37a9725fe5876e5056e31387b340f0f8526b5c17c518f6d67555793f014ee46d25bd9c79392cdbf66ac1211804d1ad8ffc9c1f082c8e32838ab62e13acde5db26f05cadfe9f7238d930042309c900426b290cf05ecd09621aa8cf445dec760f2523a82f39cf7f3d88bd3b8f90e2c7efcff4a7afff9461a997d23b4d602aa3d751ca643e5e921937c895d5e3864879c1eaee0046702ac67938620cad15e9733073aa210e0c7118152bca49e73b6ebffe46eb8f486c5e1f184174c078590fc25dfc4e7aed2b2aee210235b7e9f0d877fce29639b0ce4b6c54f50d588634e0d3ce8ed5380ef65ce16b2a8bea5cc4704a1035bfabcdbf93bfae25a299375cf0d771942dcc757718e3dafaa85730ea82348fcf2f4b36cf641d7e5eab82e61ab0b00475693a6c5adb27c54fc5ccb962e986b2eb3b2735de32e13879992a2f75e40959b96d75fd6f5e6d45be1714862c1c5a5835a0395de246c90a161c65824d0feab295ae0ff8d73da0de86ad21847163fa10756fe1ca709e70d27fbd3d53ab22a76a31b0e981eaceae1949cc5ec9c15c1df72f74c656fa4532760a46555d830c975e980da96a0c4ab544d8d4965ac7b15ce6917b50c1160743f191ef5efd83439e6b66e58ca0af44dc9a798c822d07f38beb479d7efe9c36aa0e70a0d8c9d90515b698660592911f95a5ba41dfaf012a0a3bcfe9d8a0dc270566326c91191b27dfb44abf8aab56b5a0bd15ee8eed099c7d92e24aa8f7a1b0ad9c28ec69370337edbe4bfbb0251064b378194dfc856138c02a5a7fa76ff6e8e96b2d7e4ffe90bd5a5fbaa2860c3963ced85d12f6c269895", 0x1000}, {&(0x7f0000001240)="d9edcd3f0d596207e1cede38bda3dd2ccd627a6692bce684754d0b65c1f7fd94b7f8c4a669b0833de3111a96fbadc7c5f27856d4e4dd78e91cecda0b5fb973403b17c4addf6d6b4bcad8997a72734e78c12c4f67c7e1ba61e695f26834ef287950df83715bcdffda828e4373db0720a49aa8a808534ccbedd6eefe04b335e500e857c4500fe747ca4c9e257bbdaddb5abcbcd90a57e72a446846f0242c6f09498ac85bd6798de07b6fee598746", 0xad}, {&(0x7f0000000080)="0e7d511e43c21308c43dc87cb2616afd9f7e6f965dde221e666d7ecdbea69e15d27d4229fd1bfc1d0d66a1f8b34c04475bc7e708cc9a87561d4317644f74f0f828e9dbcd84403e717db047eeacd800f666045afe911f47af64a53c340fae88", 0x5f}, {&(0x7f0000001300)="5e5b7dbc04e87bef760181b996d1e03a58bc3e77a69fb3d7f81665094e913b7ca57722beaddf09793fb2022a607a384f", 0x30}, {&(0x7f0000001340)="6c770a8c144b1aa0fa4f4a9f120cab813a4fdd932c9a5e20f5ce520da050bbf8694380b90b66f0135e4a0979dd525d7f4437d1f2caa58315e25d1fc141b18f157b479fc311a1287b5651f3990703ae31a3830db7e8b3e75a2fa428c02c612d31b88c8f994177b99a16f0e4e02b8d072bc61b29e11b696e56b0c0936b20ddc55e5ce108f89c71016369cfc2c8a973bd600477eb4037edb78b721f7605bc40adc9e4250aaaaaf6f2531cd265a084d9e062273fa5510d55b7070c728d8335ab4c23e86608820e62c4e9f184f8a01b70b40a627e2f9d353e030e3ed23332f04b68353f4bcb7beb23f4", 0xe7}], 0x6, 0x8) 19:42:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef6"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:17 executing program 4 (fault-call:3 fault-nth:44): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:17 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x4, 0xffffffff) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r2, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0x20}, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x8048) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:42:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) preadv(r0, &(0x7f0000001840)=[{&(0x7f0000000440)=""/76, 0x4c}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/200, 0xc8}, {&(0x7f00000001c0)=""/10, 0xa}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/88, 0x58}, {&(0x7f0000001740)=""/65, 0x41}, {&(0x7f00000017c0)=""/59, 0x3b}, {&(0x7f0000001800)=""/5, 0x5}], 0x9, 0x8, 0xffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$tty1(0xc, 0x4, 0x4) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x1e4, 0x1, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_NAT_DST={0x5c, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x80000000}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_NAT_DST={0x74, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, [], 0x1}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010100}, @CTA_NAT_PROTO={0x4}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={[], [], @multicast1}}]}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={[], [], @broadcast}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}, @CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_REPLY={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xb4}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @loopback}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_LABELS_MASK={0x2c, 0x17, [0x4, 0xdf, 0x0, 0x8, 0x8, 0x4, 0x99e3, 0xffffffe8, 0x8, 0x4]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x80c0}, 0x10) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01c87519c83330d7108cfd8e04fe545709c7c320bab1eed0e073a25f5f32aa02b151e2a4b460246bd26b8fde03be90973bcdb125bd987fea4b3276eba3a7c32ae98ffdf46ff9dce71a1e429b"]) 19:42:17 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 195.209025] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 195.293247] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 195.311299] FAULT_INJECTION: forcing a failure. [ 195.311299] name failslab, interval 1, probability 0, space 0, times 0 [ 195.313945] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:42:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef6"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 195.350713] CPU: 0 PID: 15627 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 195.358644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.367997] Call Trace: [ 195.370594] dump_stack+0x1b2/0x283 [ 195.374237] should_fail.cold+0x10a/0x154 [ 195.378389] should_failslab+0xd6/0x130 [ 195.382370] kmem_cache_alloc+0x28e/0x3c0 [ 195.386521] ? ext4_sync_fs+0x7e0/0x7e0 [ 195.390501] ext4_alloc_inode+0x1a/0x640 [ 195.394569] ? ext4_sync_fs+0x7e0/0x7e0 [ 195.398547] alloc_inode+0x5d/0x170 [ 195.402179] new_inode+0x1d/0xf0 [ 195.405550] __ext4_new_inode+0x360/0x4eb0 [ 195.409820] ? kmem_cache_free+0x7c/0x2b0 [ 195.413970] ? putname+0xcd/0x110 [ 195.417433] ? SyS_mkdirat+0x95/0x270 [ 195.421238] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 195.426613] ? ext4_free_inode+0x1460/0x1460 [ 195.431017] ? lock_downgrade+0x740/0x740 [ 195.435170] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 195.440269] ? dquot_initialize_needed+0x240/0x240 [ 195.445211] ext4_mkdir+0x2e4/0xbd0 [ 195.448824] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 195.453560] ? security_inode_mkdir+0xca/0x100 [ 195.458151] vfs_mkdir+0x463/0x6e0 [ 195.461702] SyS_mkdirat+0x1fd/0x270 [ 195.465422] ? SyS_mknod+0x30/0x30 [ 195.468959] ? do_syscall_64+0x4c/0x640 [ 195.472929] ? SyS_mkdirat+0x270/0x270 [ 195.476958] do_syscall_64+0x1d5/0x640 [ 195.480910] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 195.486086] RIP: 0033:0x45d2d7 [ 195.489267] RSP: 002b:00007f37146daa88 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 195.496997] RAX: ffffffffffffffda RBX: 00007f37146dab20 RCX: 000000000045d2d7 [ 195.504394] RDX: 0000000000000006 RSI: 00000000000001ff RDI: 0000000020000100 [ 195.511665] RBP: 00007f37146daae0 R08: 0000000020000230 R09: 0000000000000000 [ 195.518916] R10: 0000000000400000 R11: 0000000000000213 R12: 0000000020000000 [ 195.526167] R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020014900 19:42:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_mount_image$adfs(&(0x7f0000000040)='adfs\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x5, &(0x7f0000000380)=[{&(0x7f00000000c0)="294ab7f6f6a125374869b8198cfa82a5a8cf", 0x12, 0x6}, {&(0x7f0000000140), 0x0, 0x6}, {&(0x7f0000000240)="f4298e509acf23625d665d2dfc5a526e43a3ae93aa959c60e56c810bd554ee0f36f12b464a8b152654ee247710b2cd932d80e49d1c02fda9ad53a5b075194984315d58311ce3d640e1add419bb390d3e7b1629c97f6f3af90a03d832e30770744c46134227e131ee57f43a8e35fa77b9b91ca24db3e7bc8ee90a1e5996c8cfd60accbd202173e61199cf02d60c43455a1f7ea190", 0x94, 