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", 0x1000}], 0x3, &(0x7f0000001600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x30}, 0xf36a9ca767f914bf) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0xffffffe0}, 0x10) write(r1, &(0x7f0000000040)="240000001e005f0214fffffffffffff8070000000000000000000000060008000e000000", 0x24) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) socketpair(0x18, 0x5, 0x7, &(0x7f0000000380)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0)="c7100b8d8a1ca58439c9e474134d067ef5ce298f2c3e8d55755d17480602cd78bf2df490242d054ea1d19540af059c929d6d8e7990347969181bad5153fabf6f335c3b5611761911d9437bdd954e8e844f44c2d31c02c17a4a7e1ac88605395cdd9c7f671c177b3ea8798c15a9304ff47157744726451dd5eba555478944f9851519ee96a4db645b991f0d3a7d52b6", 0x8f, r4}, 0x68) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r5, @ANYBLOB="00000016010000001800120008000100736974000c00020008000100", @ANYRES32=r6], 0x38}}, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000280)={0x8000}, 0x4) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={r5, 0x1, 0x6, @remote}, 0x10) umount2(&(0x7f0000000040)='./file0\x00', 0x3) 05:11:36 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c00020008000100", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r4, &(0x7f0000000100)={0x10}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000b, 0x12, r4, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000200)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @exit], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xac, &(0x7f0000000280)=""/172, 0x41000, 0x3, [], r3, 0x1b, r4, 0x8, &(0x7f0000000340)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x8, 0x4, 0x40}, 0x10}, 0x78) r5 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmmsg(r7, &(0x7f00000001c0)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x9, @local, 0x0, 0x1}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="1c9b204a1b5405c44d118334de21128ebbad914654796e52829fd1f9d572aa73fa77f72e36698fccd065d33094d45c711dcc22edf9aee5f386767d92a70224442e3acb93f711e4572eb8056156de1ca4546841abe9e80e38dc49f7c89bd11041bfd663e1cc285ddcce9931285f6142c8129fc225050f190bf069493571006f80ed042a467d47828af6ec6083f8875f00316084a048c21036d5d2a3146f0f38fbba0782dce673cef9cf0ec080f309f037fcefb46863fb7e", 0xb7}], 0x1}}], 0x1, 0x8440) ftruncate(r5, 0x200004) sendfile(r5, r5, 0x0, 0x80001d00c0d3) 05:11:36 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x4100, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:36 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x10], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:36 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x600e00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:36 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x400, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x4001, 0x3, 0x4d8, 0x0, 0x0, 0x148, 0x360, 0x148, 0x440, 0x240, 0x240, 0x440, 0x240, 0x3, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x35, 0x2, 0x0, 0x0, 0x0, 0x40000ec, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x2, 0x0, 0x0, [{0x0, 0x0, 0x0, 0x5}]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) shutdown(0xffffffffffffffff, 0x1) 05:11:36 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x600f00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:36 executing program 5: r0 = open(&(0x7f0000000040)='./bus\x00', 0x8001145042, 0x0) ftruncate(r0, 0x2008003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x12, r0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) r5 = syz_io_uring_setup(0x76d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f0000001680)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x2041}, 0x0) io_uring_enter(r5, 0x1, 0x0, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:11:36 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x11], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:36 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x601000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 850.974676][T17439] xt_TPROXY: Can be used only with -p tcp or -p udp 05:11:37 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x601100}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:37 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x12], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:37 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind(r3, &(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x80) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:11:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x500e, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:37 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0xfffffffc}, 0x10}, 0x78) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000140)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x49, 0xe, 0x4, 0x76, 0x6e, 0x9, "8139d05fc591b64caa709a513ce1c9c0be6754a934994bd81016fb4e9295a10159f38ca597688e831ca0e87c475aa5b7f0df1a69792a175954a7fae666ef48f6ff22a402661ae85cc3"}}, 0x161) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getpgrp(0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000380), 0x10) fcntl$F_SET_FILE_RW_HINT(r8, 0x40e, &(0x7f00000003c0)) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r6, @ANYBLOB="00000016010000001800120008000100736974000c00020008000100", @ANYRES32=r7], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0xffffffea, 0x2, @local}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) connect$packet(r2, &(0x7f0000000040)={0x11, 0x2, r7, 0x1, 0x94, 0x6, @local}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844304d658e620b9dc", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) fchown(r2, 0xffffffffffffffff, 0xffffffffffffffff) 05:11:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) dup3(r3, r2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:37 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x25], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:37 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x601200}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:37 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x48], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:37 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x601300}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:37 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x601400}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:37 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x4c], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:37 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x601300}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 851.791260][T17477] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 851.811682][T17477] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 05:11:37 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x601500}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:37 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}, 0x1, 0xfffff000}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0xffffffe0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000000100)={0x10}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000b, 0x12, r2, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000280)) write(r1, &(0x7f0000000040)="240000001e005f0214fffffffffffff8070000000000000000000000060008000e000000", 0x24) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='bic\x00', 0x4) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000180)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x3f000000]}, @in=@multicast1}, {0x3f000000}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 05:11:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x5c00, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:37 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x60], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 852.006246][T17517] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. 05:11:38 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) dup3(r3, r2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:38 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x601600}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:38 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x2000000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:11:38 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x68], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:38 executing program 5: clone(0x44001080, 0x0, &(0x7f0000000080), 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0xffffffe0}, 0x10) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffffffff8070000000000000000000000060008000e000000", 0x24) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r2 = dup2(r0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000240), 0x4) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x10040050) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x260, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd7}]}, @TIPC_NLA_LINK={0xffffffffffffff60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x309f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8584}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, [], 0x1}, 0x10000}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010102}}}}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "fc68a0e751d0102a087341a290dd3252de092dfb18ad815c3d0811a984e5b44fa573a5"}}, @TIPC_NLA_NODE_ID={0x57, 0x3, "50a7f4db203a575f13ad6f765e3678d0e85f3ee20f90732ce42a7cc34bc3b987ea8e305c45901802daddac1d1849e3f9726f36376d56e18adf0378b9114d740edfc2ef4e90e55b8d40054bc96497f188f4db1e"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe8}]}, @TIPC_NLA_SOCK={0x4}]}, 0x260}}, 0x4000000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) fchown(0xffffffffffffffff, 0x0, r5) setregid(0xee01, r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r6, &(0x7f0000000100)={0x10}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000b, 0x12, r6, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000000)) ioctl$KDGKBLED(r6, 0x4b64, &(0x7f0000000200)) 05:11:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x9100, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:38 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x6c], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:38 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x601700}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:38 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x601800}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:38 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x74], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:38 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x601900}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:38 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x601a00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) 05:11:39 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x7a], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:39 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) io_setup(0x3, &(0x7f0000000000)=0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) clone3(&(0x7f0000001380)={0x1048000, &(0x7f00000001c0)=0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000001280), {0x8}, &(0x7f00000012c0)=""/55, 0x37, &(0x7f0000001300)=""/44, &(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x6, {r0}}, 0x58) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) r5 = syz_mount_image$fuse(&(0x7f0000002440)='fuse\x00', &(0x7f0000002480)='./file0\x00', 0x0, 0x0, 0x0, 0x1040040, &(0x7f00000024c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@allow_other='allow_other'}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@audit='audit'}, {@fowner_gt={'fowner>', 0xee00}}, {@euid_eq={'euid', 0x3d, r4}}, {@appraise='appraise'}]}}) io_submit(r1, 0x5, &(0x7f0000002740)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x1, r2, &(0x7f0000000100)="e0b03d9b0e57ff118d12425b24abed2d76f6da4aa830b7f3fd3ea067e8d3eea5a57dff557752be7b7b1791d2a8ac8eb28b62b4a642", 0x35, 0x6, 0x0, 0x2, r0}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0xfc01, r0, &(0x7f0000000280)="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", 0x1000, 0x0, 0x0, 0x2, r0}, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x5, 0xffff, r3, &(0x7f0000001400)="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", 0x1000, 0x7, 0x0, 0x3}, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x3, 0x7, r5, &(0x7f00000025c0)="de88e7ce788f9cc7834c94cc154353f155f68b4820296971e0471be532dfe20b7609781a9e263ecde880c7755df79849bb54989b85aef4abe2ab23349e2b7e913362e8f615f74d755ebcaf82b7df20a183e71aaacec5c175da9af1b938266ca66b59f0d81de6183ca49f6e38b3c752de8e2d930a4c419520f95d261654b5cad3a52e249e5c6606", 0x87, 0x7f, 0x0, 0x2}, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x2, 0x1a, 0xffffffffffffffff, &(0x7f00000026c0)="64381cd8d200871044219cba52ef404de3f5513b5b5dca210988246468b3cb9090", 0x21, 0x100, 0x0, 0x7, r0}]) unshare(0x40000000) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x2, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0xc8}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x34}}, 0x0) 05:11:39 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x601b00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:39 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x1518c2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:11:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x9200, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:39 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x700000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:39 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x300], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:39 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x3b8], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:39 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x700e00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:39 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x700f00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:39 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x701000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:40 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x701100}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) 05:11:40 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x3fe], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:40 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x9100, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:40 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:11:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x9a00, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:40 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x4d8], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:40 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x500], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:40 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x701200}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:40 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x701300}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:40 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x70b401}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:40 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x600], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:40 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 854.287122][T17641] tproxy_tg6_check: 26 callbacks suppressed [ 854.287125][T17641] xt_TPROXY: Can be used only with -p tcp or -p udp 05:11:40 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800100}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 854.352591][T17653] xt_TPROXY: Can be used only with -p tcp or -p udp 05:11:40 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x700], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:40 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800200}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:40 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file1\x00', 0x515a03, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:11:40 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x58f3, 0x9, 0x0, 0x3441b1f5}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) keyctl$update(0x2, 0x0, &(0x7f0000000100)="b067eb258ab2f3617f2056d6ca8b4743877a1b9d92a8826561bc639cfcaa739cb808ae622674b8c16359c086fd6428e72794c85942ee8bdf6abf60970698d50730a1ad201d3976656f72509a1761462d3c6a910ec0d5b3ed0e9bbac7846d88aa1224696a535c66685cb56520de24a9acc918bd463f3d6537c021316def2b12ae76849863ff27a5b0f9cfd508ee365b9ec6ac8e8fb10529d9cac302d15e29f8872a3eb7d7a93375d4841226", 0xab) openat$cgroup_ro(r1, &(0x7f0000000580)='cpuset.effective_mems\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000100)={0x10}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x2, 0x0, 0x3, 0x66}, 0x0) r4 = memfd_create(&(0x7f0000000340)='#em3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90)\x1c\xae\xe4\x92b\xd6y:\x06\x16\xac\xc1gQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gcg,\"\x1dD4\x17\xc0\xe6\b\x00\x00\x00\x00\x00\x00\x00vob/~\xc2\xdd\x84\xd4\xd0\xe9n\xb1\xb9\xd0\xe9\xf1\xdem\x9c\xfa\xb4\x17\xa8z\x19\xebl\x17\x84\xd2\x86\xbf\x89.\xd7q\xbb\x7fN\xd1\r%;%\xb5<\xe4\xf1x2\x8a\x19p\xc7\x99R\x9c\x93\xd1\xc4 )\xbf\x8c\x19\r\x81j\x88h\xb0\xd3H\xd6<\xf9\xfb\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe68\x16\x02\xa8\x83%U\x8c\xf7\xb3\xbf\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xd2\t@\xda\x1d|\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7l\x87_\xb3#\x11c\x8eF\xd4\x0f\x97-w\x1bfA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xd7\x02S;C\x99\a.$K\xe8\x06\x02\x00\x00[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcf\xfa\x7f\an0\xabB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-~\xaa\x80\xec\xc7\xf1\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb', 0x0) r5 = accept$packet(r2, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000000540)) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8010002}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0)='ethtool\x00') sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2400000017e16d870d1cf00e7e8735202a9d52234e84a79913e586bb8ce99919962f333d262f2693dee290767b418b3428d32a2124ca9a90ae6967668ccead630830035bf35fa047499c85b9b81be65a601b1826720cc3adb8146939f8b1d0a0fb08c7e6643b97104eaf2ee18bf26e9bdcad10f40000000000000000000000000000114e73973e9e0509c4", @ANYRES16=r6, @ANYBLOB="000109325d937964cd27bd040000000000000000090004decd9f7094126dae8217adc28961bc617f15d9b03cd43ccb00fc3717e2b44f70f66d95d4692da1cd0c15d240466b2fc994672aad1413f77f"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 05:11:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xae00, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) 05:11:40 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x900], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:40 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800300}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:40 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0xa00], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 855.063772][T17667] xt_TPROXY: Can be used only with -p tcp or -p udp [ 855.089771][T17681] xt_TPROXY: Can be used only with -p tcp or -p udp [ 855.097078][T17684] xt_TPROXY: Can be used only with -p tcp or -p udp 05:11:40 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800400}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:40 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0xb00], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:40 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800500}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 855.114065][T17688] xt_TPROXY: Can be used only with -p tcp or -p udp 05:11:41 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x20000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000240)={0x7, '\x00', {0xffff}, 0x3}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000280)='\x00', &(0x7f00000002c0)='trusted.overlay.opaque\x00', &(0x7f0000000300)='y\x00', 0x2, 0x1) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000000)={0x1, 0x6}) r2 = dup(r1) execveat(r2, &(0x7f0000000080)='./file1\x00', &(0x7f0000000180)=[&(0x7f00000000c0)='+\xee\'\x00', &(0x7f0000000100)='{/}::.](!/-\x00', &(0x7f0000000140)=':]-\'[!)]\x00'], &(0x7f0000000200)=[&(0x7f00000001c0)='&\x00'], 0x100) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:11:41 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800600}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 855.273958][T17706] xt_TPROXY: Can be used only with -p tcp or -p udp [ 855.335384][T17706] xt_TPROXY: Can be used only with -p tcp or -p udp 05:11:41 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0xc00], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 855.506101][T17717] xt_TPROXY: Can be used only with -p tcp or -p udp [ 855.517092][T17720] xt_TPROXY: Can be used only with -p tcp or -p udp 05:11:41 executing program 5: unshare(0x64040600) socket$nl_netfilter(0x10, 0x3, 0xc) syncfs(0xffffffffffffffff) write$evdev(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x77359400}, 0x5, 0x8001, 0xf2c7}], 0x18) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000100)={0x10}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000b, 0x12, r0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x901, 0x0) r2 = fsmount(r0, 0x0, 0x9) write$hidraw(r2, &(0x7f0000000180)="a88d1be6a0d104661b91c9e3dfc938819eb63ea60ba75c68631307b54da6d4c456de191b36432017528dae2532fe14e8e1cb064fe998628bfc8418df59f13069e50cf0eb0b5e48d7ec7d81acfcfe08b22c77eeb241974d18f5babe053f204d307c068b40bef4977c7f98abfdea31815221463ce057ab93af3c924649621b0052c78ea88b0333188db73ecb5159939daf46307b6c0098d47f15aaa84d0acbfb8f1c7079ab3067e53d8e5d2e8a0b794264fbcb17ec63349d2cce96d57622f690aa4e991e3467", 0xc5) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000080)) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000000)={0x800, 0x101, 0xffff, 0x6, 0xffff8001}) 05:11:41 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800700}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}], 0x1, 0x0, 0x0) 05:11:41 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0xd00], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xe803, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:41 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x4001, 0x0, 0x0, 0x0, 0x4004, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getnexthop={0x1c, 0x6a, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NHA_GROUPS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:11:41 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800800}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:41 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000100)={0x10}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000b, 0x12, r0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) ioctl$KDSKBLED(r0, 0x4b65, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x9, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000002880)=""/251, 0x0, 0x0, [], 0x0, 0xd}, 0x48) 05:11:41 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800900}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:41 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000480)={0x38, 0x2, 0x6, 0x722, 0x5, 0x0, 0x10000, 0x0, 0x0, 0x8}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000040)}, 0x10000}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x4) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f00000001c0)=[{&(0x7f0000000500)}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x4, 0x3, 0x0, 0x0, 0x2}, 0x0) r4 = open(&(0x7f0000000400)='./bus\x00', 0x141042, 0x48) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000140)='./bus\x00', 0xa) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x80) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x100000000, 0x4}) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r9, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080ffffff7d) 