0x5}, {&(0x7f0000000180)="7ea7b4a57bbce38b9422be64ca9257e09ff49cfd02e498f278d7b7bdfb3139379f170a361d6b7a827a80af831b29", 0x2e, 0x101}, {&(0x7f0000000300)="d27e8b7cbd0af4cd091e16c21d2c0bfb93685da8a427d495159ceda43ead59c90dc8981e1d7c883c03c01d3a2b2528b586ab3d4d0cda09908e08950bf8502084c3cfc8546a3953414789ba038519896d84cafd18eb4c2078d8a1e99bb24bf03ee9c8b84cef7ef616b7ceeace", 0x6c}], 0x2000004, &(0x7f0000000400)={[{'f2fs\x00'}], [{@euid_gt={'euid>', 0xee01}}, {@context={'context', 0x3d, 'system_u'}}, {@obj_role={'obj_role', 0x3d, 'f2fs\x00'}}, {@euid_gt={'euid>', 0xee00}}, {@uid_gt={'uid>', 0xee00}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@obj_user={'obj_user', 0x3d, 'f2fs\x00'}}, {@obj_role={'obj_role', 0x3d, 'f2fs\x00'}}]}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000500)={0x9f, 0x10, [], 0x0, &(0x7f00000001c0)=[0x0, 0x0]}) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:18 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x1, 0x3) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 195.552024] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:42:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="eef989107b8a5f957acd5d93d70dfa0deb8b9f296f669b026913fd85c3da649ecbe6e3587e8f9ab07b020c41bc402fb2723300ccc3e48796d821588a12b54c6cf09481317eef40bc16ef0221394c006b47fe875a62520d3b44adfa798f4913a5ab0b3a9218cf9a06846c3bfa4c286a2e0a90bbf832deb6747fc5374093a757342dd75a4bd76d6b07ad3d28c9ef4a5510532a9c6b8927b7644668212bd1cb58091a71f2521e"]) 19:42:18 executing program 4 (fault-call:3 fault-nth:45): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e5363"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:18 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}]}, 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 195.663671] ADFS-fs: unrecognised mount option "f2fs" or missing value [ 195.695370] f2fs_msg: 268 callbacks suppressed [ 195.695378] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 195.711162] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 195.720324] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 195.724862] FAULT_INJECTION: forcing a failure. [ 195.724862] name failslab, interval 1, probability 0, space 0, times 0 [ 195.731450] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 195.748851] F2FS-fs (loop1): Unrecognized mount option "îù‰{Š_•zÍ]“×úë‹Ÿ)of›iý…ÃÚdžËæãX~š°{ A¼@/²r3" or missing value 19:42:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e5363"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 195.760729] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 195.768307] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 195.793773] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 195.806663] F2FS-fs (loop1): Unrecognized mount option "îù‰{Š_•zÍ]“×úë‹Ÿ)of›iý…ÃÚdžËæãX~š°{ A¼@/²r3" or missing value [ 195.828578] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 195.833884] CPU: 1 PID: 15685 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 195.847355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.855233] F2FS-fs (loop5): invalid crc value [ 195.856974] Call Trace: [ 195.856991] dump_stack+0x1b2/0x283 [ 195.857006] should_fail.cold+0x10a/0x154 [ 195.857021] should_failslab+0xd6/0x130 [ 195.861872] F2FS-fs (loop5): invalid crc value [ 195.864168] __kmalloc+0x2c1/0x400 [ 195.864179] ? ext4_find_extent+0x879/0xbc0 [ 195.864190] ext4_find_extent+0x879/0xbc0 [ 195.864205] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 195.899487] ext4_ext_map_blocks+0x19a/0x6b10 [ 195.904432] ? __lock_acquire+0x5fc/0x3f20 [ 195.908682] ? __lock_acquire+0x5fc/0x3f20 [ 195.912931] ? mark_buffer_dirty+0x95/0x480 [ 195.917263] ? trace_hardirqs_on+0x10/0x10 [ 195.921506] ? __ext4_handle_dirty_metadata+0x120/0x480 [ 195.926887] ? ext4_find_delalloc_cluster+0x180/0x180 [ 195.932080] ? trace_hardirqs_on+0x10/0x10 [ 195.936313] ? ext4_mark_iloc_dirty+0x1815/0x2690 [ 195.941279] ? ext4_es_lookup_extent+0x321/0xac0 [ 195.946044] ? lock_acquire+0x170/0x3f0 [ 195.950020] ? lock_acquire+0x170/0x3f0 [ 195.954001] ? ext4_map_blocks+0x29f/0x1730 [ 195.958327] ext4_map_blocks+0xb19/0x1730 [ 195.962476] ? ext4_issue_zeroout+0x150/0x150 [ 195.967056] ? __ext4_new_inode+0x27c/0x4eb0 [ 195.971467] ext4_getblk+0x98/0x3f0 [ 195.975094] ? ext4_iomap_begin+0x7f0/0x7f0 [ 195.979418] ext4_bread+0x6c/0x1a0 [ 195.983057] ? ext4_getblk+0x3f0/0x3f0 [ 195.986943] ? dquot_initialize_needed+0x240/0x240 [ 195.991875] ext4_append+0x143/0x350 [ 195.995595] ext4_mkdir+0x4c9/0xbd0 [ 195.999225] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 196.003900] ? security_inode_mkdir+0xca/0x100 [ 196.008489] vfs_mkdir+0x463/0x6e0 [ 196.012030] SyS_mkdirat+0x1fd/0x270 [ 196.016351] ? SyS_mknod+0x30/0x30 [ 196.020253] ? do_syscall_64+0x4c/0x640 [ 196.024227] ? SyS_mkdirat+0x270/0x270 [ 196.028374] do_syscall_64+0x1d5/0x640 [ 196.032265] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 196.037534] RIP: 0033:0x45d2d7 [ 196.040716] RSP: 002b:00007f37146daa88 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 196.048428] RAX: ffffffffffffffda RBX: 00007f37146dab20 RCX: 000000000045d2d7 [ 196.057255] RDX: 0000000000000006 RSI: 00000000000001ff RDI: 0000000020000100 [ 196.064516] RBP: 00007f37146daae0 R08: 0000000020000230 R09: 0000000000000000 [ 196.071776] R10: 0000000000400000 R11: 0000000000000213 R12: 0000000020000000 [ 196.079040] R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020014900 19:42:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e5363"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:18 executing program 5: ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0700000000000000ad0a000000000000ff0f00000000000062030000000000000114000000000000c6020000000000000200000000000000490b00000000000038000000000000000602000000000000c70400000000000001000000010000000180000000000000210b0000000000000100000000000000"]) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000340)=0x20, 0x4) ioctl$TIOCMGET(r2, 0x5415, &(0x7f00000000c0)) r4 = dup(r0) ioctl$SNDCTL_TMR_SELECT(r2, 0x40045408) ioctl$VT_WAITACTIVE(r4, 0x5607) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)) syz_mount_image$f2fs(&(0x7f00000001c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f00000002c0)=[{&(0x7f00000004c0)="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", 0x187, 0x400}, {0x0, 0x0, 0x40000400000}, {&(0x7f0000000240)="ecedb891900051e169d0f4189c4e5f7afcd4451826e2fe37c5491f569ebcf64cbe97de7b7c06142c9919e7a8e8ed2ddd657181fc7c8e570a48f6290d5ce1704fffc0fa56def781c81bb9c64cdd5b309a38acbf7a53c5e157ee22d59bf0cfed7cbe547c99a5b63599602ba7711f", 0x6d, 0x101}], 0x200010, &(0x7f0000000200)) 19:42:18 executing program 4 (fault-call:3 fault-nth:46): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) [ 196.107561] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:42:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:18 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}]}, 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:18 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x5, 0x1, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000000080)=0x20) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:42:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d17"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:18 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0024fff7835099ac66ca3730"]) mount$9p_xen(&(0x7f00000000c0)='syz\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x440, &(0x7f0000000240)={'trans=xen,', {[{@dfltuid={'dfltuid'}}], [{@obj_user={'obj_user', 0x3d, '\x92]-'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'f2fs\x00'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@smackfstransmute={'smackfstransmute', 0x3d, '!#.}'}}, {@dont_hash='dont_hash'}, {@subj_type={'subj_type'}}]}}) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x101202) [ 196.258639] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 196.262695] FAULT_INJECTION: forcing a failure. [ 196.262695] name failslab, interval 1, probability 0, space 0, times 0 [ 196.315781] CPU: 1 PID: 15731 Comm: syz-executor.4 Not tainted 4.14.210-syzkaller #0 [ 196.324058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.333431] Call Trace: [ 196.336010] dump_stack+0x1b2/0x283 [ 196.339623] should_fail.cold+0x10a/0x154 [ 196.343776] should_failslab+0xd6/0x130 [ 196.347756] __kmalloc+0x2c1/0x400 [ 196.351289] ? ext4_find_extent+0x879/0xbc0 [ 196.355684] ext4_find_extent+0x879/0xbc0 [ 196.359818] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 196.365249] ext4_ext_map_blocks+0x19a/0x6b10 [ 196.369733] ? __lock_acquire+0x5fc/0x3f20 [ 196.373948] ? __lock_acquire+0x5fc/0x3f20 [ 196.378178] ? mark_buffer_dirty+0x95/0x480 [ 196.382479] ? trace_hardirqs_on+0x10/0x10 [ 196.386694] ? __ext4_handle_dirty_metadata+0x120/0x480 [ 196.392035] ? ext4_find_delalloc_cluster+0x180/0x180 [ 196.397204] ? trace_hardirqs_on+0x10/0x10 [ 196.401418] ? ext4_mark_iloc_dirty+0x1815/0x2690 [ 196.406329] ? ext4_es_lookup_extent+0x321/0xac0 [ 196.411064] ? lock_acquire+0x170/0x3f0 [ 196.415020] ? lock_acquire+0x170/0x3f0 [ 196.418978] ? ext4_map_blocks+0x29f/0x1730 [ 196.423293] ext4_map_blocks+0xb19/0x1730 [ 196.427433] ? ext4_issue_zeroout+0x150/0x150 [ 196.431937] ? __ext4_new_inode+0x27c/0x4eb0 [ 196.436506] ext4_getblk+0x98/0x3f0 [ 196.440206] ? ext4_iomap_begin+0x7f0/0x7f0 [ 196.444520] ext4_bread+0x6c/0x1a0 [ 196.448044] ? ext4_getblk+0x3f0/0x3f0 [ 196.451948] ? dquot_initialize_needed+0x240/0x240 [ 196.456865] ext4_append+0x143/0x350 [ 196.460563] ext4_mkdir+0x4c9/0xbd0 [ 196.464186] ? ext4_init_dot_dotdot+0x5a0/0x5a0 [ 196.468845] ? security_inode_mkdir+0xca/0x100 [ 196.473504] vfs_mkdir+0x463/0x6e0 [ 196.477031] SyS_mkdirat+0x1fd/0x270 [ 196.480724] ? SyS_mknod+0x30/0x30 [ 196.484247] ? do_syscall_64+0x4c/0x640 [ 196.488219] ? SyS_mkdirat+0x270/0x270 [ 196.492093] do_syscall_64+0x1d5/0x640 [ 196.495972] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 196.501141] RIP: 0033:0x45d2d7 [ 196.504316] RSP: 002b:00007f37146daa88 EFLAGS: 00000213 ORIG_RAX: 0000000000000053 [ 196.512002] RAX: ffffffffffffffda RBX: 00007f37146dab20 RCX: 000000000045d2d7 [ 196.519255] RDX: 0000000000000006 RSI: 00000000000001ff RDI: 0000000020000100 [ 196.527024] RBP: 00007f37146daae0 R08: 0000000020000230 R09: 0000000000000000 [ 196.534295] R10: 0000000000400000 R11: 0000000000000213 R12: 0000000020000000 [ 196.541553] R13: 0000000020000100 R14: 0000000020000200 R15: 0000000020014900 19:42:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d17"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:19 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x7c06574500a98b32, 0x7f, 0x3, 0x10000, 0x24, @empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80, 0x8, 0x40}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r1, 0x2f, 0x3f, 0x0, 0xa9a, 0x52, @private2={0xfc, 0x2, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8, 0x80, 0x3, 0x6}}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 196.611737] 9pnet: Could not find request transport: xen 19:42:19 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}]}, 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d17"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:19 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r5) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfc, 0x400000}, 0xc, &(0x7f0000000140)=[{&(0x7f00000002c0)={0xa4, 0x25, 0x400, 0x70bd28, 0x25dfdbfb, "", [@generic="d58a52e413e2f378a3fcfb076f3a1c2cf789137d139e6c93ceddd4b64f301faabcbcbb75e579bb936183e7050c564b5059eeb09177fb202a2d6869d0c691779742654b0f427d38d0eaf72edce87711578c65941962a6cc988c5ff65146caae4c8c4822f8363eff4148079d7dccb8848d1dfda248b41deb0159767c9c9de1c63d81ede300dbc240ede6b23735cac46b9cfaa2c8"]}, 0xa4}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32=r4, @ANYBLOB="1c000000000000000105005112e94a46ee102f7a01c17b8dfbeb196feb7b2a7c3ca2025e1ed90cdb996310f78333904325085da628446b092f58def706000000000000008fd8f004b9ba283b5cd63a21a35d3c80628a5b4181476a2b43d183aafeb8a06ba2a88404aadd1d3932e523cdac72944c3c1f87b693a5837a3dc753e75a55ef23fa142299c3c8d6255978217661e62bd2e03977d214583d757c406283d8010f", @ANYRES32=r2, @ANYRES32=r5, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x24004040}, 0x40) mount$bpf(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='bpf\x00', 0x800000, &(0x7f0000000300)={[{@mode={'mode', 0x3d, 0x8001}}], [{@subj_user={'subj_user', 0x3d, '\xa6'}}, {@obj_user={'obj_user', 0x3d, ':'}}, {@euid_gt={'euid>', r5}}, {@subj_user={'subj_user', 0x3d, 'prjquota'}}]}) syz_open_dev$vim2m(&(0x7f0000000240)='/dev/video#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000400)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000010200000002000000020000000200000016000000000400000004000000080000000c00000010007f00001400000300000001000000", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x20080, &(0x7f00000000c0)=ANY=[@ANYBLOB="70726a71756f74617036455c6f64ff0f0000732c00"]) r6 = dup(r1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0xc3, "042dcb2e05c4a91e2a4e47e5daabbe2c5c5fa4f07eb9e8ea009bccbd175400dd3c7632a466dcb1fcf5202f8b61587bd3ab051c96ba740edfaf98a3b07693440f667b48476c3aac74fe4e1b32be1bfe85370aa5561266bfa72a0d94d58c0157067e2b478bfe0e77a3dd74fb2d41ec3eb593d0a4eb02ca1f3759d185ecc4becc4b2afa8b0d9a948a22c37fad3990d28ee5411f497d481f2a6dcbff675aa624b048dec7e73790801e3e6c1c7f4ae5afaf4186417d04c913f3ee25ab314c6f53abb6a72ffb"}, &(0x7f0000000200)=0xcb) [ 196.727368] 9pnet: Could not find request transport: xen [ 196.750777] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:42:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:19 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)=ANY=[@ANYBLOB]) setsockopt$inet6_dccp_buf(r1, 0x21, 0xd, &(0x7f0000000240)="65c98551bfe527387bc1e193b58dd401417ff7338f408f255c4a36f01604ab17051871b400c6f1f5e209a3b8d615d11c96be78e8896a783f32ecd43b544e4cccfe479fb4fb538b6a8e6411f2a7fb6093022ada29f2f82fbaba31c6d7676b19ffb46ef47f18228321ce7975dba7705ad4aeba81b808e8408750f48318e32043228e6bbbcf83681dae02d5ca17c8867874cf08e1c83707b2df06e01f1128728c4765f3e619c1eb00c3efa86bd254d67f08d8fd773ce295684f0ace2f0b640fcb865809fd8bc147f0670012ce3af819e030835d754b8ff5bfe8671102d217eb15449c38b06b92fb8fc24195b1a98131b755fb29422d755aea2c85a1ace090ad", 0xfe) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x4c) 19:42:19 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:19 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)=ANY=[@ANYBLOB]) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x1f}, 0x8) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000040)=0x4) 19:42:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 197.169249] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:42:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:19 executing program 1: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:19 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 197.356039] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:42:19 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2000, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f00000000c0)=0x7f, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000140)={0x7fffffff, 0x1, 0x9, 0x6, 