05:11:41 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0xe00], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:41 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800a00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:41 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0xf00], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:41 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800b00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:41 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}], 0x1, 0x0, 0x0) 05:11:41 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800c00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xf401, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:42 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800d00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:42 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x1100], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:42 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2900, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:11:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}], 0x1, 0x0, 0x0) 05:11:42 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800d00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:42 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800e00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:42 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x1200], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 05:11:42 executing program 1: r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0xffffffe0}, 0x10) write(r3, &(0x7f0000000040)="240000001e005f0214fffffffffffff8070000000000000000000000060008000e000000", 0x24) connect(r3, &(0x7f0000000080)=@ethernet={0x1}, 0x80) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:11:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x101d0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:42 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800f00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:42 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x2000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:42 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x801000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:42 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80408}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="23523987f4018000000fa6e0cef036aa7a429cbcb5b46edd665e07f79e3d13629e5f398e8b3e84f5519fea5b0c3f0fb9997b8b2d314a552f5330f490f4ded8976b0eb4a6227a0feea3d52fa0c20700000000000000c2a07eaaf0f3c2f502f2eecb3097efac8718d514c6a72e203b2f8a1699fc2ac2f35c3f043ba3598cf6932ac67222b19808cbb0c5f157", @ANYRES16=r2, @ANYBLOB="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"], 0xf0}, 0x1, 0x0, 0x0, 0x60000000}, 0x4000084) read(r1, 0x0, 0x0) 05:11:42 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x801100}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:42 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x2500], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:42 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x10001) setns(r3, 0x80) 05:11:42 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x801200}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:42 executing program 1: perf_event_open(&(0x7f0000000500)={0x5, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x9}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file1/file0\x00', 0x151c42, 0xc0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(0xffffffffffffffff, r1, 0x0, 0x80001d00c0d3) [ 856.935067][T17821] new mount options do not match the existing superblock, will be ignored [ 856.948053][T17821] new mount options do not match the existing superblock, will be ignored 05:11:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 05:11:42 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x801300}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x40000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:43 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x4000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:43 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x66, 0x23, 0xf, 0x40, 0x17ef, 0x7203, 0xe1dd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x47, 0x7c, 0x34}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0xb, 0x2, "1b65"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000d40)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="00000600000092190cb100cf2c91397621fa12aee766ce89dbae73f2418587db6ac37aa9660f5e2922e44b36ea5fc361c5afeebe98a4d848ae0e4ec66e620de22963fe9d3eb67d8c537bb75c47ca"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x20, 0xc, 0x102, {0x102, 0x3, "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"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x1c, &(0x7f0000000280)={0x0, 0xc, 0xd5, "f128055b137121fe5e3cee51095c2b207909b10c1b46d26b3ee44b6bf3708f8fa9b2692273cb8bbe8328b19ef7d6499c7abf761379f17da7fe8a4ea3bce23a7c648173a226692795cc7c7821e483fdbe507b050fa0aca2c86550e84565ab2a16e581848048dc075407d0e2bd3cc4706e439a35c2798c8e78029cc36b6b14d839ddff862001bf5b753e77369968af260c44aa77e20e4dcefd9906fc31e404c42f872b1aea51145c153921519f4511685eb73bdf88f79f3c42bb2a5365a6c56b2a25d05306c67df927fd44d66afbde338033700a3b14"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x6}}) r1 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r1, 0x200004) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000000)) 05:11:43 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x801400}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 05:11:43 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x4800], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:43 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x801500}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:43 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x10001) setns(r3, 0x80) 05:11:43 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x801600}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:43 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x4c00], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)}}], 0x2, 0x0, 0x0) 05:11:43 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x801700}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x20d302, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:43 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x6000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 857.516972][ T3232] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 857.897055][ T3232] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=e1.dd [ 857.906094][ T3232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.916301][ T3232] usb 2-1: config 0 descriptor?? [ 858.617029][ T3232] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 858.837009][ T3232] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 858.847041][ T3232] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 860.697097][ T3232] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 860.707147][ T3232] asix: probe of 2-1:0.0 failed with error -71 [ 860.713915][ T3232] usb 2-1: USB disconnect, device number 83 [ 861.456948][ T3232] usb 2-1: new high-speed USB device number 84 using dummy_hcd 05:11:47 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) r3 = socket$netlink(0x10, 0x3, 0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:11:47 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x801800}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)}}], 0x2, 0x0, 0x0) 05:11:47 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x10001) setns(r3, 0x80) 05:11:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x1000000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:47 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x6800], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:47 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x801900}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 862.026961][ T3232] usb 2-1: unable to read config index 0 descriptor/all [ 862.033905][ T3232] usb 2-1: can't read configurations, error -71 05:11:47 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x6c00], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:47 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x801a00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:47 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x801b00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:47 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x7400], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:47 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80ffff}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 862.087628][T18030] tproxy_tg6_check: 20 callbacks suppressed [ 862.087631][T18030] xt_TPROXY: Can be used only with -p tcp or -p udp [ 862.118850][T18043] xt_TPROXY: Can be used only with -p tcp or -p udp [ 862.161807][T18060] xt_TPROXY: Can be used only with -p tcp or -p udp [ 862.177257][T18065] xt_TPROXY: Can be used only with -p tcp or -p udp 05:11:48 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0xffffffe0}, 0x10) write(r3, &(0x7f0000000040)="240000001e005f0214fffffffffffff8070000000000000000000000060008000e000000", 0x24) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x124, r4, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf0}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5284937}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x202000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe0000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffae}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000094}, 0x40000800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:11:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x900000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:48 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x7a00], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)}}], 0x2, 0x0, 0x0) [ 862.313276][T18098] xt_TPROXY: Can be used only with -p tcp or -p udp [ 862.322053][T18105] xt_TPROXY: Can be used only with -p tcp or -p udp 05:11:48 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x10001) setns(r3, 0x80) 05:11:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x900e00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:48 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0xb803], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x2000000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0) 05:11:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x900f00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:48 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0xd804], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:48 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0xa, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:11:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x901000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 862.417432][T18117] xt_TPROXY: Can be used only with -p tcp or -p udp [ 862.424864][T18124] xt_TPROXY: Can be used only with -p tcp or -p udp 05:11:48 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0xfe03], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:48 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x40000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x901100}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 862.465994][T18137] xt_TPROXY: Can be used only with -p tcp or -p udp [ 862.493828][T18148] xt_TPROXY: Can be used only with -p tcp or -p udp 05:11:48 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x10001) 05:11:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x901200}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:48 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x1000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0) 05:11:48 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file1\x00', 0x8, 0x3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="6ddee19cc16d28e248d35e25a224de6c784ccd507bed14965882c45c7e5f4047d6cb601e1f2f86acaffb5b9fc2f571fd029cad7228465231e73e40076f77b4708e127595c36322eb06f7252658be66807fd0dd4a8960c0be5aca5d97310eead45cd883a018efaaf6da2df63b3583aa4423770f4eaf1d1ab6440555bb7ce5902c9dbca6038b540656bbf83d45e91c66b3e12f252a86ad1f1d3db5671dd7c65f38d123cd12d6bd103012b061ed6fac178ce227b69ab3fe8e76a101c6f165782150808d7d74483e07dae5515e2661f953fd0f8f", 0xd2, 0x400}, {&(0x7f0000000580)="f0508146bc6ba675ab41833fd1b6338558e05804aebb8777d7d1c0ec4aa13d4b8df5bd29bc3c20bcf555318491f6ebb6eceb213f71ce27991dcaec364bac75143c64addfa6180d40f00c03e7e86692878fc679ca376002a037f64249b5ef2a33f73aa7f0e2eb12c4cc7c582e1e0007b3138dd31fe3462951fe4c1a34a300a43775b6c9d0b897df001817d58ef3f11985c8a13badc6e8135048507cdc90a5eed9370f33a0de11308a3f465d1e4d84897130d90ac3e5756eefc289a343dc7382fbcf24aa23d229d2ba785345d577976ad3a67e2ee163bdb06353fd2db1c170cd440b51ed2e52cdecd915c85d05b8958a4f46f5b1808e6b6f465fd4a15fabb1de434aee4d82fde793d54ae20ea7bb49ba308fa74ebe2b0dd756f7616e57601fa2176aaed092699992efd4baa51bfb17d9aa90a62f283e765f33b3e6ad3792b8fb1f02f2929c319c762b87edaef81b875d429bec25560bc7c3da65e0f019631dc6f4788defded65f141c51574c2244d1eff50630cad8309c456cea810c086f1824281ba144a58dc227c5136c74fd7d775ec9d99a9535480564307b062b6ce775b5750427e183839149317078d7298c8c008e9b2d8130a37abea3b286988f058cc490e1a88d7a52f7ea03b225ac8f49d498a8548e8a2ba3a3071d43d913032f41f40204b469023e3b41517c43a7238cef6608798efb3151cadc3b8833e21449beea46cb2c86dd1e4a1273d1b3daf71aa4ef242d675501642d0dbe5bf7012be470b1d7085506868f4fdbea2db4719e691080908717c65d7490502da3d3481bbdfcdeca1009c87fa9ccf3d47bf2ee881de3162181fb4690acc1c2a77e87f789b186794e921c32e2c2b23c6e1ce920c1d097a21ed5d1929e995ed7eced114396c4821d7debc45a871551583bc21c059dfe5bcf11143de1b674b55b459000a3c0a9f28b9a2d86793b4e5645553d7fed13d279fd453c7df118e486328127b2c18d18b6c0f8c8421e631cb63e8b1f0ab4b78f0c3fd81eb4c871c17c49e850cd5a508fed0b0e5f1d5e43c283a42034196706f549c6bca340622feb518c89a2f81f38c97bc89d18ad2fd94382541c81e6513098d3301b1fd6f06b528c3ad5fd75f7b76a9d9fbe48d78b282b37e88511a1cc78c24f43585636376a4440b22ee75b66330e36558ce17546182a616966f501d901b1484b25c0c18957eb181252a81d519939fb276110cf7d447840960c898c2fb2d36bb708f5e1db5def9a0934cf8a4080e172af0dcda663fb382c4eaca6932d3fae9e2dad241aed98fd74840c226f549756f97bd103a7da1352ebe0e3323ef8be470734278653dd85021230ab352d995130986e76d32c5cc878f8a383d874d5065e08abc728931b4e006123290c2b1223cfb3355a79625a5533e8415d55c5cad7c7eeb7e5a8f453a64826b4202660854e7babbecbe384c3e6c03583fc027921abc4c90964cb99ddd254012507a2197556bc5d6411c3ad5143633c90ecfaa905408b0346f44dd2032ecc32542c5f25a5fcbab651480cbf3975a685922e728e7ff222753ecf1adda698e3069cf299d81522c09b8e1751469ea8a1fe8ce40682146c3d281f54c865d0e27185fff2048bb814238543bf5efc686badca8436e84128aa90610336249403d88b8859f17fefafea3b8c693db7ec9a9664f04900ff10f7717b6d1bfccc4a3786d414935e6a29c8a945c056c744b935a0373f804c9455ef69e9d3b7434765caf6264fe591951c0a9a897b85968b831a309f599de54612c9117f9ec54a985b18cf0a8f2dd25df88574ca5389e56c222fa2fd8e7bf19f147457c879f1fa49d49da76cf3b6abafc4063a6185c2d2a7e9fcf989938c441156d10563fb3582c68c1e12bfad25e1b955f9952e9712a512ac16c5b270528945c62b9b458173f4886fee24c6320f342791c6486eeb13567c4ab7ea1a37231dd8eb08aef6f0b7aeed42b2f134dcd3895afd397f09dde7682c538dfb19590b1094d0037b6367dd9af59566adac5ff96b924e7437e0e6ede4ab6aac2d39f5ee4ff359f0603287b129fe414385af7743f11d50aa316da2cf2ccb4a8eafc76b211ceb9adc9c15fcc94ba92017253a407350d6d5d5d0dc98e085e9aa61022274fb8c24c25bb838b629aab1781b17a52466c0559aaa200bfa70c8f1726e6bbaea72601155b7cd7cff7a0f384aa732b42d39b01f3865a4f036efc427a59c16a00f768e1f84cb65420d4ceb66c337fd5bacbc9970247aa0b99956afe521e152fb010a7ba6832dc183e57cbb9a65535feb669178e9ca15a746044c56794c55af59492f12ad493d8b12774fdeef5a1d0beb3f3ec5374e41c50b5a027a5b3e85162ec4c8ce335f3ec5834fd1343b2f82592e6e856a363acdbe32b4b0ea592f0b0c333e8d6bfa114196ac1fb608c252029034d5e78827087bb0fcc19f03709de9e5833b5c4a7432bce7598df697919c2dff35c65e25a8a3ae002159bc2848118bc4f0bf775c91ff7f6632dfce0519ec83ec8b7c667b7bd4ad9745a1f4e1964b0e8008ee2465d04d0c258e27f73d1228f9427f4d49dd8ad9fffc8ed2c7bfc96eeade723579ce060ea24e78a879362af19bc36686a00cab2a1f54e0c8a4d86e80f4d756f99202ac3a36f93f7ee3ef0afdf0ece129d368742cf8f8140ccae8ddc90850ed6758308c5d22dd2038ff952a17f4c1a210f5dfd7b3839f11d44af7c7ec53a69f7883501c0854a5c041dcc8077a5044c354a681232df46c5c96f5e3e151f434ca80f8ca3061d5133fa5a838594853d23f4372b5fdc159af82bf763252793c1cc757f2bf7330b771a1b36f8d45228f1ec156c4b647aeb2c5c441f522eb1f98475940d7f2f6ac1f1167fef3b1beaebe3724ea2a09ab0636604d20c47970c61abce17acc59d46c35df1ff6cbf222d9d0bdf84ce042b57a7e79c75d53c388a1d8c0aea16a3477677615f9571e70dfe194251fe68550a3dbdf7ee6592e62e18bf4be376212c5ce06e2570b0a7255508a9899fcbdb9e89d565a41f4af47d4617968abd65489e4be2bf975f88f1c033384fcbc7d27187769f20213130ffc263bc72d95d1199f1464a218c6ac5ebfb0baffeaaf535c12f47496a90d3e17f0c1e9e8cc4c45cecf4c0551ee7852d8518f4934b1e09b5cf9e29546091c178bfb2285aef8ad1c6f5520fe3a4d6b27d29d658c7085285c061c2a0eb5f5c2cca32ecbcccb39bde38925f71586733515967630526d79c6b5dfaa0d2cc46a51c518e84de1c9bbf176b155251aec9ce27f032986cc73574e91c903f362501d32a1bef93b900bbf54f8549654757262d807bdf4e45fb5a00e860cc712d82567976eb58067826ba584e49742164f2242125db55e484f6478803b9dde8e997c9e28f8ffeb09a05e0aa08821228a35a97be868eced5afd5bbce8f8203114bebd278748bf4ee6721d636ef1f7f51e860b417bbc8d462717d78a931b71254a3e83f7f98f50362e31afd741a8e55ebf2eaa90e88c2106fbbfdad4ae7519364379fe4a02841dc12f5851859f48f38d8640b82429541621263979709bbd114e2cd481da5e4072c96552e01624a0df573832625ab603a86c35451d10fc11890b492509f3d0cc0a7a578247a24447aea9db6f02d7a9f76e504296349bfb35e86652e6749c1ea1f5357cff08901fa58489762419c2bee5104c3f5e1f2980abbd0ade0327382719fde0e004f8fcfa4e5dffbebef837cf9662673e1541a3c96e0fa1ee1d85828f32212fcf0f69205afa07f6b2facf5bbd1ec4f20ee3711c02ed6863d804b4234346bbaf75fbd51b6a8a6355a97b34d220df67302dc706438355774798fa658a28d4eaf027b20c96c2f62e36f45021da020402a686b8c948d3fe62cefc1589ec8598d3f668742885ab02fefef56e72734291a120f5b3550e03c6606af67843cb3839513d5dee660e41b55c25b3cfec4886bcff2284643d906980b3d4cbcfdb7099cef46a561e116956cbe1d5109a138145a91d99c38c34273da041903f22781fef35f290d6f08fe2b76a8a09658d33e0c4f13f5bc2ec8531ec25c2af972c19db8e6214db180b97dd0c0ad0b41f64775d4dbd8f2e324d7ebeb2d9f96a2b822849fce77faf4807d133197bc434bcdbb96802925ca8fb4266b7b223fdfb59031801fd7c18ff821aa2c6145683bdd84a678d2a003aa00f2b9ce3a27651762ecee3cc41d65fceb2996d8b271a988e97bb3c78e7dd33333f8b2b8cd15fd4bcd070ee49d302ef0b46e5c26ad1f520ec03a591725571852df3c330117ecc3413bcb296fabb02e087921317c400fabc7ef002babe87c57f78553479fa2ab2dba66436c6e6d7d7f32d53333c7e394fdf72027660c4fcbbd4ef2930f3c0de6f02254e0ee51606636a4cf21511d36f302dc7d0f746a273055719ca4f602aa0c8b9b7dde667922036baa4aea302a9d1cc7cfbe1fa86d0df37cf4a21351b94ef961519da295747295737e7b079f0c2066083d5d92e5ad2406b38c1457da3cc6802e2171b3077d809f7c8d8a704d3855d36ad741f72c6d7e70dc8585ea2442271d26061c100828ea728e11ba507279632007510352605b262a33d9de4f33c36f936bc86ab1d3eccab090c0242a9ac8687d95687b79fccac6897f4feeeb801c5573a58f9f1b8c9d4b81020fb28c9df9a9be121dd8ef185b7d922320d4e99569a1977425479568ce29272b5a72b61ca3bf058e9d0f78510c9ead97d79e61d7c107c9b1ddb888b63e55ccfb13d6352b59ec2dd6df794c18127a8a883600048231499d09b244013c37edbc542b408315ea1e0fcee6c86ca2eee4e20593f09eb336c2a85a048cabd6a209ed3a22668329e7160d06b25b4edab9df047f1fb73e4a12d6247f0c2f7524d490833fb0eb2d55f5a37f20b47a54f103cc948528ac42c35bfab1fe544a0394d5539fbe9e063f57f512d428780c6385dcf4b3756136923c6da702c6aa1925e70029ae15385a5b52656b2be6b78616585405e07b10845a8605eaa85d5af8bcfa0c92880977718907e161cdaf731435846f3d5f3b13026c4ac8111ed584fac71bdc78d39f0e5a7bb247db5b105d910b6cf74bfc5a5f53357ee9c9bc514ba40e6cfe4ccdae5c45fa8874e059d8721811afdb856e2fca4009363346af6f02aaa2abc3d2a882f1673180c230f554f8b26fad14a445b3e97e9812b8854bba352a34db006c6414ead73456a6cbc09f8a2bf2a8266db73c2cb575bf27de062f6ba349904b1005b93e31085b7115e900fc1ba3ef4c14f5f4dc65e12ffff23f0aae82e0ce1317284ed012dc7d6078b271ac73e27092d8d09460a167e8a6ee7425c61a91e7f8727831e068d59e5cc3af30144d0ec30b16dd3a3990249828f5894d586a9d93e8f3726e0590c182ebe9557faf42251a687d7f1d9f51a5cb3efe87d3cb932c5e6ed1bb60e57374e5bdf8187fd8d76b124206acad7d4d9e3f21db47238b0f64e827a7dccc8e79edfdd7576f14ccb5a0d92377bc1d8d37c606ede885e9679da4aeeb5c977dd256de02eff158cd37e1b30e2965f5c967eafc9b3269a51aac8e2b3dc64bdf90369f9b4bc1ce03e8b9bd8b4179be044bb34caef55e707dae5802e2310de358cb0261e0dfab55a4e5a8a7cb6c1ac5984bb942b349a51e1f9b44fd47dbdd086911455f7bdb4dffc115d31b35dfb3051cbc3f6ec6034008d2c70e585a947a7012f2faf3db5efea3f5368114e54bc70ce187e92eb2f8748142bb6f9971d3638e569e2556e62a3b98164dc7ad5ba1508d88ab1a58642d8d9dd7b9b9a2e70a7e083c1d23ceb", 0x1000, 0x5}, {&(0x7f0000001580)="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", 0x1000, 0x3}], 0x100000, &(0x7f0000000240)={[{@shortname_lower='shortname=lower'}, {@fat=@dos1xfloppy='dos1xfloppy'}, {@nonumtail='nnonumtail=1'}], [{@seclabel='seclabel'}, {@uid_eq={'uid'}}, {@smackfsroot={'smackfsroot', 0x3d, ']+]'}}, {@measure='measure'}, {@fsname={'fsname'}}, {@hash='hash'}, {@euid_gt={'euid>', 0xee01}}, {@subj_role={'subj_role', 0x3d, '%@\b({#{\\{\''}}, {@audit='audit'}, {@obj_user={'obj_user', 0x3d, '#([+^'}}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000000100)={0x10}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000b, 0x12, r2, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000000)) linkat(r1, &(0x7f0000000300)='./file1\x00', r2, &(0x7f0000000340)='./file1\x00', 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:11:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x2d32000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:48 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x2000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x901300}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:48 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x3000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x90b401}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:48 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x4000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa00000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:48 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x10001) 05:11:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa00100}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:48 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x5000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0) 05:11:48 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0xffffffe0}, 0x10) write(r3, &(0x7f0000000040)="240000001e005f0214fffffffffffff8070000000000000000000000060008000e000000", 0x24) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000000)) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:11:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x3000000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa00200}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:48 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x6000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa00300}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:48 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x7000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x1, 0x0, 0x0) 05:11:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa00400}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:49 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:11:49 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x8000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:49 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa00500}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x1, 0x0, 0x0) 05:11:49 executing program 1: ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000500)={0x4, 0x1, "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"}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0xb, 0x5, 0x209e20, 0x2, 0x1}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000000), &(0x7f0000000440)=""/130}, 0x20) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000200)={r2, &(0x7f00000000c0), &(0x7f0000000340)=""/203}, 