0x401}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9a001e32743a74a40d6cd32c8c912c8aa6230b9163a712a8fcd35d6219a17d0bf564c280109ce28317d34db00a0c0d661ebd9959fcd362430f87e50cd57bc2003457aa1504a6fd1e2f3aef125127dab0a17249521c61aed0ef905c3c14d2ff5b885de924442d03297c8b355fb6b89917e2fe338de78d3959d8f9a2649b07cd3e02176e54189e09f459d55c4344592fce5860dc91a0d58abb2962ded4167655bebc5154c1abaef2f24a2f707f81e8afd76b4b", @ANYRES16=0x0, @ANYBLOB="000127bd7000ffdbdf250a0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000080001007063690011000200303030303a30303a31302e30000000000800030001000000"], 0x88}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000000), 0x4) socket$can_raw(0x1d, 0x3, 0x1) 19:42:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:19 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000000000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000040000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000004b83821d211bb90f795c3100000000000000000000c501000006000000010000000700", 0xa5, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:20 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000080)={0x96, &(0x7f0000000140)=""/150}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)=ANY=[@ANYBLOB="fe"]) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$cgroup_subtree(r4, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) 19:42:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}, {&(0x7f0000000040)="6c4a359b832d424af46d8b87cd163108de5f2299d7124be3b8", 0x19, 0x51a}], 0x0, &(0x7f0000014900)) 19:42:20 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xd}}]}}}, @IFLA_LINK={0x8}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:20 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) r2 = openat(r1, &(0x7f0000000140)='./file0\x00', 0x100, 0x81) sendmsg$NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7d}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20004040) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000340)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000380)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000003c0)=0x28) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000300)=0x1) 19:42:20 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x100, 0x70bd25, 0xfffffffd, {{}, {}, {0x8, 0x2, 0x7ff}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x400, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x200000d0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:20 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINK={0x8, 0x5, r3}]}, 0x28}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="006bfc3b921de19073a8b8655253b2bf503975b08e9ce0a46e68f19debbaba0d271c50521842ab72f5aacbfad91eaebbe46d04d18014b93e109894054b63e8ba814ca2dd011a562bb1f32c0e4dfc5ef1079d265115f4ecf13b08d6c337920c9afd208924e1d29984de1f28264f3fc2f97984ee0cd4bd21b91ec152881c66811e8fea68d4680d2536b3514fdd6cfe6cc1154e5c0fb3799cef51aae8e4ed84eb33674e7cbc261a540be4e8bd5a5595a8daf4a139eb328c35874029e31f5221f48d1ff0694a19caa551ecb3c27f4f7ae7b934354b5114e8756ce596ef8ad1b4b8"]) 19:42:20 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1, 0x0, 0x2, 0xc, 0x47, 0x8}, 0x20) socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, [], 0x1}, 0xfffffffb}, 0x1c) 19:42:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:20 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000040)) 19:42:20 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000040)={@none, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000014900)) syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000240)="45c8958a722cef2e533b48be85ee7d404f7cdc07300bd977baf484334350f43fadcb6c87536f14fee95ee2c2ae6e882d8206ecf8f09a3c01abe24c1c362ca83c60e7cbaf1b863a6a44560728198e220e089d49847c1670af8d838620ab90032344dc87b6f04cfdc65d475dccf21368cd20ee620aa587b095d59ced7b2781e0581d63cd8d165bcc048ff49d4cf6b80140ec161888f568f4efc4a12f69c42a6823cde4b77e511fa7db26c7e35849c37e7b180c44a9a3589615449b8cb4dfe36a69c900623ec8ffd5f86ce858ed9202f00de453b669e42db782f21e78dd75d4a1b3433f3752979286d68698c2a14fc14e6e1e7f", 0xf2, 0x6}], 0x8010, &(0x7f0000000340)={[{@sb={'sb', 0x3d, 0xffff}}, {@data_journal='data=journal'}], [{@hash='hash'}, {@pcr={'pcr', 0x3d, 0x3b}}, {@subj_role={'subj_role', 0x3d, '[}^/!!{\xfc,:{'}}]}) 19:42:20 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINK={0x8, 0x5, r3}]}, 0x28}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x4, 0x1, &(0x7f0000000080)={r1, r2+10000000}, &(0x7f00000000c0)) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x1000, &(0x7f0000000140)=ANY=[@ANYRES16=r3]) link(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00') ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000180)) [ 198.417751] syz-executor.0 (15891) used greatest stack depth: 23520 bytes left 19:42:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:20 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x4}, 0x8) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "382ba3d8de4f0a2b", "3e7f3e6f8be68f8a29781125c8bfc156", "3770281e", "798d2bd21731f81c"}, 0x28) 19:42:20 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINK={0x8, 0x5, r3}]}, 0x28}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:20 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) 19:42:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f00000000c0)={0x9, 0xaad2, 0x81, 0x4, 0x9, 0xb6}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000140)=""/7) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='usrjquota=f2fs\x00,usrqugta=,inline_dentryjinline_xattr_size=0x0000000000000bee,\x00']) 19:42:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:21 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20004005) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:42:21 executing program 4: ioctl$IOCTL_VMCI_SET_NOTIFY(0xffffffffffffffff, 0x7cb, &(0x7f0000000240)={0x400, 0x8e, 0xd491}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000000140)={[{@nouser_xattr='nouser_xattr'}, {@prjjquota={'prjjquota', 0x3d, 'f2fs\x00'}}, {@whint_mode_off='whint_mode=off'}, {@alloc_mode_def='alloc_mode=default'}, {@nobarrier='nobarrier'}, {@jqfmt_vfsold='jqfmt=vfsold'}, {@user_xattr='user_xattr'}, {@fastboot='fastboot'}, {@disable_ext_identify='disable_ext_identify'}]}) prctl$PR_CAPBSET_READ(0x17, 0x9) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000001c0)=0x100) 19:42:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:21 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 198.700881] net_ratelimit: 10 callbacks suppressed [ 198.700885] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:42:21 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="78200000000000000032d6b432b51d739945627efeb41c2c072a64153d5c3002d264ebf776d103ca91b821a8c1c51734736cdbf9e5a73994fc04fbab1f08ee13623b9fcd3f313144cdf68588d77a52c85a3ddc006947ab6c276a6127dd8a863deb20116cdb4fc58a6eeea3116fa7f4972d5555b1370c80cdb6d6700e3f0061df0747f3f811afdf9eb151232df0bc64277535ff74c8b81749e6559337112840b8f8a1f38033bb053e78a2"]) 19:42:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:21 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) syz_mount_image$udf(&(0x7f0000000000)='udf\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x4, &(0x7f0000000340)=[{&(0x7f0000000080)="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", 0xfd, 0x101}, {&(0x7f0000000180)="96e7f257194b599a87bc131f825395530ac66053d5107ae9771c9c7afecd75ffec4b6fcf4727fddffb7fb13ac8948fd9214fa075cceae3aa48bc9d87acd319746d540ede5fd1153550cb1795e3b908052e688f63e012086f0994bc96b8330e186b145b6ee87c17191163199fe0a5f93cf391ddf77876f80a", 0x78}, {&(0x7f0000000200)="76f83fcfcf302a06c0c578cd492fccb7f9c7e1fe41efdf152a573def5be08e318ae700999f87f91366c3af72749d8a8aa1c4b2963c0778de95e6841a7f9f6df440", 0x41, 0x1}, {&(0x7f0000000280)="38169c8cd480d3a0f038b36b38734f9c4d3936659f7780ef2f540e4faf1557ddf4625118e70e4b75cc1a5590bda316ad6d6fa1c83e81f8600a47dab04707ba22dd3dd9186fbe01bbecaeca5999f9d532d78e933b7cecf35792e05c1061ce66539d544d0d65d1280823f79d3b18f3a331744fcf1ad7ed401f378be71b847feb38d525cdd5b0f3c0e78667b0346d4753c2d432e85d00f17f9c2cd9c4afc62ab108176228", 