0x2c) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000080)={'erspan0\x00', {0x2, 0x0, @multicast1}}) 05:11:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x4000000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:49 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa00600}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:49 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x9000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:49 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa00700}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:49 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0xa000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:49 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa00800}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:49 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa00900}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:49 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) 05:11:49 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0xb000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:49 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa00a00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x1, 0x0, 0x0) 05:11:49 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2000}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x40801) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r3, 0x300, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8801) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:11:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x5000000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:49 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0xc000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:49 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa00b00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:49 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0xd000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:49 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa00c00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:49 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0xe000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:49 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa00d00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:50 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) 05:11:50 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa00e00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:50 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0xf000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x8000000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:50 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa00f00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:50 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x10000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:50 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa01000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:50 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x11000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:50 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x12000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:50 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa01100}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:50 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa01200}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:50 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) 05:11:50 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa01300}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:50 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x20000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:50 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xc030000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:50 executing program 1: perf_event_open(&(0x7f0000000500)={0x4, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x6}, 0x10052}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f00000000c0)) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) set_thread_area(&(0x7f0000000080)={0x40, 0x100000, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1}) ftruncate(r0, 0x200004) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4000, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x3, 0x40, 0x100000000}) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) r5 = epoll_create1(0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@mcast2, @in6=@remote}}, {{@in=@dev}, 0x0, @in6=@private0}}, &(0x7f00000015c0)=0xe8) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000ac0)={r6, 0x3, 0x0, [0x0, 0x2, 0x8, 0x3, 0xfffffffffffffffd], [0xaea9, 0x3, 0x101, 0x100, 0x1, 0x2, 0x5, 0x65ab, 0xffff, 0x10001, 0x5, 0x6, 0x3, 0x3f, 0x8, 0x1, 0x4, 0x0, 0x1, 0x7f, 0x6, 0x3, 0x775b, 0x92, 0x4, 0x3f, 0xffffffffb27790ec, 0x0, 0xa78f, 0x2, 0x41a, 0x0, 0x9, 0x5, 0x10001, 0x101, 0x0, 0x5, 0x800, 0x5, 0x100000000, 0x2, 0x0, 0x4a0c, 0x81, 0x8f0, 0xaa8, 0x7fffffff, 0x9, 0x3a31490b, 0x101, 0x6, 0x8, 0x7, 0x5, 0x2, 0x200, 0x8, 0x6, 0x0, 0xd88d, 0x8, 0x6, 0x4, 0x40, 0x401, 0x430f, 0x3, 0xe4, 0x3, 0x6, 0x9, 0x400, 0x7, 0x3560, 0x200, 0x1400, 0x6, 0x0, 0x600000, 0x86, 0x3, 0x609d, 0x205d82b4, 0x40, 0x800, 0x9e9, 0x8, 0x20, 0x5, 0x5, 0x2, 0x8, 0xffffffffffffff00, 0x9, 0x5, 0x5, 0x5, 0xd92, 0xe5e, 0x0, 0x12d, 0x8000, 0x2, 0x9, 0xff, 0x515, 0x2, 0x8, 0x6, 0x1, 0xfb, 0x8, 0x1, 0xff, 0x1, 0xfffffffffffffffe, 0x9, 0x8cc, 0x100000000, 0x200]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000580)={r6, "e9ca14ac4335bd6180d17bd8d9a40661"}) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:11:50 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa01400}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:50 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x25000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:50 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:11:50 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa01500}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:50 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x40000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:50 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa01600}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:51 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x48000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:51 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa01700}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:51 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x4c000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:51 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x2a, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) ioctl$CHAR_RAW_RRPART(r2, 0x125f, 0x0) sendfile(r0, r0, 0x0, 0x80001d00c0d3) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0xc) socket(0x29, 0x4, 0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x0, 0x4c, 0x59, &(0x7f0000000080)="a3bf9f90ff98fafd8fdd8db8f9de0a25f5a3c3b6cfacd379979e374ebf890ab231b1af3e91dfa99520805480e7a507c83b7aff1fbecc10cbea668aecab7ffdd06c32b81ee02c88484e8d0bfc", &(0x7f0000000100)=""/89, 0x1, 0x0, 0x6d, 0x7e, &(0x7f0000000180)="69bc0caf35ff6753f41b7b576a4ef1e85357305e4ea91717148f9cecfbfeb4ecd17c028508e4f73a412f133a42ac2ae0189ddcbab40b2d0e51e9dd63e82d04b5e6d5d24c3e3b70fb61d540d728b806497cbe24fb1e9a96330e12091c0098fc1d3bcea930b84f3995f382c91e71", &(0x7f0000000200)="0bc98d5bec1cefd1ebdebeb33b9565539562c6ee3c1c0983a69307d21cc066ab66a80a8f1ea80f4c6e41b7e794b013b860050ed7f5b4fa7ff25bb421e4b4a65eee6746ea6d7f18c268bb14dabcf93da07a0ef1a640b8a088b3ba2c195b62708f2ccb922926ce9009fe60477cb86e4406ba114200a78948ec17475811c08f"}, 0x40) 05:11:51 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa01800}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:51 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x60000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:51 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:11:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x10000000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:51 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x68000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:51 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa01900}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:51 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x6c000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:51 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa01a00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:51 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa01b00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:51 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x74000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:52 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb00e00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:52 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x7a000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:52 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2bedaea5a0f93e7b83ca850eb46c5ab6defc74f6102ee965b23efa8bec1f0f98b78e92260ac6aa973d2b0cf9e33f7eb09ca233b099c02ba3a7c352e7aa57c8e94275de46d1cef9426e2fac7acbe3d2da11d8930a6ac89ab07add3771fa991cf6485e7788aeae7f37be03e7157048798cd687", @ANYRES16=0x0, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0x4, 0x4) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x155842, 0x0) r2 = socket(0x32, 0x5, 0xffffffff) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r1, 0x200004) sendfile(r1, r1, 0x0, 0x80001d00c0d0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000100)=[0xffffffdb, 0x400]) 05:11:52 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x12000000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:52 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:11:52 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb00f00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:52 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0xb8030000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:52 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb01000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:52 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0xd8040000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:52 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb01100}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:52 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0xfe030000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:53 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb01200}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:53 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:53 executing program 1: r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0xffffffe0}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r5, &(0x7f0000000100)={0x10}, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000100)={0xffffffe0}, 0x10) write(r6, &(0x7f0000000040)="240000001e005f0214fffffffffffff8070000000000000000000000060008000e000000", 0x24) setsockopt$inet_tcp_buf(r6, 0x6, 0xb, &(0x7f0000000180)="b47d9447a93c003dd818c792f09656c471256321f31b3cc60ec19473e9ca064979329883f0536736d814ade91d007181096546962dcd1ba2e777d8e61acce9dc716d3d31eb0550a24ba3854852d49a4cfcfe953e1c551a2373884681da10b4ea058ee96597724116e3d9d94d07995ee4c091786673989c28cbbccca96c8705c19df4b1bd72394f8b944cfe2c69553d03d4e2853bedce0191778fc1908fe4c67a8219110083c47adcb69850c62c2811253f43df1efde6d2ca48d8", 0xba) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000b, 0x12, r5, 0x0) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f0000000000)) write$P9_RUNLINKAT(r5, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7) write(r4, &(0x7f0000000040)="240000001e005f0214fffffffffffff8070000000000000000000000060008000e000000", 0x24) pidfd_open(0xffffffffffffffff, 0x0) ftruncate(r0, 0x1080200004) sendfile(r1, r1, 0x0, 0x80001d00c0d3) 05:11:53 executing program 5: socket$key(0xf, 0x3, 0x2) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000005c0)=0x100000001) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:11:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x18000000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:53 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb01300}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:53 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:53 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x2], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 867.638411][T18909] tproxy_tg6_check: 63 callbacks suppressed [ 867.638416][T18909] xt_TPROXY: Can be used only with -p tcp or -p udp [ 867.658806][T18915] xt_TPROXY: Can be used only with -p tcp or -p udp 05:11:53 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x3], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:53 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00100}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:53 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00200}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 867.687043][T18922] xt_TPROXY: Can be used only with -p tcp or -p udp 05:11:53 executing program 5: socket$key(0xf, 0x3, 0x2) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000005c0)=0x100000001) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:11:53 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x4], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 867.719899][T18931] xt_TPROXY: Can be used only with -p tcp or -p udp [ 867.760067][T18941] xt_TPROXY: Can be used only with -p tcp or -p udp [ 867.768336][T18944] xt_TPROXY: Can be used only with -p tcp or -p udp 05:11:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:54 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:11:54 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00300}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:54 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x5], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:54 executing program 5: socket$key(0xf, 0x3, 0x2) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000005c0)=0x100000001) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:11:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x28000000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:54 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00400}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:54 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x6], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:54 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00500}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:54 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x7], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:54 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00600}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 868.454712][T18950] xt_TPROXY: Can be used only with -p tcp or -p udp [ 868.467685][T18960] xt_TPROXY: Can be used only with -p tcp or -p udp [ 868.489955][T18965] xt_TPROXY: Can be used only with -p tcp or -p udp 05:11:54 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00700}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 868.581795][T18977] xt_TPROXY: Can be used only with -p tcp or -p udp 05:11:55 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00800}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:55 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) getpid() sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:11:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:55 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x88000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:11:55 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x8], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x2c000000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:55 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00900}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:55 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x9], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:55 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00a00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:55 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0xa], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:55 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0xb], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:55 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00b00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:55 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00c00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:55 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) getpid() sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:11:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:55 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0xc], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:55 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:55 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x40066}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:11:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x2d320000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:55 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) getpid() sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:11:55 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00e00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:55 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0xd], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:55 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00f00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:55 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0xe], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:55 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc01000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:55 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc01100}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:56 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x7) ftruncate(r0, 0x200004) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0xffffffe0}, 0x10) write(r3, &(0x7f0000000040)="240000001e005f0214fffffffffffff8070000000000000000000000060008000e000000", 0x24) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r4, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40800) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:11:56 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0xf], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:56 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc01200}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x40000000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:56 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:11:56 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc01300}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:56 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x10], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:56 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc01400}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:56 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x11], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:56 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc01500}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:56 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x12], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x41000000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:57 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x25], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:57 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc01600}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:57 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc01500}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:57 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$setlease(r2, 0x400, 0x0) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x55, 0x7fffffff, 0x4, @private1={0xfc, 0x1, [], 0x1}, @remote, 0x7800, 0x8, 0x4, 0x8}}) 05:11:57 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:11:57 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) getpid() sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:11:57 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc01700}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:57 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x48], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:57 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc01800}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:57 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x4c], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:57 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x60], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x500e0000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:57 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc01900}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:57 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x68], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:57 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x7) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0xffffffe0}, 0x10) write(r3, &(0x7f0000000040)="240000001e005f0214fffffffffffff8070000000000000000000000060008000e000000", 0x24) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast2, @loopback}, &(0x7f00000001c0)=0xc) sendmsg$inet(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000080)="78ebbbd32a6d7de8fb51bc5c682fe6bf12a8487e65aef6", 0x17}, {&(0x7f00000000c0)="a13e3942368be7a21b9ac80007943020daa42dd55f3ec70eb684dce3fc5aa5509f23e03b597cf5ef9752e7e4bebd85aff0db3b6c8a8c133864a09b0161eb2e66a275de0f3e73dce961b8ba4b123c4c5379846604e40da9c9620721cd356c228d31d66820479f0248da", 0x69}], 0x3, &(0x7f0000000200)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @private=0xa010102}}}], 0x50}, 0x8001) 05:11:57 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc01a00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:57 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:11:57 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) getpid() sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:11:57 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x6c], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:57 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc01b00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:57 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd00e00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:57 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x74], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:57 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x7a], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x5c000000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:58 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd00f00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:58 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x300], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:58 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) dup(r1) r2 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x2000004001fc) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 05:11:58 executing program 5: r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:11:58 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd01100}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x2c000000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:58 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x3b8], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:58 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd01200}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:58 executing program 5: r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:11:58 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x3fe], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:58 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe00000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x91000000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:58 executing program 5: r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:11:58 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe00100}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:58 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x4d8], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:58 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000100)={0x10}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000b, 0x100813, r1, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000000)) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000580)=""/4096) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000000)) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xe) r2 = socket(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, 0x453, 0x200, 0x70bd29, 0x25dfdbfb, "7971be9dc7bd0a0c69cac9337009c4758c782fc18e6b75aaae70a818e0d71b3c72e34a313a80641362", ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:11:58 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x500], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x28000000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:58 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe00200}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 872.711053][T19547] tproxy_tg6_check: 43 callbacks suppressed [ 872.711056][T19547] xt_TPROXY: Can be used only with -p tcp or -p udp [ 872.731475][T19552] xt_TPROXY: Can be used only with -p tcp or -p udp 05:11:58 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe00300}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:58 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x600], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:58 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:11:58 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe00400}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 872.759239][T19561] xt_TPROXY: Can be used only with -p tcp or -p udp [ 872.822997][T19571] xt_TPROXY: Can be used only with -p tcp or -p udp 05:11:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x92000000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:58 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe00500}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:58 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x700], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:58 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0xffffffe0}, 0x10) write(r3, &(0x7f0000000040)="240000001e005f0214fffffffffffff8070000000000000000000000060008000e000000", 0x24) sendfile(r0, r3, 0x0, 0x80001d00c0d3) 05:11:58 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:11:58 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe00600}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:58 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x900], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:58 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe00700}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 873.064580][T19617] xt_TPROXY: Can be used only with -p tcp or -p udp [ 873.073165][T19625] xt_TPROXY: Can be used only with -p tcp or -p udp 05:11:58 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe00800}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:58 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0xa00], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 873.106859][T19642] xt_TPROXY: Can be used only with -p tcp or -p udp [ 873.141840][T19660] xt_TPROXY: Can be used only with -p tcp or -p udp [ 873.182167][T19665] xt_TPROXY: Can be used only with -p tcp or -p udp 05:11:59 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:11:59 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe00900}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x9a000000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:59 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file1/file0\x00', 0x1a000, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:11:59 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0xb00], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:59 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe00a00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x8000000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:59 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0xc00], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:59 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe00b00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:59 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0xd00], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:59 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe00c00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:59 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe00d00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:59 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:11:59 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0xe00], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 873.361086][T19745] xt_TPROXY: Can be used only with -p tcp or -p udp 05:11:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xae000000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:59 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe00e00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:59 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0xf00], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:59 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0xffffffe0}, 0x10) write(r3, &(0x7f0000000040)="240000001e005f0214fffffffffffff8070000000000000000000000060008000e000000", 0x24) getsockname$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:11:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x1, 0x0, 0x0) 05:11:59 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x1100], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:59 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe00f00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:59 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x1200], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:59 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe01000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:59 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x2000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:59 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe01100}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:59 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:11:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xd0010100, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:11:59 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x2500], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:59 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe01200}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0) 05:11:59 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:11:59 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x4000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:59 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe01300}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:59 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x4800], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:11:59 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe01400}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:59 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe01500}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:11:59 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:11:59 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x4c00], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xe8030000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:00 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe01600}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:00 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x6000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xae000000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:00 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0xffffffe0}, 0x10) write(r3, &(0x7f0000000040)="240000001e005f0214fffffffffffff8070000000000000000000000060008000e000000", 0x24) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x100, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "c940423b4c78e3ffce4115acfba4f15b8a50563063ae35e5184917a050a8e0d0"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "6beec89c2462e55758fbe76556ccb96b9b61bf8f74c6d24c104b941e99d1"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7a98e089}, @TIPC_NLA_NODE_ID={0x2c, 0x3, "9f86acfc0c5a882dc1a01c8d0f8bcfe61b42db9b383e79c6133f4ae3b6979b380e15c539d5c246a8"}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x4000840) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:12:00 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe01700}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:00 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x6800], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:00 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe01800}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:00 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:00 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe01900}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:00 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x6c00], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:00 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe01a00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xeffdffff, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:00 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x7400], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:00 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe01b00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:00 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000000000}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$CHAR_RAW_BSZGET(r0, 0x80081270, &(0x7f0000000100)) ftruncate(r0, 0x200004) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:12:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 05:12:00 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:00 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf00e00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:00 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x7a00], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:00 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf00f00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:00 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0xb803], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:00 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf01000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:00 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf01100}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xf4010000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:00 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0xd804], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:00 executing program 3 (fault-call:10 fault-nth:0): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:00 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf01200}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:00 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x157842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:12:00 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:00 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0xfe03], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:00 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:00 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1b43000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 874.897276][T20155] FAULT_INJECTION: forcing a failure. [ 874.897276][T20155] name failslab, interval 1, probability 0, space 0, times 0 [ 874.919191][T20155] CPU: 1 PID: 20155 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 874.930734][T20155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 874.940775][T20155] Call Trace: [ 874.944049][T20155] dump_stack+0x1b0/0x21e [ 874.948363][T20155] ? devkmsg_release+0x11c/0x11c [ 874.953268][T20155] ? show_regs_print_info+0x12/0x12 [ 874.958433][T20155] ? unwind_get_return_address_ptr+0x130/0x130 [ 874.964602][T20155] should_fail+0x6fb/0x860 [ 874.969073][T20155] ? setup_fault_attr+0x2b0/0x2b0 [ 874.974067][T20155] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 874.980103][T20155] ? __alloc_skb+0x88/0x4d0 [ 874.984574][T20155] should_failslab+0x5/0x20 [ 874.989043][T20155] kmem_cache_alloc+0x36/0x250 [ 874.993801][T20155] __alloc_skb+0x88/0x4d0 [ 874.998098][T20155] ? is_bpf_text_address+0x290/0x2b0 [ 875.003374][T20155] tipc_msg_build+0x74a/0x1b20 [ 875.008106][T20155] ? tipc_link_mtu+0x9/0x50 [ 875.012576][T20155] tipc_send_group_bcast+0x9c1/0xd50 [ 875.017828][T20155] ? __tipc_sendmsg+0x2d30/0x2d30 [ 875.022818][T20155] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 875.028156][T20155] ? wait_woken+0x250/0x250 [ 875.032626][T20155] ? path_openat+0x2258/0x4270 [ 875.037355][T20155] ? do_filp_open+0x1f7/0x430 [ 875.041997][T20155] ? do_sys_open+0x343/0x620 [ 875.046550][T20155] ? do_syscall_64+0xcb/0x150 [ 875.051195][T20155] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 875.057239][T20155] ? new_inode+0x25/0x1d0 [ 875.061535][T20155] ? proc_pid_make_inode+0x23/0x1d0 [ 875.066699][T20155] ? proc_tid_base_lookup+0x185/0x1f0 [ 875.072035][T20155] ? path_openat+0x2258/0x4270 [ 875.076764][T20155] ? do_filp_open+0x1f7/0x430 [ 875.081408][T20155] __tipc_sendmsg+0x400/0x2d30 [ 875.086138][T20155] ? avc_has_perm+0xbd/0x260 [ 875.090695][T20155] ? memset+0x1f/0x40 [ 875.094646][T20155] ? unwind_next_frame+0x1c07/0x22b0 [ 875.099895][T20155] ? local_bh_enable+0x20/0x20 [ 875.104621][T20155] ? arch_stack_walk+0x78/0xe0 [ 875.109348][T20155] ? _raw_spin_lock_bh+0xa4/0x180 [ 875.114340][T20155] ? _local_bh_enable+0x30/0x30 [ 875.119159][T20155] ? memset+0x1f/0x40 [ 875.123128][T20155] ? selinux_socket_sendmsg+0x10b/0x320 [ 875.128638][T20155] ? lock_sock_nested+0x25a/0x320 [ 875.133629][T20155] ? import_iovec+0x171/0x340 [ 875.138273][T20155] ? tipc_recvmsg+0x17c0/0x17c0 [ 875.143089][T20155] tipc_sendmsg+0x51/0x70 [ 875.147385][T20155] ____sys_sendmsg+0x56f/0x860 [ 875.152111][T20155] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 875.157274][T20155] __sys_sendmmsg+0x338/0x680 [ 875.161932][T20155] ? __ia32_sys_sendmsg+0x90/0x90 [ 875.166922][T20155] ? __rcu_read_lock+0x50/0x50 [ 875.171653][T20155] ? __kasan_slab_free+0x1e2/0x220 [ 875.176728][T20155] ? __kasan_slab_free+0x168/0x220 [ 875.181808][T20155] ? slab_free_freelist_hook+0xd0/0x150 [ 875.187319][T20155] ? kmem_cache_free+0xac/0x5c0 [ 875.192135][T20155] ? do_sys_open+0x4a3/0x620 [ 875.196691][T20155] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 875.202721][T20155] ? do_sys_open+0x2fc/0x620 [ 875.207276][T20155] ? proc_fail_nth_write+0x166/0x200 [ 875.212528][T20155] ? _local_bh_enable+0x30/0x30 [ 875.217344][T20155] ? proc_fail_nth_read+0x1c0/0x1c0 [ 875.222507][T20155] ? proc_fail_nth_read+0x1c0/0x1c0 [ 875.227671][T20155] ? memset+0x1f/0x40 [ 875.231620][T20155] ? fsnotify+0x13a0/0x1460 [ 875.236088][T20155] ? __kernel_write+0x340/0x340 [ 875.240904][T20155] ? fsnotify+0x13a0/0x1460 [ 875.245374][T20155] ? security_file_permission+0x128/0x300 [ 875.251056][T20155] ? __sb_end_write+0xa4/0xf0 [ 875.255697][T20155] ? vfs_write+0x427/0x4f0 [ 875.260080][T20155] ? ksys_write+0x237/0x2a0 [ 875.264550][T20155] ? __ia32_sys_read+0x80/0x80 [ 875.269280][T20155] ? fput_many+0x42/0x1a0 [ 875.273580][T20155] __x64_sys_sendmmsg+0x9c/0xb0 [ 875.278399][T20155] do_syscall_64+0xcb/0x150 [ 875.282871][T20155] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 875.288727][T20155] RIP: 0033:0x45de59 [ 875.292591][T20155] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 875.312171][T20155] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 875.320546][T20155] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 875.328485][T20155] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 875.336424][T20155] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 875.344364][T20155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 875.352305][T20155] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:01 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x40000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:01 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1b45000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:01 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1b47000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xfffffdef, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:01 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x1000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:01 executing program 3 (fault-call:10 fault-nth:1): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:01 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1b49000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:01 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x2000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:01 executing program 1: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0xffffffe0}, 0x10) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffffffff8070000000000000000000000060008000e000000", 0x24) fgetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.redirect\x00', &(0x7f0000000080)=""/10, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r1, 0x200004) sendfile(r1, r1, 0x0, 0x80001d00c0d3) 05:12:01 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:01 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x3000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:01 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:01 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:01 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 875.763628][T20250] FAULT_INJECTION: forcing a failure. [ 875.763628][T20250] name failslab, interval 1, probability 0, space 0, times 0 [ 875.779516][T20250] CPU: 1 PID: 20250 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 875.791054][T20250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 875.801093][T20250] Call Trace: [ 875.804383][T20250] dump_stack+0x1b0/0x21e [ 875.808710][T20250] ? devkmsg_release+0x11c/0x11c [ 875.813643][T20250] ? show_regs_print_info+0x12/0x12 [ 875.818839][T20250] ? unwind_get_return_address_ptr+0x130/0x130 [ 875.824986][T20250] should_fail+0x6fb/0x860 [ 875.829394][T20250] ? setup_fault_attr+0x2b0/0x2b0 [ 875.834409][T20250] ? setup_fault_attr+0x2b0/0x2b0 [ 875.839430][T20250] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 875.845486][T20250] ? tipc_msg_build+0x74a/0x1b20 [ 875.850411][T20250] should_failslab+0x5/0x20 [ 875.854905][T20250] __kmalloc_track_caller+0x5d/0x2b0 [ 875.860184][T20250] ? kmem_cache_alloc+0x1d5/0x250 [ 875.865216][T20250] ? tipc_msg_build+0x74a/0x1b20 [ 875.870146][T20250] __alloc_skb+0xd1/0x4d0 [ 875.874466][T20250] ? is_bpf_text_address+0x290/0x2b0 [ 875.879735][T20250] tipc_msg_build+0x74a/0x1b20 [ 875.884470][T20250] ? tipc_link_mtu+0x9/0x50 [ 875.888942][T20250] tipc_send_group_bcast+0x9c1/0xd50 [ 875.894201][T20250] ? __tipc_sendmsg+0x2d30/0x2d30 [ 875.899193][T20250] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 875.904533][T20250] ? wait_woken+0x250/0x250 [ 875.909058][T20250] ? path_openat+0x2258/0x4270 [ 875.913790][T20250] ? do_filp_open+0x1f7/0x430 [ 875.918434][T20250] ? do_sys_open+0x343/0x620 [ 875.922991][T20250] ? do_syscall_64+0xcb/0x150 [ 875.927645][T20250] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 875.933685][T20250] ? new_inode+0x25/0x1d0 [ 875.937981][T20250] ? proc_pid_make_inode+0x23/0x1d0 [ 875.943193][T20250] ? proc_tid_base_lookup+0x185/0x1f0 [ 875.948542][T20250] ? path_openat+0x2258/0x4270 [ 875.953273][T20250] ? do_filp_open+0x1f7/0x430 [ 875.957916][T20250] __tipc_sendmsg+0x400/0x2d30 [ 875.962648][T20250] ? avc_has_perm+0xbd/0x260 [ 875.967204][T20250] ? memset+0x1f/0x40 [ 875.971189][T20250] ? unwind_next_frame+0x1c07/0x22b0 [ 875.976451][T20250] ? local_bh_enable+0x20/0x20 [ 875.981190][T20250] ? arch_stack_walk+0x78/0xe0 [ 875.985950][T20250] ? _raw_spin_lock_bh+0xa4/0x180 [ 875.990940][T20250] ? _local_bh_enable+0x30/0x30 [ 875.995759][T20250] ? memset+0x1f/0x40 [ 875.999708][T20250] ? selinux_socket_sendmsg+0x10b/0x320 [ 876.005337][T20250] ? lock_sock_nested+0x25a/0x320 [ 876.010331][T20250] ? import_iovec+0x171/0x340 [ 876.014974][T20250] ? tipc_recvmsg+0x17c0/0x17c0 [ 876.019788][T20250] tipc_sendmsg+0x51/0x70 [ 876.024086][T20250] ____sys_sendmsg+0x56f/0x860 [ 876.028826][T20250] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 876.034046][T20250] __sys_sendmmsg+0x338/0x680 [ 876.038695][T20250] ? __ia32_sys_sendmsg+0x90/0x90 [ 876.043688][T20250] ? __rcu_read_lock+0x50/0x50 [ 876.048427][T20250] ? __kasan_slab_free+0x1e2/0x220 [ 876.053525][T20250] ? __kasan_slab_free+0x168/0x220 [ 876.058624][T20250] ? slab_free_freelist_hook+0xd0/0x150 [ 876.064134][T20250] ? kmem_cache_free+0xac/0x5c0 [ 876.068960][T20250] ? do_sys_open+0x4a3/0x620 [ 876.073524][T20250] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 876.079556][T20250] ? do_sys_open+0x2fc/0x620 [ 876.084117][T20250] ? proc_fail_nth_write+0x166/0x200 [ 876.089375][T20250] ? _local_bh_enable+0x30/0x30 [ 876.094191][T20250] ? proc_fail_nth_read+0x1c0/0x1c0 [ 876.099370][T20250] ? proc_fail_nth_read+0x1c0/0x1c0 [ 876.104534][T20250] ? memset+0x1f/0x40 [ 876.108493][T20250] ? fsnotify+0x13a0/0x1460 [ 876.112969][T20250] ? __kernel_write+0x340/0x340 [ 876.117785][T20250] ? fsnotify+0x13a0/0x1460 [ 876.122257][T20250] ? security_file_permission+0x128/0x300 [ 876.127943][T20250] ? __sb_end_write+0xa4/0xf0 [ 876.132592][T20250] ? vfs_write+0x427/0x4f0 [ 876.136979][T20250] ? ksys_write+0x237/0x2a0 [ 876.141449][T20250] ? __ia32_sys_read+0x80/0x80 [ 876.146190][T20250] ? fput_many+0x42/0x1a0 [ 876.150488][T20250] __x64_sys_sendmmsg+0x9c/0xb0 [ 876.155304][T20250] do_syscall_64+0xcb/0x150 [ 876.159790][T20250] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 876.165674][T20250] RIP: 0033:0x45de59 [ 876.169549][T20250] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 876.189131][T20250] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 876.197506][T20250] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 876.205447][T20250] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 05:12:02 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x4000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 876.213402][T20250] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 876.221343][T20250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.229280][T20250] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:02 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x5000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xffffff7f, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:02 executing program 3 (fault-call:10 fault-nth:2): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:02 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:02 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x6000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:02 executing program 5: socket$key(0xf, 0x3, 0x2) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:02 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'syz_tun\x00', {0x20}, 0x3}) 05:12:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0xe24}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:02 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:02 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:02 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:02 