0xa3, 0x3}], 0x80, &(0x7f0000000440)={[{@partition={'partition', 0x3d, 0x2}}], [{@uid_lt={'uid<', r2}}, {@subj_user={'subj_user'}}, {@euid_gt={'euid>', 0xee01}}, {@smackfsfloor={'smackfsfloor'}}]}) 19:42:21 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:21 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000140)=[{&(0x7f0000000040)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c000000100000001400000300001db0e885000100000002", 0x6d, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000000180)={[], [{@dont_appraise='dont_appraise'}, {@seclabel='seclabel'}]}) [ 198.957267] UDF-fs: bad mount option "uid<00000000004294967295" or missing value 19:42:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 199.057682] UDF-fs: bad mount option "uid<00000000004294967295" or missing value 19:42:21 executing program 0: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x4) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x400880, 0x0) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf0, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0xcc, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x400}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x400}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7fff800}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7f}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x400}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:42:21 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000280)=0x8) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r5) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfc, 0x400000}, 0xc, &(0x7f0000000140)=[{&(0x7f00000002c0)={0xa4, 0x25, 0x400, 0x70bd28, 0x25dfdbfb, "", [@generic="d58a52e413e2f378a3fcfb076f3a1c2cf789137d139e6c93ceddd4b64f301faabcbcbb75e579bb936183e7050c564b5059eeb09177fb202a2d6869d0c691779742654b0f427d38d0eaf72edce87711578c65941962a6cc988c5ff65146caae4c8c4822f8363eff4148079d7dccb8848d1dfda248b41deb0159767c9c9de1c63d81ede300dbc240ede6b23735cac46b9cfaa2c8"]}, 0xa4}], 0x1, &(0x7f0000000380)=[@rights={{0x38, 0x1, 0x1, [r4, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {r2, r5, 0xffffffffffffffff}}}], 0x58, 0x24004040}, 0x40) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000000180)={[], [{@uid_lt={'uid<', 0xee00}}, {@fowner_gt={'fowner>', r5}}, {@subj_role={'subj_role', 0x3d, '$#./'}}, {@hash='hash'}]}) 19:42:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 19:42:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:21 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1040420}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xc8, 0x0, 0x10, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x101}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x8a, 0xbe, "90f31cbc62b343e3624bfa4da830ccc82e2049b39f9371bb2d2b56980a621bff5d9df752608293683049e1814d3bf8c86f6da3e41a1bf4c7d6ef0a54cf767e5344ba221113eeee86a5cc53d3515744bcc15691f502ace0be6eaff53a4ca56b5b8ec337374720ddda86cd55b79d455963aed80c4d61e39bb8081843c4f95586f3e9950bee1cf0"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x385}]}, 0xc8}}, 0x20040000) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x1}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 19:42:21 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 199.486556] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 199.552934] nla_parse: 6 callbacks suppressed [ 199.552941] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:42:22 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000180)={0x7ff, 0x40, [], 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x1, &(0x7f0000014900)=ANY=[@ANYBLOB="c2"]) r3 = accept$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000300)=0x1c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000440)={0x0, 0xe4, "413285b52731f895c611260abdca03536d4a74693c409ac5daba6d6d0f54305e92f10c99a426195c4b9db72cdf9e3e4594cebb3b9dabd04b57e8a5854e9d4da65a69304112387d6e5a074eb8a1ee4a914507e05487d2a6f33a1785d6a59b7f34ffa231340597da018556974fade1c6bf85fa845c9e74fc0a9b0edb633cbfe4982b92b7909b25e6d5474def9134ff3351a901ab590627f00da2c425609136fea5ef207fa10105831f4e6fb7c4725b8b3bf40086075b3657202b38595fa196aab8784317122353c07ef3b1a04b2eef7d9f3dc488da05c9565bb1818b3ba24d49da8c4a05e4"}, &(0x7f0000000540)=0xec) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000600)={r4, 0x58, &(0x7f0000000580)=[@in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e21, 0x9ab1, @remote, 0x9}, @in={0x2, 0x4e20, @private=0xa010102}, @in6={0xa, 0x4e23, 0xaa7, @private0, 0x1}]}, &(0x7f0000000640)=0x10) 19:42:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, 0x0, 0x0, 0x0) [ 199.606332] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:42:22 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:22 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8, 0x400) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f216000b0009000200030000000cfcffff08000000020000000100000000000000006000e4000000000b00000049e34331a7cae92e02000001020000000200000016000000000400000004000000080000000c0000001000000014000003000000010000d87f85c8", 0x6b, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2127ad2e9667a33e074a6b00"]) 19:42:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, 0x0, 0x0, 0x0) [ 199.812704] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 200.353928] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:42:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000002c0)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000000)={0x101, 0x8, 0x0, 0x20, 0x1, [0xfffffc00, 0x8, 0xfffffffe, 0x81]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x93dcbe2aa840ee84, 0x13, r3, 0xb000) socket$netlink(0x10, 0x3, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x380000e, 0x11, r5, 0x0) write$P9_RSTAT(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000007d020000004100870000020040000804000000050000000000000000000200010000007f00000081af6004b3b903000000000000000600282e6a26212b010024000007006970766c616ef0c28cfcc5e3eb4150077ac6f17f4ef66e53637d177d"], 0x48) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r6, 0x0, 0x0, 0x0) 19:42:22 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x3f8}, {&(0x7f0000000080)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000c7000000150000001500000010000000140000001200000010000000ff97ffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa7, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:22 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x498) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x13, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x24008010) 19:42:22 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:22 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f0000001340)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f00000012c0)=[{&(0x7f0000000040)="8f106eb9f668134a84e0e960b7c70898f084b9c12ee20787c8a09e3761be33e1b97fb89db22cc97eb4c474905192955ed07f9967f881d55845ee85e607ef6057885930d71504a946219500d36767946e2ecb37ceeb9541707d", 0x59, 0xa57c}, {&(0x7f0000000140)="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", 0xfa, 0x4}, {&(0x7f00000000c0)="ed8df756d18ff23af01dae86e297f614317fa2028193df", 0x17, 0x5}, {&(0x7f0000000240)="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", 0x1000, 0x4}, {&(0x7f0000001240)="723829ad5c397ec65ffd0efd1912f3c478ed067ea5f3d9f13f83d96c640e587e2a96afb5998a91c8a9d93a69e2033f49422852fb5fa1484d4c349ee733d802c30f37af702e88d755bf6ab4d4b42712ea58860cc0bf4c64c0393349341d48504783cdfdacfaadd6806ad7497bc5681287a640f9841e29034bc867debdf6", 