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 876.554595][T20330] FAULT_INJECTION: forcing a failure. [ 876.554595][T20330] name failslab, interval 1, probability 0, space 0, times 0 [ 876.567749][T20330] CPU: 1 PID: 20330 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 876.579282][T20330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 876.589323][T20330] Call Trace: [ 876.592609][T20330] dump_stack+0x1b0/0x21e [ 876.596930][T20330] ? devkmsg_release+0x11c/0x11c 05:12:02 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:02 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 876.601919][T20330] ? show_regs_print_info+0x12/0x12 [ 876.607121][T20330] ? unwind_get_return_address_ptr+0x130/0x130 [ 876.613255][T20330] should_fail+0x6fb/0x860 [ 876.617652][T20330] ? setup_fault_attr+0x2b0/0x2b0 [ 876.622666][T20330] ? __alloc_skb+0x88/0x4d0 [ 876.627158][T20330] should_failslab+0x5/0x20 [ 876.631650][T20330] kmem_cache_alloc+0x36/0x250 [ 876.636408][T20330] __alloc_skb+0x88/0x4d0 [ 876.640724][T20330] ? __check_object_size+0x2e5/0x3b0 [ 876.645979][T20330] tipc_msg_build+0xcf5/0x1b20 [ 876.650713][T20330] ? tipc_link_mtu+0x9/0x50 [ 876.655188][T20330] tipc_send_group_bcast+0x9c1/0xd50 [ 876.660445][T20330] ? __tipc_sendmsg+0x2d30/0x2d30 [ 876.665437][T20330] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 876.670776][T20330] ? wait_woken+0x250/0x250 [ 876.675246][T20330] ? path_openat+0x2258/0x4270 [ 876.679975][T20330] ? do_filp_open+0x1f7/0x430 [ 876.684617][T20330] ? do_sys_open+0x343/0x620 [ 876.689170][T20330] ? do_syscall_64+0xcb/0x150 [ 876.693812][T20330] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 876.699929][T20330] ? new_inode+0x25/0x1d0 [ 876.704231][T20330] ? proc_pid_make_inode+0x23/0x1d0 [ 876.709396][T20330] ? proc_tid_base_lookup+0x185/0x1f0 [ 876.714736][T20330] ? path_openat+0x2258/0x4270 [ 876.719465][T20330] ? do_filp_open+0x1f7/0x430 [ 876.724109][T20330] __tipc_sendmsg+0x400/0x2d30 [ 876.728840][T20330] ? avc_has_perm+0xbd/0x260 [ 876.733445][T20330] ? memset+0x1f/0x40 [ 876.737395][T20330] ? unwind_next_frame+0x1c07/0x22b0 [ 876.742685][T20330] ? local_bh_enable+0x20/0x20 [ 876.747414][T20330] ? arch_stack_walk+0x78/0xe0 [ 876.752142][T20330] ? _raw_spin_lock_bh+0xa4/0x180 [ 876.757132][T20330] ? _local_bh_enable+0x30/0x30 [ 876.761981][T20330] ? memset+0x1f/0x40 [ 876.765962][T20330] ? selinux_socket_sendmsg+0x10b/0x320 [ 876.771532][T20330] ? lock_sock_nested+0x25a/0x320 [ 876.776554][T20330] ? import_iovec+0x171/0x340 [ 876.781199][T20330] ? tipc_recvmsg+0x17c0/0x17c0 [ 876.786023][T20330] tipc_sendmsg+0x51/0x70 [ 876.790322][T20330] ____sys_sendmsg+0x56f/0x860 [ 876.795052][T20330] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 876.800229][T20330] __sys_sendmmsg+0x338/0x680 [ 876.804874][T20330] ? __ia32_sys_sendmsg+0x90/0x90 [ 876.809962][T20330] ? __rcu_read_lock+0x50/0x50 [ 876.814696][T20330] ? __kasan_slab_free+0x1e2/0x220 [ 876.819775][T20330] ? __kasan_slab_free+0x168/0x220 [ 876.824855][T20330] ? slab_free_freelist_hook+0xd0/0x150 [ 876.830370][T20330] ? kmem_cache_free+0xac/0x5c0 [ 876.835207][T20330] ? do_sys_open+0x4a3/0x620 [ 876.839771][T20330] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 876.845842][T20330] ? do_sys_open+0x2fc/0x620 [ 876.850399][T20330] ? proc_fail_nth_write+0x166/0x200 [ 876.855689][T20330] ? _local_bh_enable+0x30/0x30 [ 876.860505][T20330] ? proc_fail_nth_read+0x1c0/0x1c0 [ 876.865667][T20330] ? proc_fail_nth_read+0x1c0/0x1c0 [ 876.870832][T20330] ? memset+0x1f/0x40 [ 876.874783][T20330] ? fsnotify+0x13a0/0x1460 [ 876.879295][T20330] ? __kernel_write+0x340/0x340 [ 876.884108][T20330] ? fsnotify+0x13a0/0x1460 [ 876.888587][T20330] ? security_file_permission+0x128/0x300 [ 876.894289][T20330] ? __sb_end_write+0xa4/0xf0 [ 876.898930][T20330] ? vfs_write+0x427/0x4f0 [ 876.903312][T20330] ? ksys_write+0x237/0x2a0 [ 876.907782][T20330] ? __ia32_sys_read+0x80/0x80 [ 876.912532][T20330] ? fput_many+0x42/0x1a0 [ 876.916832][T20330] __x64_sys_sendmmsg+0x9c/0xb0 [ 876.921788][T20330] do_syscall_64+0xcb/0x150 [ 876.926325][T20330] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 876.932182][T20330] RIP: 0033:0x45de59 [ 876.936042][T20330] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 876.955730][T20330] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 876.964104][T20330] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 876.972040][T20330] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 876.979975][T20330] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 876.987924][T20330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 876.995861][T20330] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:03 executing program 3 (fault-call:10 fault-nth:3): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:03 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:03 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x7000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:03 executing program 5: socket$key(0xf, 0x3, 0x2) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:03 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000100)={0x10}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000b, 0x12, r3, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10b, 0x3}) sendfile(r0, r0, 0x0, 0x80001d00c0d3) [ 877.373254][T20361] FAULT_INJECTION: forcing a failure. [ 877.373254][T20361] name failslab, interval 1, probability 0, space 0, times 0 [ 877.386161][T20361] CPU: 1 PID: 20361 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 877.397682][T20361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 877.407706][T20361] Call Trace: [ 877.410982][T20361] dump_stack+0x1b0/0x21e [ 877.415428][T20361] ? devkmsg_release+0x11c/0x11c [ 877.420346][T20361] ? show_regs_print_info+0x12/0x12 [ 877.425530][T20361] ? _raw_spin_lock+0xa1/0x170 [ 877.430267][T20361] should_fail+0x6fb/0x860 [ 877.434657][T20361] ? setup_fault_attr+0x2b0/0x2b0 [ 877.439662][T20361] ? setup_fault_attr+0x2b0/0x2b0 [ 877.444669][T20361] ? tipc_msg_build+0xcf5/0x1b20 [ 877.449586][T20361] should_failslab+0x5/0x20 [ 877.454083][T20361] __kmalloc_track_caller+0x5d/0x2b0 [ 877.459342][T20361] ? kmem_cache_alloc+0x1d5/0x250 [ 877.464337][T20361] ? tipc_msg_build+0xcf5/0x1b20 [ 877.469240][T20361] __alloc_skb+0xd1/0x4d0 [ 877.473534][T20361] tipc_msg_build+0xcf5/0x1b20 [ 877.478266][T20361] ? tipc_link_mtu+0x9/0x50 [ 877.482846][T20361] tipc_send_group_bcast+0x9c1/0xd50 [ 877.488098][T20361] ? __tipc_sendmsg+0x2d30/0x2d30 [ 877.493089][T20361] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 877.498428][T20361] ? wait_woken+0x250/0x250 [ 877.502897][T20361] ? path_openat+0x2258/0x4270 [ 877.507625][T20361] ? do_filp_open+0x1f7/0x430 [ 877.512270][T20361] ? do_sys_open+0x343/0x620 [ 877.516823][T20361] ? do_syscall_64+0xcb/0x150 [ 877.521499][T20361] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 877.527527][T20361] ? new_inode+0x25/0x1d0 [ 877.531826][T20361] ? proc_pid_make_inode+0x23/0x1d0 [ 877.536992][T20361] ? proc_tid_base_lookup+0x185/0x1f0 [ 877.542330][T20361] ? path_openat+0x2258/0x4270 [ 877.547063][T20361] ? do_filp_open+0x1f7/0x430 [ 877.551728][T20361] __tipc_sendmsg+0x400/0x2d30 [ 877.556456][T20361] ? avc_has_perm+0xbd/0x260 [ 877.561114][T20361] ? memset+0x1f/0x40 [ 877.565060][T20361] ? unwind_next_frame+0x1c07/0x22b0 [ 877.570311][T20361] ? local_bh_enable+0x20/0x20 [ 877.575041][T20361] ? arch_stack_walk+0x78/0xe0 [ 877.579769][T20361] ? _raw_spin_lock_bh+0xa4/0x180 [ 877.584759][T20361] ? _local_bh_enable+0x30/0x30 [ 877.589574][T20361] ? memset+0x1f/0x40 [ 877.593523][T20361] ? selinux_socket_sendmsg+0x10b/0x320 [ 877.599044][T20361] ? lock_sock_nested+0x25a/0x320 [ 877.604033][T20361] ? import_iovec+0x171/0x340 [ 877.608679][T20361] ? tipc_recvmsg+0x17c0/0x17c0 [ 877.613493][T20361] tipc_sendmsg+0x51/0x70 [ 877.617790][T20361] ____sys_sendmsg+0x56f/0x860 [ 877.622522][T20361] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 877.627698][T20361] __sys_sendmmsg+0x338/0x680 [ 877.632349][T20361] ? __ia32_sys_sendmsg+0x90/0x90 [ 877.637345][T20361] ? __rcu_read_lock+0x50/0x50 [ 877.642120][T20361] ? __kasan_slab_free+0x1e2/0x220 [ 877.647238][T20361] ? __kasan_slab_free+0x168/0x220 [ 877.652322][T20361] ? slab_free_freelist_hook+0xd0/0x150 [ 877.657835][T20361] ? kmem_cache_free+0xac/0x5c0 [ 877.662656][T20361] ? do_sys_open+0x4a3/0x620 [ 877.667212][T20361] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 877.673247][T20361] ? do_sys_open+0x2fc/0x620 [ 877.677814][T20361] ? proc_fail_nth_write+0x166/0x200 [ 877.683076][T20361] ? _local_bh_enable+0x30/0x30 [ 877.687891][T20361] ? proc_fail_nth_read+0x1c0/0x1c0 [ 877.693145][T20361] ? proc_fail_nth_read+0x1c0/0x1c0 [ 877.698311][T20361] ? memset+0x1f/0x40 [ 877.702261][T20361] ? fsnotify+0x13a0/0x1460 [ 877.706768][T20361] ? __kernel_write+0x340/0x340 [ 877.711584][T20361] ? fsnotify+0x13a0/0x1460 [ 877.716058][T20361] ? security_file_permission+0x128/0x300 [ 877.721740][T20361] ? __sb_end_write+0xa4/0xf0 [ 877.726384][T20361] ? vfs_write+0x427/0x4f0 [ 877.730767][T20361] ? ksys_write+0x237/0x2a0 [ 877.735235][T20361] ? __ia32_sys_read+0x80/0x80 [ 877.739965][T20361] ? fput_many+0x42/0x1a0 [ 877.744263][T20361] __x64_sys_sendmmsg+0x9c/0xb0 [ 877.749088][T20361] do_syscall_64+0xcb/0x150 [ 877.753576][T20361] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 877.759435][T20361] RIP: 0033:0x45de59 [ 877.763296][T20361] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 877.782986][T20361] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 877.791503][T20361] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 877.799452][T20361] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 877.807393][T20361] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 877.815378][T20361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 05:12:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x1c74}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:03 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:03 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x8000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:03 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 877.823339][T20361] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c [ 877.860431][T20373] tproxy_tg6_check: 51 callbacks suppressed [ 877.860434][T20373] xt_TPROXY: Can be used only with -p tcp or -p udp 05:12:03 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:03 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x9000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:03 executing program 5: socket$key(0xf, 0x3, 0x2) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 877.875979][T20380] xt_TPROXY: Can be used only with -p tcp or -p udp [ 877.901674][T20383] xt_TPROXY: Can be used only with -p tcp or -p udp 05:12:03 executing program 3 (fault-call:10 fault-nth:4): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:03 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:03 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0xa000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:03 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:03 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc09b4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0xffffffe0}, 0x10) write(r3, &(0x7f0000000040)="240000001e005f0214fffffffffffff8070000000000000000000000060008000e000000", 0x24) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00e491afa22277728564000000020200ffffffffffff00000b00000008000540ffffffe0"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000050) [ 878.182343][T20395] FAULT_INJECTION: forcing a failure. [ 878.182343][T20395] name failslab, interval 1, probability 0, space 0, times 0 [ 878.200187][T20402] xt_TPROXY: Can be used only with -p tcp or -p udp [ 878.203095][T20395] CPU: 0 PID: 20395 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 878.218287][T20395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 878.228322][T20395] Call Trace: [ 878.231602][T20395] dump_stack+0x1b0/0x21e [ 878.235936][T20395] ? devkmsg_release+0x11c/0x11c [ 878.237757][T20405] xt_TPROXY: Can be used only with -p tcp or -p udp [ 878.240856][T20395] ? __schedule+0x8ae/0xe30 [ 878.240865][T20395] ? show_regs_print_info+0x12/0x12 [ 878.240893][T20395] ? __pv_queued_spin_lock_slowpath+0x842/0xc40 [ 878.240903][T20395] should_fail+0x6fb/0x860 [ 878.240914][T20395] ? setup_fault_attr+0x2b0/0x2b0 [ 878.272709][T20395] ? __alloc_skb+0x88/0x4d0 [ 878.277187][T20395] should_failslab+0x5/0x20 [ 878.281671][T20395] kmem_cache_alloc+0x36/0x250 [ 878.286403][T20395] __alloc_skb+0x88/0x4d0 [ 878.290720][T20395] tipc_msg_build+0x74a/0x1b20 [ 878.295454][T20395] ? remove_wait_queue+0x32/0x120 [ 878.300446][T20395] tipc_send_group_bcast+0x9c1/0xd50 [ 878.305697][T20395] ? __tipc_sendmsg+0x2d30/0x2d30 [ 878.310690][T20395] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 878.316028][T20395] ? wait_woken+0x250/0x250 [ 878.320494][T20395] ? path_openat+0x2258/0x4270 [ 878.325220][T20395] ? do_filp_open+0x1f7/0x430 [ 878.329883][T20395] ? do_sys_open+0x343/0x620 [ 878.334438][T20395] ? do_syscall_64+0xcb/0x150 [ 878.339078][T20395] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 878.345106][T20395] ? new_inode+0x25/0x1d0 [ 878.349400][T20395] ? proc_pid_make_inode+0x23/0x1d0 [ 878.354563][T20395] ? proc_tid_base_lookup+0x185/0x1f0 [ 878.359899][T20395] ? path_openat+0x2258/0x4270 [ 878.364628][T20395] ? do_filp_open+0x1f7/0x430 [ 878.369270][T20395] __tipc_sendmsg+0x400/0x2d30 [ 878.374003][T20395] ? avc_has_perm+0xbd/0x260 [ 878.378563][T20395] ? memset+0x1f/0x40 [ 878.382510][T20395] ? unwind_next_frame+0x1c07/0x22b0 [ 878.387757][T20395] ? local_bh_enable+0x20/0x20 [ 878.392487][T20395] ? arch_stack_walk+0x78/0xe0 [ 878.397247][T20395] ? _raw_spin_lock_bh+0xa4/0x180 [ 878.402236][T20395] ? _local_bh_enable+0x30/0x30 [ 878.407055][T20395] ? memset+0x1f/0x40 [ 878.411006][T20395] ? selinux_socket_sendmsg+0x10b/0x320 [ 878.416607][T20395] ? lock_sock_nested+0x25a/0x320 [ 878.421607][T20395] ? import_iovec+0x171/0x340 [ 878.426249][T20395] ? tipc_recvmsg+0x17c0/0x17c0 [ 878.431083][T20395] tipc_sendmsg+0x51/0x70 [ 878.435381][T20395] ____sys_sendmsg+0x56f/0x860 [ 878.440114][T20395] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 878.445392][T20395] __sys_sendmmsg+0x338/0x680 [ 878.450053][T20395] ? __ia32_sys_sendmsg+0x90/0x90 [ 878.455043][T20395] ? __rcu_read_lock+0x50/0x50 [ 878.459770][T20395] ? __kasan_slab_free+0x1e2/0x220 [ 878.464842][T20395] ? __kasan_slab_free+0x168/0x220 [ 878.469923][T20395] ? slab_free_freelist_hook+0xd0/0x150 [ 878.475433][T20395] ? kmem_cache_free+0xac/0x5c0 [ 878.480247][T20395] ? do_sys_open+0x4a3/0x620 [ 878.484801][T20395] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 878.490832][T20395] ? do_sys_open+0x2fc/0x620 [ 878.495391][T20395] ? proc_fail_nth_write+0x166/0x200 [ 878.500640][T20395] ? _local_bh_enable+0x30/0x30 [ 878.505455][T20395] ? proc_fail_nth_read+0x1c0/0x1c0 [ 878.510620][T20395] ? proc_fail_nth_read+0x1c0/0x1c0 [ 878.515788][T20395] ? memset+0x1f/0x40 [ 878.519736][T20395] ? fsnotify+0x13a0/0x1460 [ 878.524205][T20395] ? __kernel_write+0x340/0x340 [ 878.529021][T20395] ? fsnotify+0x13a0/0x1460 [ 878.533494][T20395] ? security_file_permission+0x128/0x300 [ 878.539178][T20395] ? __sb_end_write+0xa4/0xf0 [ 878.543823][T20395] ? vfs_write+0x427/0x4f0 [ 878.548218][T20395] ? ksys_write+0x237/0x2a0 [ 878.552686][T20395] ? __ia32_sys_read+0x80/0x80 [ 878.557415][T20395] ? fput_many+0x42/0x1a0 [ 878.561721][T20395] __x64_sys_sendmmsg+0x9c/0xb0 [ 878.566536][T20395] do_syscall_64+0xcb/0x150 [ 878.571014][T20395] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 878.576877][T20395] RIP: 0033:0x45de59 [ 878.580741][T20395] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 878.600324][T20395] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 878.608697][T20395] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 878.616633][T20395] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 878.624581][T20395] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 878.632633][T20395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 878.640570][T20395] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:04 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x11000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:04 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0xb000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x2ac4}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:04 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:04 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x12000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:04 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x18000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:04 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0xc000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 878.734765][T20416] xt_TPROXY: Can be used only with -p tcp or -p udp [ 878.753918][T20428] xt_TPROXY: Can be used only with -p tcp or -p udp 05:12:04 executing program 3 (fault-call:10 fault-nth:5): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:04 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0xd000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000030101080000000000000300fe880000000000000000000000000001140004000000000000fbff00000000000000000100"/68], 0x44}}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = dup(r2) signalfd4(r0, &(0x7f0000000000)={[0x8]}, 0x8, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r1, 0x200004) sendfile(r1, r1, 0x0, 0x80001d00c0d3) 05:12:04 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:04 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 878.994177][T20440] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 878.996304][T20443] xt_TPROXY: Can be used only with -p tcp or -p udp [ 879.013197][T20441] FAULT_INJECTION: forcing a failure. [ 879.013197][T20441] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 879.027618][T20441] CPU: 1 PID: 20441 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 879.039141][T20441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 879.049180][T20441] Call Trace: [ 879.052443][T20441] dump_stack+0x1b0/0x21e [ 879.056740][T20441] ? devkmsg_release+0x11c/0x11c [ 879.061647][T20441] ? show_regs_print_info+0x12/0x12 [ 879.066816][T20441] ? _raw_spin_unlock+0x5/0x20 [ 879.071574][T20441] ? handle_mm_fault+0x138a/0x4140 [ 879.076654][T20441] should_fail+0x6fb/0x860 [ 879.081038][T20441] ? setup_fault_attr+0x2b0/0x2b0 [ 879.086038][T20441] ? stack_trace_save+0x1e0/0x1e0 [ 879.091031][T20441] __alloc_pages_nodemask+0x1ee/0x7c0 [ 879.096377][T20441] ? ____sys_sendmsg+0x56f/0x860 [ 879.101289][T20441] ? __sys_sendmmsg+0x338/0x680 [ 879.106119][T20441] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 879.111633][T20441] ? unwind_next_frame+0x1c07/0x22b0 [ 879.116883][T20441] ? do_user_addr_fault+0x55c/0x9f0 [ 879.122048][T20441] alloc_slab_page+0x3a/0x390 [ 879.126700][T20441] new_slab+0x97/0x450 [ 879.130737][T20441] ? page_fault+0x2f/0x40 [ 879.135031][T20441] ? should_fail+0x182/0x860 [ 879.139586][T20441] ___slab_alloc+0x2e0/0x450 [ 879.144142][T20441] ? __alloc_skb+0x88/0x4d0 [ 879.148626][T20441] ? __alloc_skb+0x88/0x4d0 [ 879.153098][T20441] kmem_cache_alloc+0x230/0x250 [ 879.157915][T20441] __alloc_skb+0x88/0x4d0 [ 879.162213][T20441] ? __check_object_size+0x2e5/0x3b0 [ 879.167463][T20441] tipc_msg_build+0xcf5/0x1b20 [ 879.172211][T20441] tipc_send_group_bcast+0x9c1/0xd50 [ 879.177466][T20441] ? __tipc_sendmsg+0x2d30/0x2d30 [ 879.182458][T20441] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 879.187799][T20441] ? wait_woken+0x250/0x250 [ 879.192272][T20441] ? path_openat+0x2258/0x4270 [ 879.197000][T20441] ? do_filp_open+0x1f7/0x430 [ 879.201643][T20441] ? do_sys_open+0x343/0x620 [ 879.206209][T20441] ? do_syscall_64+0xcb/0x150 [ 879.210851][T20441] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 879.216883][T20441] ? new_inode+0x25/0x1d0 [ 879.221196][T20441] ? proc_pid_make_inode+0x23/0x1d0 [ 879.226359][T20441] ? proc_tid_base_lookup+0x185/0x1f0 [ 879.231696][T20441] ? path_openat+0x2258/0x4270 [ 879.236435][T20441] ? do_filp_open+0x1f7/0x430 [ 879.241095][T20441] __tipc_sendmsg+0x400/0x2d30 [ 879.245827][T20441] ? avc_has_perm+0xbd/0x260 [ 879.250384][T20441] ? memset+0x1f/0x40 [ 879.254335][T20441] ? unwind_next_frame+0x1c07/0x22b0 [ 879.259584][T20441] ? local_bh_enable+0x20/0x20 [ 879.264315][T20441] ? arch_stack_walk+0x78/0xe0 [ 879.269054][T20441] ? _raw_spin_lock_bh+0xa4/0x180 [ 879.274050][T20441] ? _local_bh_enable+0x30/0x30 [ 879.278863][T20441] ? memset+0x1f/0x40 [ 879.282809][T20441] ? selinux_socket_sendmsg+0x10b/0x320 [ 879.288318][T20441] ? lock_sock_nested+0x25a/0x320 [ 879.293324][T20441] ? import_iovec+0x171/0x340 [ 879.297968][T20441] ? tipc_recvmsg+0x17c0/0x17c0 [ 879.302779][T20441] tipc_sendmsg+0x51/0x70 [ 879.307075][T20441] ____sys_sendmsg+0x56f/0x860 [ 879.311808][T20441] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 879.316974][T20441] __sys_sendmmsg+0x338/0x680 [ 879.321615][T20441] ? __ia32_sys_sendmsg+0x90/0x90 [ 879.326606][T20441] ? __rcu_read_lock+0x50/0x50 [ 879.331335][T20441] ? __kasan_slab_free+0x1e2/0x220 [ 879.336410][T20441] ? __kasan_slab_free+0x168/0x220 [ 879.341483][T20441] ? slab_free_freelist_hook+0xd0/0x150 [ 879.346992][T20441] ? kmem_cache_free+0xac/0x5c0 [ 879.351839][T20441] ? do_sys_open+0x4a3/0x620 [ 879.356392][T20441] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 879.362422][T20441] ? do_sys_open+0x2fc/0x620 [ 879.366980][T20441] ? proc_fail_nth_write+0x166/0x200 [ 879.372230][T20441] ? _local_bh_enable+0x30/0x30 [ 879.377052][T20441] ? proc_fail_nth_read+0x1c0/0x1c0 [ 879.382221][T20441] ? proc_fail_nth_read+0x1c0/0x1c0 [ 879.387384][T20441] ? memset+0x1f/0x40 [ 879.391330][T20441] ? fsnotify+0x13a0/0x1460 [ 879.395797][T20441] ? __kernel_write+0x340/0x340 [ 879.400609][T20441] ? fsnotify+0x13a0/0x1460 [ 879.405076][T20441] ? security_file_permission+0x128/0x300 [ 879.410760][T20441] ? __sb_end_write+0xa4/0xf0 [ 879.415415][T20441] ? vfs_write+0x427/0x4f0 [ 879.419797][T20441] ? ksys_write+0x237/0x2a0 [ 879.424266][T20441] ? __ia32_sys_read+0x80/0x80 [ 879.429004][T20441] ? fput_many+0x42/0x1a0 [ 879.433304][T20441] __x64_sys_sendmmsg+0x9c/0xb0 [ 879.438132][T20441] do_syscall_64+0xcb/0x150 [ 879.442598][T20441] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 879.448454][T20441] RIP: 0033:0x45de59 [ 879.452321][T20441] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 879.471896][T20441] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 879.480277][T20441] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 879.488227][T20441] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 879.496167][T20441] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 879.504106][T20441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 879.512047][T20441] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:05 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x3914}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:05 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:05 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0xe000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:05 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:05 executing program 3 (fault-call:10 fault-nth:6): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:05 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0xf000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 879.588733][T20440] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 879.606684][T20455] xt_TPROXY: Can be used only with -p tcp or -p udp [ 879.620944][T20463] FAULT_INJECTION: forcing a failure. [ 879.620944][T20463] name failslab, interval 1, probability 0, space 0, times 0 05:12:05 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x25000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:05 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x27000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:05 