0x7d, 0x4}], 0x0, &(0x7f0000014900)) 19:42:22 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfc, 0x400000}, 0xc, &(0x7f0000000140)=[{&(0x7f00000002c0)={0xa4, 0x25, 0x400, 0x70bd28, 0x25dfdbfb, "", [@generic="d58a52e413e2f378a3fcfb076f3a1c2cf789137d139e6c93ceddd4b64f301faabcbcbb75e579bb936183e7050c564b5059eeb09177fb202a2d6869d0c691779742654b0f427d38d0eaf72edce87711578c65941962a6cc988c5ff65146caae4c8c4822f8363eff4148079d7dccb8848d1dfda248b41deb0159767c9c9de1c63d81ede300dbc240ede6b23735cac46b9cfaa2c8"]}, 0xa4}], 0x1, &(0x7f0000000380)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2, 0xffffffffffffffff}}}], 0x58, 0x24004040}, 0x40) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r6) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfc, 0x400000}, 0xc, &(0x7f0000000140)=[{&(0x7f00000002c0)={0xa4, 0x25, 0x400, 0x70bd28, 0x25dfdbfb, "", [@generic="d58a52e413e2f378a3fcfb076f3a1c2cf789137d139e6c93ceddd4b64f301faabcbcbb75e579bb936183e7050c564b5059eeb09177fb202a2d6869d0c691779742654b0f427d38d0eaf72edce87711578c65941962a6cc988c5ff65146caae4c8c4822f8363eff4148079d7dccb8848d1dfda248b41deb0159767c9c9de1c63d81ede300dbc240ede6b23735cac46b9cfaa2c8"]}, 0xa4}], 0x1, &(0x7f0000000380)=[@rights={{0x38, 0x1, 0x1, [r5, 0xffffffffffffffff, r4, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r5]}}, @cred={{0x1c, 0x1, 0x2, {r3, r6, 0xffffffffffffffff}}}], 0x58, 0x24004040}, 0x40) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000580)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002a00)={{{@in=@private, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}}}, &(0x7f00000005c0)=0xe8) syz_mount_image$adfs(&(0x7f0000000000)='adfs\x00', &(0x7f0000000080)='./file0\x00', 0x5, 0x7, &(0x7f00000003c0)=[{&(0x7f00000000c0)="36c44017795596890223e2d9a13f6114aabc1f8d066a159d703b24b206deec3304073fc458cfc896012dbebcbf68fee11c868c37760d5602bc7de875ff274228d506befabb071984748eded69c7c869d5a9b7da0f91c7e04310787aabe908c1f076a9df020538fb61278ce7e5a1a038a634b2dd99d78a6f879f899da83e56431ce60704b989d16a297c0bfabdec7097f9457a354a68683fb7c7f121f6f9b8cb8d5b2c59d", 0xa4, 0x4}, {&(0x7f0000000a00)="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", 0x1000, 0x4}, {&(0x7f0000000180)="c693515ae348117d7f55113b8d2c33259ed16090981a935afb749a24e73ed5228607b07d9b9ed0595e3738fd7b1e8de4c96d905c5671921518657fddc87b4f0a6d3305acce6e00801f9e8f30a0f9b564fa37d845869c5b6732436a62dcf65b3780c8b429ee79beff408b878ef833d7e39ced3238c1699c214ae01fca243749301b04d62c027fb7c5fb77a1a794b658ca10878d56996997c476ccb1216204ab122bbf964a3394bf210c5475939a365f2441a73a3bf040e6579d3ccc07e9f139021084ca25af0040831e72d8a5cc", 0xcd, 0x100000000}, {&(0x7f0000000280)="94d85570d5679167e51b009c9d3690aefdb4044451bf124e6f0f75f1aa3bf37f53db585de6ab4a190827854bf599e1c6d1d476b888e8ecabbce0f422b6fe379fcdb5717862dc324e324364dbce1c0c1a92", 0x51, 0xb5}, {&(0x7f0000000300)="011587ee7a7eca08422f17fb2a583fcda311a78b5d92efade8d113e03e773b7f8f9a0de7610158766aac1528dd33512f25e0d08b9d910299695bcb30ff22a049c1", 0x41, 0x8000}, {&(0x7f0000001a00)="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", 0x1000, 0x400}, {&(0x7f0000000380)="026d220200000090b6f71672ef69af830612fcbe6c1bbd116c63fa3e923f00", 0x1f, 0x1}], 0x4, &(0x7f0000002bc0)={[{'\x00'}, {'\x86r\xb5!an0\x00'}, {'\''}], [{@fsmagic={'fsmagic', 0x3d, 0x7}}, {@euid_gt={'euid>', r6}}, {@subj_user={'subj_user', 0x3d, '){w'}}, {@euid_lt={'euid<', r7}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':\\'}}, {@uid_gt={'uid>', r8}}, {@seclabel='seclabel'}]}) [ 200.457956] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 200.482184] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:42:22 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)=ANY=[@ANYBLOB="b9"]) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x400) 19:42:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8, 0x400) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f216000b0009000200030000000cfcffff08000000020000000100000000000000006000e4000000000b00000049e34331a7cae92e02000001020000000200000016000000000400000004000000080000000c0000001000000014000003000000010000d87f85c8", 0x6b, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2127ad2e9667a33e074a6b00"]) 19:42:23 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0xd}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 200.629314] print_req_error: I/O error, dev loop1, sector 24 19:42:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f00000000c0)='f2fs\x00', 0x5) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000180)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="3684383393000000000000"]) 19:42:23 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) r2 = socket(0x21, 0x3, 0x78) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000040)=""/102, &(0x7f00000000c0)=0x66) [ 200.669683] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 200.698550] VFS: Can't find an adfs filesystem on dev loop0. 19:42:23 executing program 4: recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/199, 0xc7}, {&(0x7f0000000340)=""/140, 0x8c}, {&(0x7f0000000400)=""/179, 0xb3}], 0x3}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0123000000000000fa0011"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r2, 0xa04, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x60}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6b}]}, 0x50}, 0x1, 0x0, 0x0, 0x2400c4d0}, 0x20044800) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x200000000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400004}], 0x0, &(0x7f0000014900)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_PROPBIT(r6, 0x4004556e, 0x1e) [ 200.724234] f2fs_msg: 344 callbacks suppressed [ 200.724241] F2FS-fs (loop2): Invalid log blocks per segment (8) [ 200.724241] [ 200.773853] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 200.784079] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 200.799744] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 200.813532] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 200.813539] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 200.813551] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 200.826008] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 200.852051] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 200.859358] F2FS-fs (loop5): invalid crc value [ 200.863929] F2FS-fs (loop1): Unrecognized mount option "6„83“" or missing value 19:42:23 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 200.940959] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:42:23 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000240)="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") ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000000c0)) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:23 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x80, "4f1e65", "09004d184f2dae9ca9f7726bc773fce0daf80527ddefed0e74c8750c4f8390428b8d983ad297e0a35c18a0c304dca90f747a3c3343ee3efd4c1875d15e99e4efb45fbd60655cc5b2319d8fac329323a19b143902b6038850fb3991624083f13d97873a347d54c8ccb93403952e3545cbe9e84cad14c3eac3bc811d54d604667b05dc9a94083b1f76b6dc3a9a7728fb1a3848f9ef557222f2784a233b88cfff2f95fc6f9947ad9e381d16bd09f2566b20c62e07d9719bdc277727ae3131d8b9e8dc2eec770684f597341e461fbc5cac119a6b096950a48d1e2460deb11a4bbabeab956730141e328df9bf7bb44f6fe28dcdfd9bc5af2db2a174fd3f62d03ac76a"}}, 0x110) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8, 0x400) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f216000b0009000200030000000cfcffff08000000020000000100000000000000006000e4000000000b00000049e34331a7cae92e02000001020000000200000016000000000400000004000000080000000c0000001000000014000003000000010000d87f85c8", 