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 879.622327][T20466] xt_TPROXY: Can be used only with -p tcp or -p udp [ 879.634280][T20463] CPU: 0 PID: 20463 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 879.651736][T20463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 879.661888][T20463] Call Trace: [ 879.665186][T20463] dump_stack+0x1b0/0x21e [ 879.669500][T20463] ? devkmsg_release+0x11c/0x11c [ 879.674512][T20463] ? do_user_addr_fault+0x55c/0x9f0 [ 879.679706][T20463] ? show_regs_print_info+0x12/0x12 [ 879.684922][T20463] should_fail+0x6fb/0x860 [ 879.689305][T20463] ? setup_fault_attr+0x2b0/0x2b0 [ 879.694301][T20463] ? copy_user_enhanced_fast_string+0xe/0x30 [ 879.700257][T20463] ? __alloc_skb+0x88/0x4d0 [ 879.704732][T20463] should_failslab+0x5/0x20 [ 879.709253][T20463] kmem_cache_alloc+0x36/0x250 [ 879.713987][T20463] __alloc_skb+0x88/0x4d0 [ 879.718287][T20463] ? __check_object_size+0x2e5/0x3b0 [ 879.723536][T20463] tipc_msg_build+0xcf5/0x1b20 [ 879.728268][T20463] tipc_send_group_bcast+0x9c1/0xd50 [ 879.733524][T20463] ? __tipc_sendmsg+0x2d30/0x2d30 [ 879.738642][T20463] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 879.744013][T20463] ? wait_woken+0x250/0x250 [ 879.748482][T20463] ? path_openat+0x2258/0x4270 [ 879.753259][T20463] ? do_filp_open+0x1f7/0x430 [ 879.758003][T20463] ? do_sys_open+0x343/0x620 [ 879.762557][T20463] ? do_syscall_64+0xcb/0x150 [ 879.767213][T20463] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 879.773244][T20463] ? new_inode+0x25/0x1d0 [ 879.777539][T20463] ? proc_pid_make_inode+0x23/0x1d0 [ 879.782701][T20463] ? proc_tid_base_lookup+0x185/0x1f0 [ 879.788063][T20463] ? path_openat+0x2258/0x4270 [ 879.792803][T20463] ? do_filp_open+0x1f7/0x430 [ 879.797444][T20463] __tipc_sendmsg+0x400/0x2d30 [ 879.802183][T20463] ? avc_has_perm+0xbd/0x260 [ 879.806785][T20463] ? memset+0x1f/0x40 [ 879.810736][T20463] ? unwind_next_frame+0x1c07/0x22b0 [ 879.816023][T20463] ? local_bh_enable+0x20/0x20 [ 879.820750][T20463] ? arch_stack_walk+0x78/0xe0 [ 879.825477][T20463] ? _raw_spin_lock_bh+0xa4/0x180 [ 879.830463][T20463] ? _local_bh_enable+0x30/0x30 [ 879.835273][T20463] ? memset+0x1f/0x40 [ 879.839219][T20463] ? selinux_socket_sendmsg+0x10b/0x320 [ 879.844738][T20463] ? lock_sock_nested+0x25a/0x320 [ 879.849727][T20463] ? import_iovec+0x171/0x340 [ 879.854369][T20463] ? tipc_recvmsg+0x17c0/0x17c0 [ 879.859186][T20463] tipc_sendmsg+0x51/0x70 [ 879.863501][T20463] ____sys_sendmsg+0x56f/0x860 [ 879.868236][T20463] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 879.873400][T20463] __sys_sendmmsg+0x338/0x680 [ 879.878043][T20463] ? __ia32_sys_sendmsg+0x90/0x90 [ 879.883033][T20463] ? __rcu_read_lock+0x50/0x50 [ 879.887837][T20463] ? __kasan_slab_free+0x1e2/0x220 [ 879.892919][T20463] ? __kasan_slab_free+0x168/0x220 [ 879.897998][T20463] ? slab_free_freelist_hook+0xd0/0x150 [ 879.903516][T20463] ? kmem_cache_free+0xac/0x5c0 [ 879.908330][T20463] ? do_sys_open+0x4a3/0x620 [ 879.912886][T20463] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 879.918917][T20463] ? do_sys_open+0x2fc/0x620 [ 879.923473][T20463] ? proc_fail_nth_write+0x166/0x200 [ 879.928720][T20463] ? _local_bh_enable+0x30/0x30 [ 879.933591][T20463] ? proc_fail_nth_read+0x1c0/0x1c0 [ 879.938755][T20463] ? proc_fail_nth_read+0x1c0/0x1c0 [ 879.943921][T20463] ? memset+0x1f/0x40 [ 879.947867][T20463] ? fsnotify+0x13a0/0x1460 [ 879.952337][T20463] ? __kernel_write+0x340/0x340 [ 879.957151][T20463] ? fsnotify+0x13a0/0x1460 [ 879.961624][T20463] ? security_file_permission+0x128/0x300 [ 879.967309][T20463] ? __sb_end_write+0xa4/0xf0 [ 879.971961][T20463] ? vfs_write+0x427/0x4f0 [ 879.976345][T20463] ? ksys_write+0x237/0x2a0 [ 879.980813][T20463] ? __ia32_sys_read+0x80/0x80 [ 879.985541][T20463] ? fput_many+0x42/0x1a0 [ 879.989839][T20463] __x64_sys_sendmmsg+0x9c/0xb0 [ 879.994656][T20463] do_syscall_64+0xcb/0x150 [ 879.999127][T20463] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 880.004986][T20463] RIP: 0033:0x45de59 [ 880.008848][T20463] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 880.028430][T20463] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 880.036802][T20463] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 880.044739][T20463] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 880.052674][T20463] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 880.060610][T20463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 880.068544][T20463] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:05 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3c000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:05 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x10000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:05 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) fstatfs(r1, &(0x7f0000000580)=""/4096) r2 = dup(r1) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0xffffffe0}, 0x10) write(r3, &(0x7f0000000040)="240000001e005f0214fffffffffffff8070000000000000000000000060008000e000000", 0x24) ioctl$FIOCLEX(r3, 0x5451) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250100000014000200000000000000000000000000000000012400070073797374656d5f753a6f626a6563745f723a6170745f6c6f636b5f743a7330001400060069703665727370616e30000000000000"], 0x60}}, 0x4004080) sendfile(r0, r0, 0x0, 0x80001d00c0d3) [ 880.288272][T20485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20485 comm=syz-executor.1 05:12:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x4764}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:06 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3f000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:06 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:06 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x11000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:06 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000000)={'syzkaller1\x00', {0x2, 0x0, @multicast2}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:12:06 executing program 3 (fault-call:10 fault-nth:7): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:06 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:06 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x48000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:06 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x12000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:06 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4c000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 880.481406][T20501] FAULT_INJECTION: forcing a failure. [ 880.481406][T20501] name failslab, interval 1, probability 0, space 0, times 0 [ 880.497904][T20501] CPU: 0 PID: 20501 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 880.509440][T20501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 880.519484][T20501] Call Trace: [ 880.522763][T20501] dump_stack+0x1b0/0x21e [ 880.527081][T20501] ? devkmsg_release+0x11c/0x11c [ 880.531991][T20501] ? show_regs_print_info+0x12/0x12 [ 880.537159][T20501] ? do_user_addr_fault+0x55c/0x9f0 [ 880.542339][T20501] should_fail+0x6fb/0x860 [ 880.546743][T20501] ? setup_fault_attr+0x2b0/0x2b0 [ 880.551739][T20501] ? setup_fault_attr+0x2b0/0x2b0 [ 880.556738][T20501] ? tipc_msg_build+0xcf5/0x1b20 [ 880.561667][T20501] should_failslab+0x5/0x20 [ 880.566142][T20501] __kmalloc_track_caller+0x5d/0x2b0 [ 880.571394][T20501] ? kmem_cache_alloc+0x1d5/0x250 [ 880.576390][T20501] ? tipc_msg_build+0xcf5/0x1b20 [ 880.581311][T20501] __alloc_skb+0xd1/0x4d0 [ 880.585610][T20501] tipc_msg_build+0xcf5/0x1b20 [ 880.590343][T20501] tipc_send_group_bcast+0x9c1/0xd50 [ 880.595607][T20501] ? __tipc_sendmsg+0x2d30/0x2d30 [ 880.600599][T20501] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 880.605939][T20501] ? wait_woken+0x250/0x250 [ 880.610426][T20501] ? path_openat+0x2258/0x4270 [ 880.615156][T20501] ? do_filp_open+0x1f7/0x430 [ 880.619802][T20501] ? do_sys_open+0x343/0x620 [ 880.624360][T20501] ? do_syscall_64+0xcb/0x150 [ 880.629014][T20501] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 880.635048][T20501] ? new_inode+0x25/0x1d0 [ 880.639343][T20501] ? proc_pid_make_inode+0x23/0x1d0 [ 880.644509][T20501] ? proc_tid_base_lookup+0x185/0x1f0 [ 880.649852][T20501] ? path_openat+0x2258/0x4270 [ 880.654579][T20501] ? do_filp_open+0x1f7/0x430 [ 880.659239][T20501] __tipc_sendmsg+0x400/0x2d30 [ 880.663981][T20501] ? avc_has_perm+0xbd/0x260 [ 880.668552][T20501] ? memset+0x1f/0x40 [ 880.672513][T20501] ? unwind_next_frame+0x1c07/0x22b0 [ 880.677762][T20501] ? local_bh_enable+0x20/0x20 [ 880.682499][T20501] ? arch_stack_walk+0x78/0xe0 [ 880.687228][T20501] ? _raw_spin_lock_bh+0xa4/0x180 [ 880.692215][T20501] ? _local_bh_enable+0x30/0x30 [ 880.697029][T20501] ? memset+0x1f/0x40 [ 880.700995][T20501] ? selinux_socket_sendmsg+0x10b/0x320 [ 880.706517][T20501] ? lock_sock_nested+0x25a/0x320 [ 880.711509][T20501] ? import_iovec+0x171/0x340 [ 880.716164][T20501] ? tipc_recvmsg+0x17c0/0x17c0 [ 880.720995][T20501] tipc_sendmsg+0x51/0x70 [ 880.725292][T20501] ____sys_sendmsg+0x56f/0x860 [ 880.730024][T20501] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 880.735193][T20501] __sys_sendmmsg+0x338/0x680 [ 880.739839][T20501] ? __ia32_sys_sendmsg+0x90/0x90 [ 880.744845][T20501] ? __rcu_read_lock+0x50/0x50 [ 880.749575][T20501] ? __kasan_slab_free+0x1e2/0x220 [ 880.754652][T20501] ? __kasan_slab_free+0x168/0x220 [ 880.759733][T20501] ? slab_free_freelist_hook+0xd0/0x150 [ 880.765244][T20501] ? kmem_cache_free+0xac/0x5c0 [ 880.770060][T20501] ? do_sys_open+0x4a3/0x620 [ 880.774735][T20501] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 880.780768][T20501] ? do_sys_open+0x2fc/0x620 [ 880.785327][T20501] ? proc_fail_nth_write+0x166/0x200 [ 880.790574][T20501] ? _local_bh_enable+0x30/0x30 [ 880.795392][T20501] ? proc_fail_nth_read+0x1c0/0x1c0 [ 880.800556][T20501] ? proc_fail_nth_read+0x1c0/0x1c0 [ 880.805719][T20501] ? memset+0x1f/0x40 [ 880.809695][T20501] ? fsnotify+0x13a0/0x1460 [ 880.814171][T20501] ? __kernel_write+0x340/0x340 [ 880.818989][T20501] ? fsnotify+0x13a0/0x1460 [ 880.823466][T20501] ? security_file_permission+0x128/0x300 [ 880.829153][T20501] ? __sb_end_write+0xa4/0xf0 [ 880.833821][T20501] ? vfs_write+0x427/0x4f0 [ 880.838230][T20501] ? ksys_write+0x237/0x2a0 [ 880.842713][T20501] ? __ia32_sys_read+0x80/0x80 [ 880.847447][T20501] ? fput_many+0x42/0x1a0 [ 880.851778][T20501] __x64_sys_sendmmsg+0x9c/0xb0 [ 880.856605][T20501] do_syscall_64+0xcb/0x150 [ 880.861081][T20501] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 880.866941][T20501] RIP: 0033:0x45de59 [ 880.870806][T20501] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 880.890385][T20501] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 880.898762][T20501] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 880.906703][T20501] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 880.914645][T20501] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 880.922582][T20501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 05:12:06 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x68000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 880.930522][T20501] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:06 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x20000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x55b4}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:07 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6c000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:07 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x25000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:07 executing program 1: perf_event_open(&(0x7f0000000500)={0x3, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10, 0xffffffffffffffff, 0xa) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:12:07 executing program 3 (fault-call:10 fault-nth:8): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:07 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x74000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:07 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7a000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:07 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x85ffffff}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:07 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x40000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:07 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9cffffff}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 881.346837][T20546] FAULT_INJECTION: forcing a failure. [ 881.346837][T20546] name failslab, interval 1, probability 0, space 0, times 0 [ 881.359825][T20546] CPU: 1 PID: 20546 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 881.371355][T20546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 881.381392][T20546] Call Trace: [ 881.384669][T20546] dump_stack+0x1b0/0x21e [ 881.388986][T20546] ? devkmsg_release+0x11c/0x11c 05:12:07 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9fffffff}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 881.393914][T20546] ? do_user_addr_fault+0x55c/0x9f0 [ 881.399102][T20546] ? show_regs_print_info+0x12/0x12 [ 881.404287][T20546] ? _raw_spin_lock+0xa1/0x170 [ 881.409036][T20546] ? _raw_spin_trylock_bh+0x190/0x190 [ 881.414415][T20546] should_fail+0x6fb/0x860 [ 881.418815][T20546] ? setup_fault_attr+0x2b0/0x2b0 [ 881.423814][T20546] ? __alloc_skb+0x88/0x4d0 [ 881.428297][T20546] should_failslab+0x5/0x20 [ 881.432907][T20546] kmem_cache_alloc+0x36/0x250 [ 881.437650][T20546] __alloc_skb+0x88/0x4d0 [ 881.441956][T20546] ? __check_object_size+0x2e5/0x3b0 [ 881.447216][T20546] tipc_msg_build+0xcf5/0x1b20 [ 881.451966][T20546] tipc_send_group_bcast+0x9c1/0xd50 [ 881.457220][T20546] ? __tipc_sendmsg+0x2d30/0x2d30 [ 881.462210][T20546] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 881.467576][T20546] ? wait_woken+0x250/0x250 [ 881.472044][T20546] ? path_openat+0x2258/0x4270 [ 881.476773][T20546] ? do_filp_open+0x1f7/0x430 [ 881.481419][T20546] ? do_sys_open+0x343/0x620 [ 881.485976][T20546] ? do_syscall_64+0xcb/0x150 [ 881.490619][T20546] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 881.496650][T20546] ? new_inode+0x25/0x1d0 [ 881.500947][T20546] ? proc_pid_make_inode+0x23/0x1d0 [ 881.506116][T20546] ? proc_tid_base_lookup+0x185/0x1f0 [ 881.511452][T20546] ? path_openat+0x2258/0x4270 [ 881.516182][T20546] ? do_filp_open+0x1f7/0x430 [ 881.520826][T20546] __tipc_sendmsg+0x400/0x2d30 [ 881.525559][T20546] ? avc_has_perm+0xbd/0x260 [ 881.530117][T20546] ? memset+0x1f/0x40 [ 881.534079][T20546] ? unwind_next_frame+0x1c07/0x22b0 [ 881.539333][T20546] ? local_bh_enable+0x20/0x20 [ 881.544064][T20546] ? arch_stack_walk+0x78/0xe0 [ 881.548880][T20546] ? _raw_spin_lock_bh+0xa4/0x180 [ 881.553873][T20546] ? _local_bh_enable+0x30/0x30 [ 881.558689][T20546] ? memset+0x1f/0x40 [ 881.562650][T20546] ? selinux_socket_sendmsg+0x10b/0x320 [ 881.568162][T20546] ? lock_sock_nested+0x25a/0x320 [ 881.573156][T20546] ? import_iovec+0x171/0x340 [ 881.577799][T20546] ? tipc_recvmsg+0x17c0/0x17c0 [ 881.582615][T20546] tipc_sendmsg+0x51/0x70 [ 881.586914][T20546] ____sys_sendmsg+0x56f/0x860 [ 881.591732][T20546] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 881.596898][T20546] __sys_sendmmsg+0x338/0x680 [ 881.601540][T20546] ? __ia32_sys_sendmsg+0x90/0x90 [ 881.606526][T20546] ? __rcu_read_lock+0x50/0x50 [ 881.611258][T20546] ? __kasan_slab_free+0x1e2/0x220 [ 881.616338][T20546] ? __kasan_slab_free+0x168/0x220 [ 881.621417][T20546] ? slab_free_freelist_hook+0xd0/0x150 [ 881.626934][T20546] ? kmem_cache_free+0xac/0x5c0 [ 881.631759][T20546] ? do_sys_open+0x4a3/0x620 [ 881.636423][T20546] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 881.642476][T20546] ? do_sys_open+0x2fc/0x620 [ 881.647220][T20546] ? proc_fail_nth_write+0x166/0x200 [ 881.652474][T20546] ? _raw_spin_lock+0x170/0x170 [ 881.657294][T20546] ? proc_fail_nth_read+0x1c0/0x1c0 [ 881.662490][T20546] ? proc_fail_nth_read+0x1c0/0x1c0 [ 881.667656][T20546] ? memset+0x1f/0x40 [ 881.671604][T20546] ? fsnotify+0x13a0/0x1460 [ 881.676261][T20546] ? __kernel_write+0x340/0x340 [ 881.681084][T20546] ? fsnotify+0x13a0/0x1460 [ 881.685575][T20546] ? security_file_permission+0x128/0x300 [ 881.691260][T20546] ? __sb_end_write+0xa4/0xf0 [ 881.695907][T20546] ? vfs_write+0x427/0x4f0 [ 881.700313][T20546] ? ksys_write+0x237/0x2a0 [ 881.704786][T20546] ? __ia32_sys_read+0x80/0x80 [ 881.709515][T20546] ? fput_many+0x42/0x1a0 [ 881.713812][T20546] __x64_sys_sendmmsg+0x9c/0xb0 [ 881.718655][T20546] do_syscall_64+0xcb/0x150 [ 881.723132][T20546] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 881.729009][T20546] RIP: 0033:0x45de59 [ 881.732884][T20546] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 881.752564][T20546] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 881.760942][T20546] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 881.768898][T20546] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 881.776858][T20546] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 881.784802][T20546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 881.792740][T20546] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x6404}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:07 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x48000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:07 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb2010000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:07 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0xfd, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat(r2, &(0x7f0000000000)='./file1\x00', 0x141800, 0x100) ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, &(0x7f0000000580)={{0x3, 0x3, 0x3, 0xffffff13, 0x1, 0x800}, 0xd4, [0x6, 0x200, 0x0, 0x7, 0x98, 0x5, 0x68ae8bff, 0xae3, 0x3c8, 0x2, 0x400, 0xfffffffe, 0x101, 0x4, 0x640e, 0x3, 0x1f, 0x7ff, 0x0, 0x7f, 0x0, 0xffffb18e, 0x7, 0x4, 0x0, 0xb5d6, 0x6, 0x400, 0x2, 0x2, 0x1, 0x9, 0x0, 0x8, 0x5, 0x20000000, 0x8, 0x20, 0xfffeffff, 0x6, 0x7, 0xab8, 0x1a0f, 0x0, 0xff89, 0x8, 0x50a, 0x9a, 0xd1e9, 0x3, 0x1, 0xff, 0x8, 0x800, 0x7, 0x6, 0x3, 0x4, 0x8, 0xffffffff, 0x3ff, 0x0, 0x7, 0x33, 0x98b1a8f8, 0x4, 0x80000000, 0xffffffff, 0x7, 0x8001, 0xff, 0x9, 0x7, 0x1, 0xec9, 0x7, 0x0, 0xcb, 0x3, 0x3, 0x5, 0x9, 0x5, 0x5d, 0xfffffffd, 0x3ff, 0x2, 0x101, 0x1ff, 0x7, 0x200, 0x2, 0x2000, 0x4, 0x0, 0x9, 0xffffffff, 0x8, 0x401, 0x8, 0x9, 0x3, 0x9, 0x9, 0x1000, 0x5, 0x9, 0x3, 0x8001, 0x1, 0x23c, 0xffff, 0x1, 0x6, 0x20, 0x1ff, 0x9, 0x2, 0x7fffffff, 0xffff, 0x0, 0x7ff, 0x2, 0xffffffff, 0x80000, 0x4, 0x3, 0x7ff, 0x7ff, 0x1, 0x2df1, 0x80000001, 0x1, 0x8, 0xfbf9, 0x9, 0x7ff, 0x1, 0x1, 0x5, 0x8, 0x10001, 0x1, 0x17, 0x5, 0x8, 0x3, 0x7ff, 0x6c50, 0xe81, 0x1, 0xf26, 0xc0, 0x8, 0x9, 0x4, 0xcb6, 0x4, 0x7, 0xa5f, 0x2efb, 0x0, 0x2, 0x4, 0x7, 0x3f, 0x10000, 0x5, 0x80, 0x31, 0x2e60, 0xa, 0x0, 0xe9, 0x1000, 0x80000000, 0x0, 0xf563, 0x6d3, 0x8, 0x8000, 0xd437, 0x16, 0xcece, 0x7f, 0x1f, 0x80000001, 0xc44e, 0xae, 0xff, 0x1f, 0x9, 0x0, 0xffffffff, 0x100, 0x101, 0x2, 0x24, 0x101, 0x800, 0x9, 0x7, 0x2, 0xfffffff8, 0x101, 0x6, 0x19e3a31c, 0xde8d, 0x1ff, 0x7f, 0x2, 0x5, 0x1, 0x4a76, 0x0, 0x0, 0x51b, 0x155f, 0x2, 0x200, 0x7f, 0xffff, 0x5, 0xffff8001, 0x401, 0x7, 0x7fff, 0xb96a, 0x80000000, 0x693, 0x3, 0x614a8f50, 0x0, 0x8ee9, 0x1, 0x89, 0x100, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x20, 0xffffffff, 0x100, 0x6, 0x6, 0x1e, 0x8, 0x8, 0x7296, 0x5, 0x400, 0x6, 0x4, 0x8, 0xf1, 0x3, 0x8, 0x3, 0x6, 0x8, 0x7, 0xad, 0x7ff, 0x5, 0xe25, 0x6, 0x80, 0x1, 0xfffffff7, 0x6, 0x1146, 0x5, 0x1, 0x10001, 0x101, 0x15, 0x5, 0x20, 0x7, 0x3, 0xf8b, 0xa5, 0x6, 0x2, 0x5, 0x7ff, 0xa00f, 0x1ff, 0x80000001, 0xffffffff, 0x6, 0xfffffffd, 0x7f, 0x8, 0x2, 0xffffffff, 0x7, 0x200, 0x4, 0x3ff, 0x4, 0xffffff7f, 0x8, 0x2, 0x5, 0x1, 0xfffffffb, 0x4, 0x800, 0x6, 0x4, 0x1, 0x9, 0x101, 0x1, 0x6, 0x7e, 0x7f1, 0x0, 0x3, 0x1, 0xd, 0x7fffffff, 0x2, 0x5, 0x1, 0xe0, 0x5, 0x9, 0x2, 0x2, 0xffffff7f, 0x2, 0x9, 0x5, 0x9, 0x80000001, 0x7f, 0x1000, 0x8, 0x0, 0x640, 0xffff8001, 0x0, 0x6, 0xe647, 0x1, 0x81, 0x9, 0x5, 0x2, 0x5, 0x0, 0x8000, 0x4, 0x7, 0x5, 0x10000, 0x2, 0x86, 0xffff, 0x982e, 0x66, 0x7, 0xfc000000, 0x419, 0x8, 0xffff, 0xbb, 0x1, 0x2, 0xfffffffa, 0x8, 0x401, 0x8, 0xa5, 0x3, 0x10000, 0x1000, 0x2, 0x18, 0x40, 0x9f0, 0x101, 0x5, 0x2, 0x1b1, 0x80000001, 0x0, 0x3, 0x709, 0x2, 0x0, 0x6, 0x20400000, 0x992a, 0x3, 0x9, 0x9, 0x5, 0xfff, 0x3f, 0x80000001, 0x7, 0xfffffff9, 0x9, 0xd184, 0x20, 0x5, 0x2, 0x17a, 0x9, 0x4956, 0x3437, 0x8, 0x9, 0x6, 0x10001, 0x2, 0x5, 0xfffffff9, 0x1, 0x3c, 0x200, 0x1, 0x697b, 0x9, 0x9, 0x101, 0x0, 0x40, 0x6, 0x1ff, 0x9, 0x401, 0x80000001, 0xffff, 0x6, 0x5d, 0x5, 0x646, 0x8000000, 0x9, 0x1f, 0x8, 0x81, 0x8000, 0x200, 0x1, 0x1, 0x0, 0x80000000, 0xb969, 0x7, 0x5, 0x8, 0x0, 0x3a3, 0x9f, 0x45de000, 0xb70, 0xffff00ee, 0x62c0, 0x8001, 0x8c, 0x2, 0x7, 0x907, 0x292, 0x9, 0xc183, 0xffff, 0x7, 0x3, 0x80, 0xfffffffe, 0x1000, 0x7, 0x7f, 0xa8e, 0x2, 0xfffffffb, 0x1f, 0xffff, 0xffffffff, 0x800, 0xffff, 0xffffffc0, 0x2, 0x2, 0x8b, 0x400, 0x0, 0x80000000, 0x3, 0x4, 0x871e, 0x4, 0x1, 0x1, 0xfb, 0x5, 0x8, 0x6, 0x39, 0x2, 0x588e, 0x81, 0x6735, 0x5, 0x101, 0x1, 0x9be3, 0x800, 0x4, 0x7, 0x1ff, 0xf45, 0x6, 0x280, 0x3, 0x935a, 0x400, 0x5, 0x7, 0x8001, 0x6, 0x4, 0x3, 0x0, 0x8, 0xe66a, 0x3, 0x7, 0x6, 0x3, 0x5, 0x0, 0x5, 0x79ba, 0xffffff47, 0x6, 0x5d, 0xfffffffe, 0x40, 0xffffffff, 0x0, 0xfffffffd, 0x3b53, 0x8, 0x8000, 0x1, 0xff, 0x9, 0x3, 0x0, 0x9, 0x9, 0x1ff, 0x6, 0x1000, 0x9f8, 0x80000001, 0x2, 0x2, 0x5, 0xfff, 0x8001, 0x4, 0x1, 0x3ff, 0x10001, 0x5, 0x74, 0x1, 0x3, 0xfff, 0x0, 0x7de4, 0x7ea2, 0x1ff, 0x6, 0x4, 0x8, 0x4, 0x8, 0x5a, 0x8, 0x3, 0x20, 0x1, 0x20, 0x49, 0x0, 0x80, 0x3c1, 0x80000001, 0x400, 0x7f, 0x5, 0x80000001, 0x1, 0x862, 0xfffffff7, 0x10000, 0x5, 0x7, 0x7ff, 0x20c9b47d, 0x7, 0x1f, 0xba, 0x3, 0x9b01, 0x7, 0xfffffbff, 0x80000000, 0xbe6b, 0x2, 0x800, 0x1, 0x80, 0x800, 0x8000, 0x6, 0x4a, 0x1, 0x6, 0xfffffffb, 0x3, 0x6, 0x80000000, 0x100, 0x0, 0x7, 0x7, 0x401, 0x1f, 0x5, 0x3, 0x7, 0x5, 0xfffff2cb, 0xff, 0x0, 0xd313, 0xffff, 0x2, 0xffffffff, 0x1ff, 0x4, 0x3, 0x0, 0x40, 0x6, 0x7, 0xf0f6, 0x9, 0x401, 0x8841, 0xfff, 0xfffffff9, 0x40, 0xfb12, 0x9, 0x2, 0x101, 0x8b8d, 0x2, 0x734, 0x8, 0x4, 0x1, 0x5, 0x3c, 0x8ebb, 0x0, 0x7, 0x5, 0x1, 0xfffffffb, 0x8000, 0x2, 0x6, 0x77f, 0x7d2, 0x8, 0x100, 0xffffff91, 0xfffffff9, 0x9, 0x3c6, 0x60f83c29, 0xffffffff, 0x20, 0x5, 0x5, 0x9, 0x3, 0xfffff000, 0x5, 0xa31, 0x42, 0x1, 0x3ef3, 0x80000000, 0x6760, 0x2, 0x6, 0xfffffffd, 0x8, 0xffffffff, 0x7f, 0x20000000, 0xff, 0x6, 0x1, 0x5, 0xeb, 0x3, 0x3ff, 0x1, 0xe345, 0x3ff, 0x1, 0x20, 0x0, 0x10001, 0x7fff, 0x9, 0x6, 0x5, 0x10000, 0x3, 0x5, 0x3f, 0x6, 0xa6ca, 0x40, 0x27ae, 0x0, 0x7ff, 0x80000001, 0x9, 0x7, 0x3ff, 0x3, 0x5, 0x80, 0x9, 0x8000, 0x7f, 0x7, 0x3f, 0x20, 0xda, 0x4, 0x8001, 0x3, 0x7, 0x1, 0x81, 0x7, 0xfff, 0x0, 0x390, 0x2, 0x3, 0x0, 0x200, 0x2, 0x0, 0x100, 0x1ff, 0x6, 0x7, 0xae, 0x4, 0x2, 0x5, 0x1, 0x2, 0xfffffff8, 0x3, 0xb8d, 0x4, 0x2, 0x3ff, 0x81, 0xfa91, 0x0, 0x2, 0x6, 0x4, 0x5, 0x7, 0x6, 0xfff, 0x5, 0x4, 0x7, 0x80, 0x5, 0xe5, 0x949, 0xffffff7f, 0x3f, 0x959a, 0x3, 0x8, 0x401, 0xdd40, 0x25f73ff9, 0x4, 0xde3, 0x10001, 0x81, 0x9, 0x20, 0x2, 0x5, 0xffffffff, 0x8, 0x2, 0x9, 0x2, 0x1, 0xfffff59a, 0x0, 0x306, 0x1e0, 0x760, 0x425, 0x81, 0x5, 0x2, 0x45af, 0x2, 0x6, 0x0, 0x5, 0xffffffe1, 0x8c, 0x7ff, 0x6, 0x80000001, 0x401, 0x80000000, 0x6, 0x1, 0xfff, 0x40e9, 0xfffffff8, 0x10000, 0x2, 0x3, 0x40, 0x12b, 0x10000, 0x6, 0x6, 0x267594f4, 0x9, 0xa5422bd, 0x3, 0x0, 0x5fb, 0x2, 0xfff, 0x80000000, 0x8, 0xffffffff, 0x49, 0xd22, 0x1ffe00, 0x5, 0x20, 0xfffffff8, 0xffff, 0x1ff, 0x7ff, 0x3, 0x20, 0x7f, 0x5, 0x100, 0x8001, 0x6, 0x8, 0x1000, 0x3, 0x0, 0xfffffff9, 0xffff7fff, 0x0, 0x1, 0x8, 0x9, 0x0, 0x80, 0x72, 0x3f, 0x7, 0xffff, 0xe670, 0x4, 0x40, 0x4be8, 0x3, 0x4, 0x7ff, 0x80000001, 0x80, 0x7, 0xffff, 0x100, 0x2, 0x0, 0x10000, 0x401, 0x4, 0x2, 0xf6, 0x5, 0x10000, 0x14, 0x5, 0x1, 0x30, 0x800, 0xd642, 0x80000001, 0xfff, 0x2, 0x401, 0x18ce, 0x2, 0x1, 0x20, 0x0, 0x10000, 0x9, 0x6, 0xffffffc1, 0x3, 0x1f, 0xd42, 0xffffff37, 0x2, 0x20, 0x3, 0xee, 0xfffffff9, 0x81, 0x3, 0x2f3, 0xc66c, 0x20, 0x5, 0x8, 0x0, 0x8, 0xffffffff, 0x2, 0x3ee, 0x4cf, 0x3ff, 0x2, 0x0, 0x6, 0x20, 0x1, 0x3, 