0x6b, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2127ad2e9667a33e074a6b00"]) 19:42:23 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000240)={{r1}, "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"}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000180)={@fixed={[], 0x10}, 0x2, 0x65d, 0x7}) unlink(&(0x7f0000000140)='./file0\x00') syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="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"]) [ 200.988842] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 201.265753] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:42:23 executing program 0: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r0 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000006400040029bd721cffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="f2ff10000a000600f3ff00000600050005030000060005007fff0000"], 0x34}, 0x1, 0x0, 0x0, 0x4008840}, 0x4800) 19:42:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8, 0x400) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f216000b0009000200030000000cfcffff08000000020000000100000000000000006000e4000000000b00000049e34331a7cae92e02000001020000000200000016000000000400000004000000080000000c0000001000000014000003000000010000d87f85c8", 0x6b, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2127ad2e9667a33e074a6b00"]) 19:42:23 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x5, 0x1, 0x0, "34c7023dbee7a90bd1609e581929ec00854405d6f06479e48cea66be0998957f", 0x59555956}) r3 = dup(r0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0xba768) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:23 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 19:42:23 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f0000000140)={0x9}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) 19:42:23 executing program 1: bind$isdn(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x3, 0x8c, 0x1, 0x6}, 0x6) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000000080)=ANY=[]) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) 19:42:23 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@remote, 'erspan0\x00'}}}, {{@ipv6={@empty, @loopback, [], [], 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@remote, @local, [], [], 'batadv0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x1}, 0x1c) [ 201.391599] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:42:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f216000b0009000200030000000cfcffff08000000020000000100000000000000006000e4000000000b00000049e34331a7cae92e02000001020000000200000016000000000400000004000000080000000c0000001000000014000003000000010000d87f85c8", 0x6b, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2127ad2e9667a33e074a6b00"]) 19:42:23 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f0000014900)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x100, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, 0x1, 0x2, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x440d1}, 0x10) 19:42:23 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) [ 201.517152] ip6_tables: ip6tables: counters copy to user failed while replacing table 19:42:23 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000140)=0x2000000) read$dsp(r2, &(0x7f0000000040)=""/18, 0x12) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x100000000, 0x0, &(0x7f0000000300), 0x820000, &(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYRES16=0x0]) [ 201.618602] ================================================================== [ 201.626489] BUG: KASAN: use-after-free in vlan_dev_get_iflink+0x5f/0x70 [ 201.633882] Read of size 4 at addr ffff8880a1632388 by task syz-executor.3/16419 [ 201.641521] [ 201.643246] CPU: 1 PID: 16419 Comm: syz-executor.3 Not tainted 4.14.210-syzkaller #0 [ 201.651268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.660877] Call Trace: [ 201.663458] dump_stack+0x1b2/0x283 [ 201.667087] print_address_description.cold+0x54/0x1d3 [ 201.673299] kasan_report_error.cold+0x8a/0x194 [ 201.673312] ? vlan_dev_get_iflink+0x5f/0x70 [ 201.682473] __asan_report_load4_noabort+0x68/0x70 [ 201.687516] ? vlan_dev_get_iflink+0x5f/0x70 [ 201.692037] vlan_dev_get_iflink+0x5f/0x70 [ 201.696443] ? vlan_dev_poll_controller+0x10/0x10 [ 201.701375] dev_get_iflink+0x73/0xe0 [ 201.705713] rfc2863_policy+0x163/0x1b0 [ 201.709778] linkwatch_do_dev+0x1b/0xf0 [ 201.713755] linkwatch_forget_dev+0x15c/0x1f0 [ 201.718464] netdev_run_todo+0x284/0xad0 [ 201.722720] ? dev_set_mtu+0x3c0/0x3c0 [ 201.726612] ? lock_acquire+0x170/0x3f0 [ 201.730579] ? lock_downgrade+0x740/0x740 [ 201.734819] ? rtnl_dellink+0x6a0/0x6a0 [ 201.738791] rtnetlink_rcv_msg+0x3cb/0xb10 [ 201.743027] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 201.747512] ? __netlink_lookup+0x345/0x5d0 [ 201.751848] ? netdev_pick_tx+0x2e0/0x2e0 [ 201.755988] netlink_rcv_skb+0x125/0x390 [ 201.760050] ? memcpy+0x35/0x50 [ 201.763323] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 201.767828] ? netlink_ack+0x9a0/0x9a0 [ 201.771719] netlink_unicast+0x437/0x610 [ 201.775771] ? netlink_sendskb+0xd0/0xd0 [ 201.779824] ? __check_object_size+0x179/0x22c [ 201.784415] netlink_sendmsg+0x62e/0xb80 [ 201.788472] ? nlmsg_notify+0x170/0x170 [ 201.792429] ? kernel_recvmsg+0x210/0x210 [ 201.796571] ? security_socket_sendmsg+0x83/0xb0 [ 201.801320] ? nlmsg_notify+0x170/0x170 [ 201.805462] sock_sendmsg+0xb5/0x100 [ 201.809358] ___sys_sendmsg+0x6c8/0x800 [ 201.813337] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 201.818103] ? __lock_acquire+0x5fc/0x3f20 [ 201.822353] ? do_futex+0x12b/0x1980 [ 201.826061] ? trace_hardirqs_on+0x10/0x10 [ 201.830283] ? __fget+0x1fe/0x360 [ 201.833720] ? lock_acquire+0x170/0x3f0 [ 201.837689] ? lock_downgrade+0x740/0x740 [ 201.841935] ? __fget+0x225/0x360 [ 201.845376] ? __fdget+0x196/0x1f0 [ 201.848913] ? sockfd_lookup_light+0xb2/0x160 [ 201.853416] __sys_sendmsg+0xa3/0x120 [ 201.857212] ? SyS_shutdown+0x160/0x160 [ 201.861204] ? SyS_clock_gettime+0xf5/0x180 [ 201.865542] ? SyS_clock_settime+0x1a0/0x1a0 [ 201.870131] SyS_sendmsg+0x27/0x40 [ 201.873675] ? __sys_sendmsg+0x120/0x120 [ 201.877729] do_syscall_64+0x1d5/0x640 [ 201.881622] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 201.886809] RIP: 0033:0x45deb9 [ 201.890030] RSP: 002b:00007f69fbe12c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.898091] RAX: ffffffffffffffda RBX: 000000000002e740 RCX: 000000000045deb9 [ 201.905356] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 201.912731] RBP: 000000000119bf60 R08: 0000000000000000 R09: 0000000000000000 [ 201.920094] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf2c [ 201.927351] R13: 00007ffd9cd96f3f R14: 00007f69fbe139c0 R15: 000000000119bf2c [ 201.934616] [ 201.936237] Allocated by task 16419: [ 201.939935] kasan_kmalloc+0xeb/0x160 [ 201.943903] __kmalloc_node+0x4c/0x70 [ 201.947712] kvmalloc_node+0x46/0xd0 [ 201.951409] alloc_netdev_mqs+0x76/0xb70 [ 201.955465] rtnl_create_link+0x1ab/0x890 [ 201.959595] rtnl_newlink+0xe86/0x1830 [ 201.963486] rtnetlink_rcv_msg+0x3be/0xb10 [ 201.967711] netlink_rcv_skb+0x125/0x390 [ 201.971754] netlink_unicast+0x437/0x610 [ 201.975795] netlink_sendmsg+0x62e/0xb80 [ 201.979848] sock_sendmsg+0xb5/0x100 [ 201.983637] ___sys_sendmsg+0x6c8/0x800 [ 201.987663] __sys_sendmsg+0xa3/0x120 [ 201.991458] SyS_sendmsg+0x27/0x40 [ 201.994986] do_syscall_64+0x1d5/0x640 [ 201.998864] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 202.004164] [ 202.005797] Freed by task 16456: [ 202.009167] kasan_slab_free+0xc3/0x1a0 [ 202.013134] kfree+0xc9/0x250 [ 202.016224] kvfree+0x45/0x50 [ 202.019310] device_release+0x15f/0x1a0 [ 202.023279] kobject_put+0x251/0x550 [ 202.026983] netdev_run_todo+0x747/0xad0 [ 202.031037] rtnetlink_rcv_msg+0x3cb/0xb10 [ 202.035604] netlink_rcv_skb+0x125/0x390 [ 202.039652] netlink_unicast+0x437/0x610 [ 202.043702] netlink_sendmsg+0x62e/0xb80 [ 202.048510] sock_sendmsg+0xb5/0x100 [ 202.052213] ___sys_sendmsg+0x6c8/0x800 [ 202.056174] __sys_sendmsg+0xa3/0x120 [ 202.059991] SyS_sendmsg+0x27/0x40 [ 202.063522] do_syscall_64+0x1d5/0x640 [ 202.067395] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 202.072563] [ 202.074171] The buggy address belongs to the object at ffff8880a1632280 [ 202.074171] which belongs to the cache kmalloc-4096 of size 4096 [ 202.087177] The buggy address is located 264 bytes inside of [ 202.087177] 4096-byte region [ffff8880a1632280, ffff8880a1633280) [ 202.099349] The buggy address belongs to the page: [ 202.104272] page:ffffea0002858c80 count:1 mapcount:0 mapping:ffff8880a1632280 index:0x0 compound_mapcount: 0 [ 202.114338] flags: 0xfff00000008100(slab|head) [ 202.118927] raw: 00fff00000008100 ffff8880a1632280 0000000000000000 0000000100000001 [ 202.126805] raw: ffffea0002680920 ffffea00014dd9a0 ffff88813fe80dc0 0000000000000000 [ 202.134699] page dumped because: kasan: bad access detected [ 202.140413] [ 202.142033] Memory state around the buggy address: [ 202.146952] ffff8880a1632280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 202.154407] ffff8880a1632300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 202.161753] >ffff8880a1632380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 19:42:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000200000001000000000000000040000000000000000000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x20002, &(0x7f00000000c0)={[], [{@obj_user={'obj_user'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@appraise='appraise'}]}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000040)={0x101, 0x81}) 19:42:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000140)={0x2a, 0x15, 0x15, 0x1, 0x9, 0x5, 0x3, 0x22}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCGUNIT(r3, 0x80047456, &(0x7f0000000180)) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {&(0x7f0000000040)="d73c030813d026fae7ea6dd47a0000000000020000000000000b00000000000000150000001500000010000000140000001200000010000000ffffffffffffffffffffffffffffffffffffffff030006000000000000000000000000000e0000000200000000000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a00000040", 0xa6, 0x400000}], 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="80dae3458307c8bc00ddd2d0"]) [ 202.169093] ^ [ 202.172731] ffff8880a1632400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 202.180081] ffff8880a1632480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 202.187458] ================================================================== [ 202.194805] Disabling lock debugging due to kernel taint 19:42:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f216000b0009000200030000000cfcffff08000000020000000100000000000000006000e4000000000b00000049e34331a7cae92e02000001020000000200000016000000000400000004000000080000000c0000001000000014000003000000010000d87f85c8", 0x6b, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2127ad2e9667a33e074a6b00"]) 19:42:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x400}, {0x0, 0x0, 0x400000}], 0x0, &(0x7f0000014900)) ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000040)=0xffffff1b) sendmsg$inet_sctp(r1, &(0x7f00000001c0)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x3, @mcast1, 0xda6}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000140)="ef5bdc1eec0c9db6455cf7ca230bbca516b435a55f4dbb575a0e93b440e0a984cd31e408f0f4ae004e15ea82c443d30cdac56e964db3cd8fa8e00ecbb6528b53a074cf217a32499acc7e5fa7504afa479399f7a793375fd752d98253f632fd93dfa8bf10ba0471d0432b31a3e1d9", 0x6e}, {&(0x7f0000000240)="fe58400e8bf211de20072649dbc01055fe8662a74cf59651a758ab5e1c8f54a5938baa993f16031c27d3747183f0d801115c85b6d3472b072c42ac5d3369321fdec37990869a6073cc15af6d4aa48f76225e3eeafb7ef9fc48dad3c6f3e3", 0x5e}], 0x2, &(0x7f00000002c0)=[@sndrcv={0x30, 0x84, 0x1, {0x6165, 0x5, 0x4, 0x7, 0x1, 0x81d, 0x7, 0x200}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x3}}, @prinfo={0x18}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xf08f}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x0, 0x1, 0x7}}, @authinfo={0x18, 0x84, 0x6, {0x9}}], 0x100, 0x8040010}, 0x8040) [ 202.290084] Kernel panic - not syncing: panic_on_warn set ... [ 202.290084] [ 202.297490] CPU: 1 PID: 16419 Comm: syz-executor.3 Tainted: G B 4.14.210-syzkaller #0 [ 202.306612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.309295] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 202.315951] Call Trace: [ 202.315967] dump_stack+0x1b2/0x283 [ 202.315978] panic+0x1f9/0x42d [ 202.315986] ? add_taint.cold+0x16/0x16 [ 202.315995] ? ___preempt_schedule+0x16/0x18 [ 202.316005] kasan_end_report+0x43/0x49 [ 202.316013] kasan_report_error.cold+0xa7/0x194 [ 202.316020] ? vlan_dev_get_iflink+0x5f/0x70 [ 202.316026] __asan_report_load4_noabort+0x68/0x70 [ 202.316033] ? vlan_dev_get_iflink+0x5f/0x70 [ 202.316039] vlan_dev_get_iflink+0x5f/0x70 [ 202.316045] ? vlan_dev_poll_controller+0x10/0x10 [ 202.316058] dev_get_iflink+0x73/0xe0 [ 202.377736] rfc2863_policy+0x163/0x1b0 [ 202.381726] linkwatch_do_dev+0x1b/0xf0 [ 202.385691] linkwatch_forget_dev+0x15c/0x1f0 [ 202.390178] netdev_run_todo+0x284/0xad0 [ 202.394223] ? dev_set_mtu+0x3c0/0x3c0 [ 202.398096] ? lock_acquire+0x170/0x3f0 [ 202.402049] ? lock_downgrade+0x740/0x740 [ 202.406188] ? rtnl_dellink+0x6a0/0x6a0 [ 202.410249] rtnetlink_rcv_msg+0x3cb/0xb10 [ 202.414502] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 202.419012] ? __netlink_lookup+0x345/0x5d0 [ 202.423347] ? netdev_pick_tx+0x2e0/0x2e0 [ 202.427476] netlink_rcv_skb+0x125/0x390 [ 202.431533] ? memcpy+0x35/0x50 [ 202.434832] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 202.439306] ? netlink_ack+0x9a0/0x9a0 [ 202.443175] netlink_unicast+0x437/0x610 [ 202.447392] ? netlink_sendskb+0xd0/0xd0 [ 202.451437] ? __check_object_size+0x179/0x22c [ 202.456011] netlink_sendmsg+0x62e/0xb80 [ 202.460057] ? nlmsg_notify+0x170/0x170 [ 202.464009] ? kernel_recvmsg+0x210/0x210 [ 202.468156] ? security_socket_sendmsg+0x83/0xb0 [ 202.473064] ? nlmsg_notify+0x170/0x170 [ 202.477018] sock_sendmsg+0xb5/0x100 [ 202.480710] ___sys_sendmsg+0x6c8/0x800 [ 202.484674] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 202.489425] ? __lock_acquire+0x5fc/0x3f20 [ 202.493642] ? do_futex+0x12b/0x1980 [ 202.497333] ? trace_hardirqs_on+0x10/0x10 [ 202.501544] ? __fget+0x1fe/0x360 [ 202.504985] ? lock_acquire+0x170/0x3f0 [ 202.508942] ? lock_downgrade+0x740/0x740 [ 202.513079] ? __fget+0x225/0x360 [ 202.516517] ? __fdget+0x196/0x1f0 [ 202.520034] ? sockfd_lookup_light+0xb2/0x160 [ 202.524525] __sys_sendmsg+0xa3/0x120 [ 202.528449] ? SyS_shutdown+0x160/0x160 [ 202.532409] ? SyS_clock_gettime+0xf5/0x180 [ 202.536713] ? SyS_clock_settime+0x1a0/0x1a0 [ 202.541193] SyS_sendmsg+0x27/0x40 [ 202.544720] ? __sys_sendmsg+0x120/0x120 [ 202.548784] do_syscall_64+0x1d5/0x640 [ 202.552937] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 202.558106] RIP: 0033:0x45deb9 [ 202.561273] RSP: 002b:00007f69fbe12c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.568975] RAX: ffffffffffffffda RBX: 000000000002e740 RCX: 000000000045deb9 [ 202.576248] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 202.583758] RBP: 000000000119bf60 R08: 0000000000000000 R09: 0000000000000000 [ 202.591035] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf2c [ 202.598377] R13: 00007ffd9cd96f3f R14: 00007f69fbe139c0 R15: 000000000119bf2c [ 202.606641] Kernel Offset: disabled [ 202.611037] Rebooting in 86400 seconds..