0x80000000, 0xff, 0x0, 0x2, 0x3f, 0x0, 0x20000000, 0x0, 0x43, 0x0, 0x9, 0x3, 0x80000001, 0xfffffffe, 0x7fff, 0x1000, 0xe7b8, 0x5, 0x80, 0x10001, 0x7, 0x101, 0x1, 0xfffff801, 0x7, 0x7fffffff, 0x42810ca5, 0x9, 0x9, 0x65b, 0xffffffff, 0x9, 0x8, 0x5, 0x80000000, 0xbec3, 0x4, 0x7, 0x6, 0x0, 0xaf9e, 0x800, 0xfffffff8, 0x2f, 0x3, 0x5, 0x1, 0x95cf]}) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:12:07 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:07 executing program 3 (fault-call:10 fault-nth:9): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:08 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbb9a1c00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:08 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x4c000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:08 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff000000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 882.214408][T20581] FAULT_INJECTION: forcing a failure. [ 882.214408][T20581] name failslab, interval 1, probability 0, space 0, times 0 [ 882.229807][T20581] CPU: 0 PID: 20581 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 882.241344][T20581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 882.251388][T20581] Call Trace: [ 882.254689][T20581] dump_stack+0x1b0/0x21e [ 882.259014][T20581] ? devkmsg_release+0x11c/0x11c 05:12:08 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff0f0000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:08 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0xffffffe0}, 0x10) write(r3, &(0x7f0000000040)="240000001e005f0214fffffffffffff8070000000000000000000000060008000e000000", 0x24) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, 0x0, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x83}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x18e}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffff857c}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xd6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x815) sendfile(r0, r0, 0x0, 0x80001d00c0d3) [ 882.263939][T20581] ? show_regs_print_info+0x12/0x12 [ 882.269125][T20581] ? do_user_addr_fault+0x55c/0x9f0 [ 882.274317][T20581] should_fail+0x6fb/0x860 [ 882.278719][T20581] ? setup_fault_attr+0x2b0/0x2b0 [ 882.283729][T20581] ? setup_fault_attr+0x2b0/0x2b0 [ 882.288756][T20581] ? tipc_msg_build+0xcf5/0x1b20 [ 882.293680][T20581] should_failslab+0x5/0x20 [ 882.298153][T20581] __kmalloc_track_caller+0x5d/0x2b0 [ 882.303406][T20581] ? kmem_cache_alloc+0x1d5/0x250 [ 882.308399][T20581] ? tipc_msg_build+0xcf5/0x1b20 [ 882.313311][T20581] __alloc_skb+0xd1/0x4d0 [ 882.317610][T20581] tipc_msg_build+0xcf5/0x1b20 [ 882.322344][T20581] tipc_send_group_bcast+0x9c1/0xd50 [ 882.327597][T20581] ? __tipc_sendmsg+0x2d30/0x2d30 [ 882.332589][T20581] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 882.337942][T20581] ? wait_woken+0x250/0x250 [ 882.342410][T20581] ? path_openat+0x2258/0x4270 [ 882.347147][T20581] ? do_filp_open+0x1f7/0x430 [ 882.351791][T20581] ? do_sys_open+0x343/0x620 [ 882.356350][T20581] ? do_syscall_64+0xcb/0x150 [ 882.360996][T20581] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 882.367034][T20581] ? new_inode+0x25/0x1d0 [ 882.371355][T20581] ? proc_pid_make_inode+0x23/0x1d0 [ 882.376524][T20581] ? proc_tid_base_lookup+0x185/0x1f0 [ 882.381860][T20581] ? path_openat+0x2258/0x4270 [ 882.386586][T20581] ? do_filp_open+0x1f7/0x430 [ 882.391231][T20581] __tipc_sendmsg+0x400/0x2d30 [ 882.395969][T20581] ? avc_has_perm+0xbd/0x260 [ 882.400531][T20581] ? memset+0x1f/0x40 [ 882.404483][T20581] ? unwind_next_frame+0x1c07/0x22b0 [ 882.409739][T20581] ? local_bh_enable+0x20/0x20 [ 882.414480][T20581] ? arch_stack_walk+0x78/0xe0 [ 882.419212][T20581] ? _raw_spin_lock_bh+0xa4/0x180 [ 882.424205][T20581] ? _local_bh_enable+0x30/0x30 [ 882.429023][T20581] ? memset+0x1f/0x40 [ 882.433080][T20581] ? selinux_socket_sendmsg+0x10b/0x320 [ 882.438593][T20581] ? lock_sock_nested+0x25a/0x320 [ 882.443583][T20581] ? import_iovec+0x171/0x340 [ 882.448224][T20581] ? tipc_recvmsg+0x17c0/0x17c0 [ 882.453039][T20581] tipc_sendmsg+0x51/0x70 [ 882.457339][T20581] ____sys_sendmsg+0x56f/0x860 [ 882.462074][T20581] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 882.467239][T20581] __sys_sendmmsg+0x338/0x680 [ 882.471886][T20581] ? __ia32_sys_sendmsg+0x90/0x90 [ 882.476876][T20581] ? __rcu_read_lock+0x50/0x50 [ 882.481693][T20581] ? __kasan_slab_free+0x1e2/0x220 [ 882.486777][T20581] ? __kasan_slab_free+0x168/0x220 [ 882.491854][T20581] ? slab_free_freelist_hook+0xd0/0x150 [ 882.497364][T20581] ? kmem_cache_free+0xac/0x5c0 [ 882.502182][T20581] ? do_sys_open+0x4a3/0x620 [ 882.506739][T20581] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 882.512774][T20581] ? do_sys_open+0x2fc/0x620 [ 882.517332][T20581] ? proc_fail_nth_write+0x166/0x200 [ 882.522593][T20581] ? _local_bh_enable+0x30/0x30 [ 882.527411][T20581] ? proc_fail_nth_read+0x1c0/0x1c0 [ 882.532574][T20581] ? proc_fail_nth_read+0x1c0/0x1c0 [ 882.537736][T20581] ? memset+0x1f/0x40 [ 882.541685][T20581] ? fsnotify+0x13a0/0x1460 [ 882.546157][T20581] ? __kernel_write+0x340/0x340 [ 882.550988][T20581] ? fsnotify+0x13a0/0x1460 [ 882.555464][T20581] ? security_file_permission+0x128/0x300 [ 882.561147][T20581] ? __sb_end_write+0xa4/0xf0 [ 882.565788][T20581] ? vfs_write+0x427/0x4f0 [ 882.570168][T20581] ? ksys_write+0x237/0x2a0 [ 882.574723][T20581] ? __ia32_sys_read+0x80/0x80 [ 882.579450][T20581] ? fput_many+0x42/0x1a0 [ 882.583835][T20581] __x64_sys_sendmmsg+0x9c/0xb0 [ 882.588655][T20581] do_syscall_64+0xcb/0x150 [ 882.593124][T20581] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 882.598980][T20581] RIP: 0033:0x45de59 [ 882.602841][T20581] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 882.622407][T20581] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 882.630867][T20581] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 882.638895][T20581] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 882.646834][T20581] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 882.654773][T20581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 05:12:08 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff9f0000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 882.662712][T20581] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:08 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x7254}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:08 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x60000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:08 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff8000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:08 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:08 executing program 1: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) 05:12:08 executing program 3 (fault-call:10 fault-nth:10): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:08 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff85}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:08 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x68000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 883.080549][T20617] FAULT_INJECTION: forcing a failure. [ 883.080549][T20617] name failslab, interval 1, probability 0, space 0, times 0 [ 883.088158][T20618] tproxy_tg6_check: 17 callbacks suppressed [ 883.088161][T20618] xt_TPROXY: Can be used only with -p tcp or -p udp [ 883.097130][T20617] CPU: 1 PID: 20617 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 883.112410][T20625] xt_TPROXY: Can be used only with -p tcp or -p udp 05:12:08 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x6c000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 883.117271][T20617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 883.117275][T20617] Call Trace: [ 883.117290][T20617] dump_stack+0x1b0/0x21e [ 883.117300][T20617] ? devkmsg_release+0x11c/0x11c [ 883.117308][T20617] ? do_user_addr_fault+0x55c/0x9f0 [ 883.117319][T20617] ? show_regs_print_info+0x12/0x12 [ 883.133707][T20628] xt_TPROXY: Can be used only with -p tcp or -p udp [ 883.133920][T20617] should_fail+0x6fb/0x860 [ 883.133931][T20617] ? setup_fault_attr+0x2b0/0x2b0 [ 883.151927][T20633] xt_TPROXY: Can be used only with -p tcp or -p udp 05:12:08 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x74000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 883.156756][T20617] ? copy_user_enhanced_fast_string+0xe/0x30 [ 883.156782][T20617] ? __alloc_skb+0x88/0x4d0 [ 883.156795][T20617] should_failslab+0x5/0x20 [ 883.165644][T20636] xt_TPROXY: Can be used only with -p tcp or -p udp [ 883.167739][T20617] kmem_cache_alloc+0x36/0x250 [ 883.167750][T20617] __alloc_skb+0x88/0x4d0 [ 883.167759][T20617] ? __check_object_size+0x2e5/0x3b0 [ 883.167769][T20617] tipc_msg_build+0xcf5/0x1b20 [ 883.167780][T20617] tipc_send_group_bcast+0x9c1/0xd50 [ 883.167792][T20617] ? __tipc_sendmsg+0x2d30/0x2d30 05:12:09 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0x7a000000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 883.198036][T20639] xt_TPROXY: Can be used only with -p tcp or -p udp [ 883.200970][T20617] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 883.200981][T20617] ? wait_woken+0x250/0x250 [ 883.200998][T20617] ? path_openat+0x2258/0x4270 [ 883.247436][T20642] xt_TPROXY: Can be used only with -p tcp or -p udp [ 883.251319][T20617] ? do_filp_open+0x1f7/0x430 [ 883.251328][T20617] ? do_sys_open+0x343/0x620 [ 883.251335][T20617] ? do_syscall_64+0xcb/0x150 [ 883.251347][T20617] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 05:12:09 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0xb8030000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 883.276300][T20645] xt_TPROXY: Can be used only with -p tcp or -p udp [ 883.277815][T20617] ? new_inode+0x25/0x1d0 [ 883.277822][T20617] ? proc_pid_make_inode+0x23/0x1d0 [ 883.277831][T20617] ? proc_tid_base_lookup+0x185/0x1f0 [ 883.277837][T20617] ? path_openat+0x2258/0x4270 [ 883.277842][T20617] ? do_filp_open+0x1f7/0x430 [ 883.277851][T20617] __tipc_sendmsg+0x400/0x2d30 [ 883.277860][T20617] ? avc_has_perm+0xbd/0x260 [ 883.277870][T20617] ? memset+0x1f/0x40 [ 883.277877][T20617] ? unwind_next_frame+0x1c07/0x22b0 [ 883.277888][T20617] ? local_bh_enable+0x20/0x20 [ 883.285860][T20648] xt_TPROXY: Can be used only with -p tcp or -p udp [ 883.288766][T20617] ? arch_stack_walk+0x78/0xe0 [ 883.288775][T20617] ? _raw_spin_lock_bh+0xa4/0x180 [ 883.288782][T20617] ? _local_bh_enable+0x30/0x30 [ 883.288789][T20617] ? memset+0x1f/0x40 [ 883.288796][T20617] ? selinux_socket_sendmsg+0x10b/0x320 [ 883.288808][T20617] ? lock_sock_nested+0x25a/0x320 [ 883.318032][T20650] xt_TPROXY: Can be used only with -p tcp or -p udp [ 883.321970][T20617] ? import_iovec+0x171/0x340 [ 883.321984][T20617] ? tipc_recvmsg+0x17c0/0x17c0 [ 883.321995][T20617] tipc_sendmsg+0x51/0x70 [ 883.387922][T20617] ____sys_sendmsg+0x56f/0x860 [ 883.392689][T20617] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 883.397855][T20617] __sys_sendmmsg+0x338/0x680 [ 883.402499][T20617] ? __ia32_sys_sendmsg+0x90/0x90 [ 883.407499][T20617] ? __rcu_read_lock+0x50/0x50 [ 883.412235][T20617] ? __kasan_slab_free+0x1e2/0x220 [ 883.417312][T20617] ? __kasan_slab_free+0x168/0x220 [ 883.422390][T20617] ? slab_free_freelist_hook+0xd0/0x150 [ 883.427905][T20617] ? kmem_cache_free+0xac/0x5c0 [ 883.432720][T20617] ? do_sys_open+0x4a3/0x620 [ 883.437282][T20617] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 883.443322][T20617] ? do_sys_open+0x2fc/0x620 [ 883.447882][T20617] ? proc_fail_nth_write+0x166/0x200 [ 883.453143][T20617] ? _local_bh_enable+0x30/0x30 [ 883.457978][T20617] ? proc_fail_nth_read+0x1c0/0x1c0 [ 883.463147][T20617] ? proc_fail_nth_read+0x1c0/0x1c0 [ 883.468311][T20617] ? memset+0x1f/0x40 [ 883.472262][T20617] ? fsnotify+0x13a0/0x1460 [ 883.476821][T20617] ? __kernel_write+0x340/0x340 [ 883.481635][T20617] ? fsnotify+0x13a0/0x1460 [ 883.486144][T20617] ? security_file_permission+0x128/0x300 [ 883.491869][T20617] ? __sb_end_write+0xa4/0xf0 [ 883.496515][T20617] ? vfs_write+0x427/0x4f0 [ 883.500896][T20617] ? ksys_write+0x237/0x2a0 [ 883.505369][T20617] ? __ia32_sys_read+0x80/0x80 [ 883.510103][T20617] ? fput_many+0x42/0x1a0 [ 883.514401][T20617] __x64_sys_sendmmsg+0x9c/0xb0 [ 883.519220][T20617] do_syscall_64+0xcb/0x150 [ 883.523889][T20617] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 883.529762][T20617] RIP: 0033:0x45de59 [ 883.533622][T20617] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 883.553191][T20617] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 883.561571][T20617] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 883.569551][T20617] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 883.577507][T20617] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 883.585447][T20617] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 883.593389][T20617] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:09 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff9c}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:09 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0xd8040000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:09 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x80a4}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:09 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:09 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:12:09 executing program 3 (fault-call:10 fault-nth:11): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:09 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff9f}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 883.951844][T20665] FAULT_INJECTION: forcing a failure. [ 883.951844][T20665] name failslab, interval 1, probability 0, space 0, times 0 [ 883.967237][T20665] CPU: 0 PID: 20665 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 883.978773][T20665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 883.988814][T20665] Call Trace: [ 883.992084][T20665] dump_stack+0x1b0/0x21e [ 883.996428][T20665] ? devkmsg_release+0x11c/0x11c [ 884.001352][T20665] ? show_regs_print_info+0x12/0x12 [ 884.006518][T20665] ? do_user_addr_fault+0x55c/0x9f0 [ 884.011689][T20665] should_fail+0x6fb/0x860 [ 884.016096][T20665] ? setup_fault_attr+0x2b0/0x2b0 [ 884.021084][T20665] ? setup_fault_attr+0x2b0/0x2b0 [ 884.026084][T20665] ? tipc_msg_build+0xcf5/0x1b20 [ 884.030991][T20665] should_failslab+0x5/0x20 [ 884.035473][T20665] __kmalloc_track_caller+0x5d/0x2b0 [ 884.040723][T20665] ? kmem_cache_alloc+0x1d5/0x250 [ 884.045721][T20665] ? tipc_msg_build+0xcf5/0x1b20 [ 884.050629][T20665] __alloc_skb+0xd1/0x4d0 [ 884.054926][T20665] tipc_msg_build+0xcf5/0x1b20 [ 884.059660][T20665] tipc_send_group_bcast+0x9c1/0xd50 [ 884.064914][T20665] ? __tipc_sendmsg+0x2d30/0x2d30 [ 884.069904][T20665] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 884.075241][T20665] ? wait_woken+0x250/0x250 [ 884.079707][T20665] ? path_openat+0x2258/0x4270 [ 884.084434][T20665] ? do_filp_open+0x1f7/0x430 [ 884.089077][T20665] ? do_sys_open+0x343/0x620 [ 884.093633][T20665] ? do_syscall_64+0xcb/0x150 [ 884.098275][T20665] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 884.104315][T20665] ? new_inode+0x25/0x1d0 [ 884.108608][T20665] ? proc_pid_make_inode+0x23/0x1d0 [ 884.113781][T20665] ? proc_tid_base_lookup+0x185/0x1f0 [ 884.119114][T20665] ? path_openat+0x2258/0x4270 [ 884.123842][T20665] ? do_filp_open+0x1f7/0x430 [ 884.128484][T20665] __tipc_sendmsg+0x400/0x2d30 [ 884.133213][T20665] ? avc_has_perm+0xbd/0x260 [ 884.137768][T20665] ? memset+0x1f/0x40 [ 884.141715][T20665] ? unwind_next_frame+0x1c07/0x22b0 [ 884.146965][T20665] ? local_bh_enable+0x20/0x20 [ 884.151782][T20665] ? arch_stack_walk+0x78/0xe0 [ 884.156510][T20665] ? _raw_spin_lock_bh+0xa4/0x180 [ 884.161498][T20665] ? _local_bh_enable+0x30/0x30 [ 884.166312][T20665] ? memset+0x1f/0x40 [ 884.170259][T20665] ? selinux_socket_sendmsg+0x10b/0x320 [ 884.175782][T20665] ? lock_sock_nested+0x25a/0x320 [ 884.180773][T20665] ? import_iovec+0x171/0x340 [ 884.185414][T20665] ? tipc_recvmsg+0x17c0/0x17c0 [ 884.190235][T20665] tipc_sendmsg+0x51/0x70 [ 884.194543][T20665] ____sys_sendmsg+0x56f/0x860 [ 884.199276][T20665] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 884.204442][T20665] __sys_sendmmsg+0x338/0x680 [ 884.209098][T20665] ? __ia32_sys_sendmsg+0x90/0x90 [ 884.214087][T20665] ? __rcu_read_lock+0x50/0x50 [ 884.218818][T20665] ? __kasan_slab_free+0x1e2/0x220 [ 884.223892][T20665] ? __kasan_slab_free+0x168/0x220 [ 884.228972][T20665] ? slab_free_freelist_hook+0xd0/0x150 [ 884.234483][T20665] ? kmem_cache_free+0xac/0x5c0 [ 884.239295][T20665] ? do_sys_open+0x4a3/0x620 [ 884.243850][T20665] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 884.249883][T20665] ? do_sys_open+0x2fc/0x620 [ 884.254437][T20665] ? proc_fail_nth_write+0x166/0x200 [ 884.259687][T20665] ? _raw_spin_lock+0x170/0x170 [ 884.264511][T20665] ? proc_fail_nth_read+0x1c0/0x1c0 [ 884.269676][T20665] ? proc_fail_nth_read+0x1c0/0x1c0 [ 884.274838][T20665] ? memset+0x1f/0x40 [ 884.278788][T20665] ? fsnotify+0x13a0/0x1460 [ 884.283266][T20665] ? __kernel_write+0x340/0x340 [ 884.288082][T20665] ? fsnotify+0x13a0/0x1460 [ 884.292654][T20665] ? security_file_permission+0x128/0x300 [ 884.298337][T20665] ? __sb_end_write+0xa4/0xf0 [ 884.302978][T20665] ? vfs_write+0x427/0x4f0 [ 884.307363][T20665] ? ksys_write+0x237/0x2a0 [ 884.311837][T20665] ? __ia32_sys_read+0x80/0x80 [ 884.316593][T20665] ? fput_many+0x42/0x1a0 [ 884.320891][T20665] __x64_sys_sendmmsg+0x9c/0xb0 [ 884.325708][T20665] do_syscall_64+0xcb/0x150 [ 884.330268][T20665] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 884.336126][T20665] RIP: 0033:0x45de59 [ 884.339987][T20665] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 884.359556][T20665] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 884.367944][T20665] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 884.375883][T20665] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 884.383823][T20665] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 884.391870][T20665] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b 05:12:10 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [0x0, 0x0, 0x0, 0xfe030000], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:10 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 884.399810][T20665] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:10 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:10 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:10 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {0x2}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:10 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {0x3}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:10 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {0x4}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x8ef4}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:10 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {0x5}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:10 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x188, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x30, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x61ebbff1}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a9d347}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf4, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d35c91e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f3d25e8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dca7527}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5c}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e31e6b7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e8a4b12}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd5}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x41}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52f299bf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78b6d6f3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36f30abd}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c642dcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a9bae51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}]}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x840}, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xfffffffffffffeff) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:12:10 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:10 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:10 executing program 3 (fault-call:10 fault-nth:12): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:10 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:10 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:10 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:10 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 884.820665][T20718] FAULT_INJECTION: forcing a failure. [ 884.820665][T20718] name failslab, interval 1, probability 0, space 0, times 0 [ 884.835044][T20718] CPU: 1 PID: 20718 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 884.846579][T20718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 884.856626][T20718] Call Trace: [ 884.859902][T20718] dump_stack+0x1b0/0x21e [ 884.864217][T20718] ? devkmsg_release+0x11c/0x11c 05:12:10 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x7}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:10 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 884.869230][T20718] ? do_user_addr_fault+0x55c/0x9f0 [ 884.874421][T20718] ? show_regs_print_info+0x12/0x12 [ 884.879607][T20718] should_fail+0x6fb/0x860 [ 884.884001][T20718] ? setup_fault_attr+0x2b0/0x2b0 [ 884.889019][T20718] ? copy_user_enhanced_fast_string+0xe/0x30 [ 884.894978][T20718] ? __alloc_skb+0x88/0x4d0 [ 884.899448][T20718] should_failslab+0x5/0x20 [ 884.903932][T20718] kmem_cache_alloc+0x36/0x250 [ 884.908667][T20718] __alloc_skb+0x88/0x4d0 [ 884.912966][T20718] ? __check_object_size+0x2e5/0x3b0 [ 884.918217][T20718] tipc_msg_build+0xcf5/0x1b20 [ 884.922974][T20718] tipc_send_group_bcast+0x9c1/0xd50 [ 884.928226][T20718] ? __tipc_sendmsg+0x2d30/0x2d30 [ 884.933216][T20718] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 884.938570][T20718] ? wait_woken+0x250/0x250 [ 884.943049][T20718] ? path_openat+0x2258/0x4270 [ 884.947779][T20718] ? do_filp_open+0x1f7/0x430 [ 884.952430][T20718] ? do_sys_open+0x343/0x620 [ 884.956984][T20718] ? do_syscall_64+0xcb/0x150 [ 884.961639][T20718] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 884.967688][T20718] ? new_inode+0x25/0x1d0 [ 884.971984][T20718] ? proc_pid_make_inode+0x23/0x1d0 [ 884.977147][T20718] ? proc_tid_base_lookup+0x185/0x1f0 [ 884.982490][T20718] ? path_openat+0x2258/0x4270 [ 884.987250][T20718] ? do_filp_open+0x1f7/0x430 [ 884.991915][T20718] __tipc_sendmsg+0x400/0x2d30 [ 884.996656][T20718] ? avc_has_perm+0xbd/0x260 [ 885.001221][T20718] ? memset+0x1f/0x40 [ 885.005179][T20718] ? unwind_next_frame+0x1c07/0x22b0 [ 885.010432][T20718] ? local_bh_enable+0x20/0x20 [ 885.015162][T20718] ? arch_stack_walk+0x78/0xe0 [ 885.019898][T20718] ? _raw_spin_lock_bh+0xa4/0x180 [ 885.024886][T20718] ? _local_bh_enable+0x30/0x30 [ 885.029716][T20718] ? memset+0x1f/0x40 [ 885.033670][T20718] ? selinux_socket_sendmsg+0x10b/0x320 [ 885.039191][T20718] ? lock_sock_nested+0x25a/0x320 [ 885.044182][T20718] ? import_iovec+0x171/0x340 [ 885.048837][T20718] ? tipc_recvmsg+0x17c0/0x17c0 [ 885.053673][T20718] tipc_sendmsg+0x51/0x70 [ 885.057970][T20718] ____sys_sendmsg+0x56f/0x860 [ 885.062703][T20718] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 885.067867][T20718] __sys_sendmmsg+0x338/0x680 [ 885.072515][T20718] ? __ia32_sys_sendmsg+0x90/0x90 [ 885.077513][T20718] ? __rcu_read_lock+0x50/0x50 [ 885.082241][T20718] ? __kasan_slab_free+0x1e2/0x220 [ 885.087316][T20718] ? __kasan_slab_free+0x168/0x220 [ 885.092390][T20718] ? slab_free_freelist_hook+0xd0/0x150 [ 885.097898][T20718] ? kmem_cache_free+0xac/0x5c0 [ 885.102713][T20718] ? do_sys_open+0x4a3/0x620 [ 885.107270][T20718] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 885.113302][T20718] ? do_sys_open+0x2fc/0x620 [ 885.117858][T20718] ? proc_fail_nth_write+0x166/0x200 [ 885.123123][T20718] ? _local_bh_enable+0x30/0x30 [ 885.127940][T20718] ? proc_fail_nth_read+0x1c0/0x1c0 [ 885.133105][T20718] ? proc_fail_nth_read+0x1c0/0x1c0 [ 885.138268][T20718] ? memset+0x1f/0x40 [ 885.142218][T20718] ? fsnotify+0x13a0/0x1460 [ 885.146697][T20718] ? __kernel_write+0x340/0x340 [ 885.151509][T20718] ? fsnotify+0x13a0/0x1460 [ 885.155978][T20718] ? security_file_permission+0x128/0x300 [ 885.161661][T20718] ? __sb_end_write+0xa4/0xf0 [ 885.166304][T20718] ? vfs_write+0x427/0x4f0 [ 885.170685][T20718] ? ksys_write+0x237/0x2a0 [ 885.175153][T20718] ? __ia32_sys_read+0x80/0x80 [ 885.179921][T20718] ? fput_many+0x42/0x1a0 [ 885.184217][T20718] __x64_sys_sendmmsg+0x9c/0xb0 [ 885.189035][T20718] do_syscall_64+0xcb/0x150 [ 885.193505][T20718] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 885.199360][T20718] RIP: 0033:0x45de59 [ 885.203221][T20718] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 885.222789][T20718] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 885.231165][T20718] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 885.239107][T20718] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 885.247061][T20718] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 885.255001][T20718] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 885.262938][T20718] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x9d44}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:11 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:11 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {0x6}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:11 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:11 executing program 1: r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f00000000c0)=0x4100108) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0xffffffe0}, 0x10) write(r1, &(0x7f0000000040)="240000001e005f0214fffffffffffff8070000000000000000000000060008000e000000", 0x24) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000080)) sendfile(r1, r0, &(0x7f0000000000)=0x81, 0x4) r2 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0xffffffe0}, 0x10) write(r5, &(0x7f0000000040)="240000001e005f0214fffffffffffff8070000000000000000000000060008000e000000", 0x24) ftruncate(r5, 0x100004004) sendfile(r2, r2, 0x0, 0x80001d00c0d3) 05:12:11 executing program 3 (fault-call:10 fault-nth:13): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:11 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {0x7}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:11 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0xa}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:11 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0xb}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:11 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0xc}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:11 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0xd}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 885.700036][T20757] FAULT_INJECTION: forcing a failure. [ 885.700036][T20757] name failslab, interval 1, probability 0, space 0, times 0 [ 885.713100][T20757] CPU: 0 PID: 20757 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 885.724664][T20757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 885.734700][T20757] Call Trace: [ 885.737982][T20757] dump_stack+0x1b0/0x21e [ 885.742309][T20757] ? devkmsg_release+0x11c/0x11c 05:12:11 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0xe}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 885.747230][T20757] ? show_regs_print_info+0x12/0x12 [ 885.752422][T20757] ? do_user_addr_fault+0x55c/0x9f0 [ 885.757610][T20757] should_fail+0x6fb/0x860 [ 885.762023][T20757] ? setup_fault_attr+0x2b0/0x2b0 [ 885.767034][T20757] ? setup_fault_attr+0x2b0/0x2b0 [ 885.772127][T20757] ? tipc_msg_build+0xcf5/0x1b20 [ 885.777050][T20757] should_failslab+0x5/0x20 [ 885.781528][T20757] __kmalloc_track_caller+0x5d/0x2b0 [ 885.786791][T20757] ? kmem_cache_alloc+0x1d5/0x250 [ 885.791795][T20757] ? tipc_msg_build+0xcf5/0x1b20 [ 885.796702][T20757] __alloc_skb+0xd1/0x4d0 [ 885.800999][T20757] tipc_msg_build+0xcf5/0x1b20 [ 885.805732][T20757] tipc_send_group_bcast+0x9c1/0xd50 [ 885.811014][T20757] ? __tipc_sendmsg+0x2d30/0x2d30 [ 885.816006][T20757] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 885.821341][T20757] ? wait_woken+0x250/0x250 [ 885.825814][T20757] ? path_openat+0x2258/0x4270 [ 885.830551][T20757] ? do_filp_open+0x1f7/0x430 [ 885.835209][T20757] ? do_sys_open+0x343/0x620 [ 885.839794][T20757] ? do_syscall_64+0xcb/0x150 [ 885.844493][T20757] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 885.850528][T20757] ? new_inode+0x25/0x1d0 [ 885.854832][T20757] ? proc_pid_make_inode+0x23/0x1d0 [ 885.860011][T20757] __tipc_sendmsg+0x400/0x2d30 [ 885.864739][T20757] ? avc_has_perm+0xbd/0x260 [ 885.869305][T20757] ? memset+0x1f/0x40 [ 885.873253][T20757] ? unwind_next_frame+0x1c07/0x22b0 [ 885.878511][T20757] ? local_bh_enable+0x20/0x20 [ 885.883244][T20757] ? arch_stack_walk+0x78/0xe0 [ 885.887975][T20757] ? _raw_spin_lock_bh+0xa4/0x180 [ 885.892964][T20757] ? _local_bh_enable+0x30/0x30 [ 885.897790][T20757] ? memset+0x1f/0x40 [ 885.901751][T20757] ? selinux_socket_sendmsg+0x10b/0x320 [ 885.907276][T20757] ? lock_sock_nested+0x25a/0x320 [ 885.912271][T20757] ? import_iovec+0x171/0x340 [ 885.916935][T20757] ? tipc_recvmsg+0x17c0/0x17c0 [ 885.921751][T20757] tipc_sendmsg+0x51/0x70 [ 885.926096][T20757] ____sys_sendmsg+0x56f/0x860 [ 885.930834][T20757] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 885.936001][T20757] __sys_sendmmsg+0x338/0x680 [ 885.940643][T20757] ? __ia32_sys_sendmsg+0x90/0x90 [ 885.945633][T20757] ? __rcu_read_lock+0x50/0x50 [ 885.950361][T20757] ? __kasan_slab_free+0x1e2/0x220 [ 885.955565][T20757] ? __kasan_slab_free+0x168/0x220 [ 885.960644][T20757] ? slab_free_freelist_hook+0xd0/0x150 [ 885.966152][T20757] ? kmem_cache_free+0xac/0x5c0 [ 885.970980][T20757] ? do_sys_open+0x4a3/0x620 [ 885.975552][T20757] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 885.981587][T20757] ? do_sys_open+0x2fc/0x620 [ 885.986142][T20757] ? proc_fail_nth_write+0x166/0x200 [ 885.991397][T20757] ? _local_bh_enable+0x30/0x30 [ 885.996215][T20757] ? proc_fail_nth_read+0x1c0/0x1c0 [ 886.001379][T20757] ? proc_fail_nth_read+0x1c0/0x1c0 [ 886.006542][T20757] ? memset+0x1f/0x40 [ 886.010489][T20757] ? fsnotify+0x13a0/0x1460 [ 886.014966][T20757] ? __kernel_write+0x340/0x340 [ 886.019781][T20757] ? fsnotify+0x13a0/0x1460 [ 886.024259][T20757] ? security_file_permission+0x128/0x300 [ 886.029957][T20757] ? __sb_end_write+0xa4/0xf0 [ 886.034630][T20757] ? vfs_write+0x427/0x4f0 [ 886.039012][T20757] ? ksys_write+0x237/0x2a0 [ 886.043479][T20757] ? __ia32_sys_read+0x80/0x80 [ 886.048206][T20757] ? fput_many+0x42/0x1a0 [ 886.052501][T20757] __x64_sys_sendmmsg+0x9c/0xb0 [ 886.057316][T20757] do_syscall_64+0xcb/0x150 [ 886.061799][T20757] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 886.067662][T20757] RIP: 0033:0x45de59 [ 886.071542][T20757] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 886.091206][T20757] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 886.099584][T20757] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 886.107524][T20757] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 886.115466][T20757] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 886.123407][T20757] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 886.131346][T20757] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0xab94}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:12 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0xf}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:12 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {0x8}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:12 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:12 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x9444}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:12:12 executing program 3 (fault-call:10 fault-nth:14): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:12 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x10}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:12 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x11}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:12 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {0x9}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 886.557919][T20790] FAULT_INJECTION: forcing a failure. [ 886.557919][T20790] name failslab, interval 1, probability 0, space 0, times 0 [ 886.570709][T20790] CPU: 0 PID: 20790 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 886.582235][T20790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 886.592273][T20790] Call Trace: [ 886.595672][T20790] dump_stack+0x1b0/0x21e [ 886.599993][T20790] ? devkmsg_release+0x11c/0x11c 05:12:12 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x12}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:12 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x18}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:12 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {0xa}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 886.604922][T20790] ? do_user_addr_fault+0x55c/0x9f0 [ 886.610110][T20790] ? show_regs_print_info+0x12/0x12 [ 886.615297][T20790] should_fail+0x6fb/0x860 [ 886.619706][T20790] ? setup_fault_attr+0x2b0/0x2b0 [ 886.624717][T20790] ? copy_user_enhanced_fast_string+0xe/0x30 [ 886.630680][T20790] ? __alloc_skb+0x88/0x4d0 [ 886.635169][T20790] should_failslab+0x5/0x20 [ 886.639773][T20790] kmem_cache_alloc+0x36/0x250 [ 886.644522][T20790] __alloc_skb+0x88/0x4d0 [ 886.648837][T20790] ? __check_object_size+0x2e5/0x3b0 [ 886.654124][T20790] tipc_msg_build+0xcf5/0x1b20 [ 886.658893][T20790] tipc_send_group_bcast+0x9c1/0xd50 [ 886.664167][T20790] ? __tipc_sendmsg+0x2d30/0x2d30 [ 886.669172][T20790] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 886.674526][T20790] ? wait_woken+0x250/0x250 [ 886.678996][T20790] ? path_openat+0x2258/0x4270 [ 886.683723][T20790] ? do_filp_open+0x1f7/0x430 [ 886.688364][T20790] ? do_sys_open+0x343/0x620 [ 886.692920][T20790] ? do_syscall_64+0xcb/0x150 [ 886.697561][T20790] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 886.703590][T20790] ? new_inode+0x25/0x1d0 [ 886.707890][T20790] ? proc_pid_make_inode+0x23/0x1d0 [ 886.713055][T20790] ? proc_tid_base_lookup+0x185/0x1f0 [ 886.718410][T20790] ? path_openat+0x2258/0x4270 [ 886.723144][T20790] ? do_filp_open+0x1f7/0x430 [ 886.727803][T20790] __tipc_sendmsg+0x400/0x2d30 [ 886.732536][T20790] ? avc_has_perm+0xbd/0x260 [ 886.737103][T20790] ? memset+0x1f/0x40 [ 886.741051][T20790] ? unwind_next_frame+0x1c07/0x22b0 [ 886.746305][T20790] ? local_bh_enable+0x20/0x20 [ 886.751044][T20790] ? arch_stack_walk+0x78/0xe0 [ 886.755772][T20790] ? _raw_spin_lock_bh+0xa4/0x180 [ 886.760777][T20790] ? _local_bh_enable+0x30/0x30 [ 886.765594][T20790] ? memset+0x1f/0x40 [ 886.769541][T20790] ? selinux_socket_sendmsg+0x10b/0x320 [ 886.775051][T20790] ? lock_sock_nested+0x25a/0x320 [ 886.780041][T20790] ? import_iovec+0x171/0x340 [ 886.784685][T20790] ? tipc_recvmsg+0x17c0/0x17c0 [ 886.789505][T20790] tipc_sendmsg+0x51/0x70 [ 886.793811][T20790] ____sys_sendmsg+0x56f/0x860 [ 886.798547][T20790] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 886.803745][T20790] __sys_sendmmsg+0x338/0x680 [ 886.808396][T20790] ? __ia32_sys_sendmsg+0x90/0x90 [ 886.813394][T20790] ? __rcu_read_lock+0x50/0x50 [ 886.818123][T20790] ? __kasan_slab_free+0x1e2/0x220 [ 886.823198][T20790] ? __kasan_slab_free+0x168/0x220 [ 886.828275][T20790] ? slab_free_freelist_hook+0xd0/0x150 [ 886.833784][T20790] ? kmem_cache_free+0xac/0x5c0 [ 886.838602][T20790] ? do_sys_open+0x4a3/0x620 [ 886.843159][T20790] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 886.849196][T20790] ? do_sys_open+0x2fc/0x620 [ 886.853762][T20790] ? proc_fail_nth_write+0x166/0x200 [ 886.859011][T20790] ? _local_bh_enable+0x30/0x30 [ 886.863827][T20790] ? proc_fail_nth_read+0x1c0/0x1c0 [ 886.868989][T20790] ? __perf_event_task_sched_out+0x1127/0x1250 [ 886.875107][T20790] ? proc_fail_nth_read+0x1c0/0x1c0 [ 886.880275][T20790] ? memset+0x1f/0x40 [ 886.884226][T20790] ? fsnotify+0x13a0/0x1460 [ 886.888693][T20790] ? __kernel_write+0x340/0x340 [ 886.893551][T20790] ? fsnotify+0x13a0/0x1460 [ 886.898023][T20790] ? security_file_permission+0x128/0x300 [ 886.903703][T20790] ? __sb_end_write+0xa4/0xf0 [ 886.908348][T20790] ? vfs_write+0x427/0x4f0 [ 886.912739][T20790] ? ksys_write+0x237/0x2a0 [ 886.917207][T20790] ? __ia32_sys_read+0x80/0x80 [ 886.921935][T20790] ? fput_many+0x42/0x1a0 [ 886.926229][T20790] __x64_sys_sendmmsg+0x9c/0xb0 [ 886.931050][T20790] do_syscall_64+0xcb/0x150 [ 886.935563][T20790] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 886.941455][T20790] RIP: 0033:0x45de59 [ 886.945316][T20790] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 886.964887][T20790] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 886.973263][T20790] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 886.981216][T20790] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 886.989154][T20790] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 886.997091][T20790] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 887.005027][T20790] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:13 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x25}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:13 executing program 1: r0 = perf_event_open(&(0x7f0000000500)={0x3, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000240)=0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x40000, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x80, 0x6, 0x0, 0x9, 0x0, 0x1f, 0x12e0, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0xfffffffffffffffc, 0x5}, 0x8212, 0x3, 0x1000, 0x2, 0x4, 0x5, 0x6}, r3, 0xf, r4, 0x3) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ftruncate(r1, 0x200004) r6 = dup3(r0, 0xffffffffffffffff, 0x80000) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ceac4ea1b2b4e053bd693a52efbabf68fb253dba237d6f1a0f01c251062b1069494d57583fc570b602d60416b70d2e56b6e0ed1b3d66198ad4e8fe1ecac915", @ANYRES16=r7, @ANYBLOB="08002cbd7000fedbdf25050000002700070073797374656d5f753a6f626a6563745f723a61756469745f73706f6f6c5f743a73300000050001000100000008000400e0000002"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendfile(r1, r1, 0x0, 0x80001d00c0d3) 05:12:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0xb9e4}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:13 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {0xb}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:13 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:13 executing program 3 (fault-call:10 fault-nth:15): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:13 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x27}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:13 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {0xc}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:13 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x30}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 887.419469][T20825] FAULT_INJECTION: forcing a failure. [ 887.419469][T20825] name failslab, interval 1, probability 0, space 0, times 0 [ 887.437365][T20825] CPU: 0 PID: 20825 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 887.448899][T20825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 887.458933][T20825] Call Trace: [ 887.462213][T20825] dump_stack+0x1b0/0x21e 05:12:13 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {0xd}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:13 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x3c}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:13 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x48}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 887.466532][T20825] ? devkmsg_release+0x11c/0x11c [ 887.471452][T20825] ? show_regs_print_info+0x12/0x12 [ 887.476646][T20825] ? do_user_addr_fault+0x55c/0x9f0 [ 887.481830][T20825] should_fail+0x6fb/0x860 [ 887.486234][T20825] ? setup_fault_attr+0x2b0/0x2b0 [ 887.491242][T20825] ? setup_fault_attr+0x2b0/0x2b0 [ 887.496256][T20825] ? tipc_msg_build+0xcf5/0x1b20 [ 887.501182][T20825] should_failslab+0x5/0x20 [ 887.505675][T20825] __kmalloc_track_caller+0x5d/0x2b0 [ 887.510946][T20825] ? kmem_cache_alloc+0x1d5/0x250 05:12:13 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xc365}, 0x0, 0x0, 0x1000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000100)={0x10}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000b, 0x12, r3, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000000)) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f0000000000)) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:12:13 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x4c}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 887.515959][T20825] ? tipc_msg_build+0xcf5/0x1b20 [ 887.520901][T20825] __alloc_skb+0xd1/0x4d0 [ 887.525220][T20825] tipc_msg_build+0xcf5/0x1b20 [ 887.529977][T20825] tipc_send_group_bcast+0x9c1/0xd50 [ 887.535254][T20825] ? __tipc_sendmsg+0x2d30/0x2d30 [ 887.540264][T20825] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 887.545621][T20825] ? wait_woken+0x250/0x250 [ 887.550115][T20825] ? path_openat+0x2258/0x4270 [ 887.554860][T20825] ? do_filp_open+0x1f7/0x430 [ 887.559516][T20825] ? do_sys_open+0x343/0x620 [ 887.564079][T20825] ? do_syscall_64+0xcb/0x150 [ 887.568727][T20825] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 887.574767][T20825] ? new_inode+0x25/0x1d0 [ 887.579079][T20825] ? proc_pid_make_inode+0x23/0x1d0 [ 887.584255][T20825] ? proc_tid_base_lookup+0x185/0x1f0 [ 887.589597][T20825] ? path_openat+0x2258/0x4270 [ 887.594337][T20825] ? do_filp_open+0x1f7/0x430 [ 887.599002][T20825] __tipc_sendmsg+0x400/0x2d30 [ 887.603748][T20825] ? avc_has_perm+0xbd/0x260 [ 887.608324][T20825] ? memset+0x1f/0x40 [ 887.612299][T20825] ? unwind_next_frame+0x1c07/0x22b0 [ 887.617638][T20825] ? local_bh_enable+0x20/0x20 [ 887.622375][T20825] ? arch_stack_walk+0x78/0xe0 [ 887.627107][T20825] ? _raw_spin_lock_bh+0xa4/0x180 [ 887.632183][T20825] ? _local_bh_enable+0x30/0x30 [ 887.637020][T20825] ? memset+0x1f/0x40 [ 887.640988][T20825] ? selinux_socket_sendmsg+0x10b/0x320 [ 887.646510][T20825] ? lock_sock_nested+0x25a/0x320 [ 887.651501][T20825] ? import_iovec+0x171/0x340 [ 887.656143][T20825] ? tipc_recvmsg+0x17c0/0x17c0 [ 887.660956][T20825] tipc_sendmsg+0x51/0x70 [ 887.665251][T20825] ____sys_sendmsg+0x56f/0x860 [ 887.669982][T20825] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 887.675148][T20825] __sys_sendmmsg+0x338/0x680 [ 887.679807][T20825] ? __ia32_sys_sendmsg+0x90/0x90 [ 887.684795][T20825] ? __rcu_read_lock+0x50/0x50 [ 887.689521][T20825] ? __kasan_slab_free+0x1e2/0x220 [ 887.694597][T20825] ? __kasan_slab_free+0x168/0x220 [ 887.699674][T20825] ? slab_free_freelist_hook+0xd0/0x150 [ 887.705198][T20825] ? kmem_cache_free+0xac/0x5c0 [ 887.710014][T20825] ? do_sys_open+0x4a3/0x620 [ 887.714581][T20825] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 887.720614][T20825] ? do_sys_open+0x2fc/0x620 [ 887.725183][T20825] ? proc_fail_nth_write+0x166/0x200 [ 887.730439][T20825] ? _local_bh_enable+0x30/0x30 [ 887.735256][T20825] ? proc_fail_nth_read+0x1c0/0x1c0 [ 887.740420][T20825] ? proc_fail_nth_read+0x1c0/0x1c0 [ 887.745586][T20825] ? memset+0x1f/0x40 [ 887.749539][T20825] ? fsnotify+0x13a0/0x1460 [ 887.754017][T20825] ? __kernel_write+0x340/0x340 [ 887.758841][T20825] ? fsnotify+0x13a0/0x1460 [ 887.763317][T20825] ? security_file_permission+0x128/0x300 [ 887.769001][T20825] ? __sb_end_write+0xa4/0xf0 [ 887.773648][T20825] ? vfs_write+0x427/0x4f0 [ 887.778080][T20825] ? ksys_write+0x237/0x2a0 [ 887.782548][T20825] ? __ia32_sys_read+0x80/0x80 [ 887.787277][T20825] ? fput_many+0x42/0x1a0 [ 887.791611][T20825] __x64_sys_sendmmsg+0x9c/0xb0 [ 887.796428][T20825] do_syscall_64+0xcb/0x150 [ 887.800899][T20825] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 887.806766][T20825] RIP: 0033:0x45de59 [ 887.810634][T20825] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 887.830205][T20825] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 887.838619][T20825] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 887.846596][T20825] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 887.854538][T20825] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 887.862478][T20825] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f [ 887.870419][T20825] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:13 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x68}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:13 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {0xe}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:13 executing program 1: r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xe, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r1, 0x200004) sendfile(r1, r1, 0x0, 0x80001d00c0d3) r4 = syz_io_uring_setup(0x2aeb, &(0x7f0000000080)={0x0, 0xfc08, 0x20, 0xfffffffe, 0x3ca, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) ioctl$FIOCLEX(r4, 0x5451) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x8001) 05:12:14 executing program 3 (fault-call:10 fault-nth:16): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0xc834}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:14 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:14 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {0xf}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:14 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x6c}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:14 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0xffffffe0}, 0x10) write(r1, &(0x7f0000000040)="240000001e005f0214fffffffffffff8070000000000000000000000060008000e000000", 0x24) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x1, 0x0, 0x5, 0xcf6, {{0x22, 0x4, 0x0, 0xe, 0x88, 0x64, 0x0, 0x9e, 0x29, 0x0, @local, @empty, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x63, 0x1, 0x5, [{@empty, 0x86}]}, @noop, @timestamp_addr={0x44, 0x24, 0xa6, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x38}, 0xfffffffc}, {@remote, 0x6}, {@multicast1, 0x7}, {@broadcast, 0x7e1}]}, @lsrr={0x83, 0xf, 0x7c, [@dev={0xac, 0x14, 0x14, 0x2b}, @multicast2, @broadcast]}, @ssrr={0x89, 0x13, 0x7c, [@remote, @local, @loopback, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x1c, 0xf9, 0x1, 0x6, [{@remote, 0x3}, {@remote, 0x101}, {@local, 0x5}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', r2, 0x4, 0x7f, 0x0, 0x62, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7, 0x10, 0x2}}) r3 = socket(0x10, 0x3, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:12:14 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x74}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:14 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {0x10}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 888.240626][T20887] tproxy_tg6_check: 33 callbacks suppressed [ 888.240630][T20887] xt_TPROXY: Can be used only with -p tcp or -p udp [ 888.241421][T20888] FAULT_INJECTION: forcing a failure. [ 888.241421][T20888] name failslab, interval 1, probability 0, space 0, times 0 [ 888.269964][T20894] xt_TPROXY: Can be used only with -p tcp or -p udp [ 888.276739][T20888] CPU: 0 PID: 20888 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 888.288267][T20888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 888.298367][T20888] Call Trace: [ 888.301637][T20888] dump_stack+0x1b0/0x21e [ 888.305946][T20888] ? devkmsg_release+0x11c/0x11c [ 888.310862][T20888] ? show_regs_print_info+0x12/0x12 [ 888.316038][T20888] ? do_user_addr_fault+0x55c/0x9f0 [ 888.321212][T20888] should_fail+0x6fb/0x860 [ 888.325606][T20888] ? setup_fault_attr+0x2b0/0x2b0 [ 888.330608][T20888] ? tipc_msg_build+0xcf5/0x1b20 [ 888.335526][T20888] should_failslab+0x5/0x20 [ 888.340011][T20888] __kmalloc_track_caller+0x5d/0x2b0 [ 888.345272][T20888] ? kmem_cache_alloc+0x1d5/0x250 [ 888.350276][T20888] ? tipc_msg_build+0xcf5/0x1b20 [ 888.355192][T20888] __alloc_skb+0xd1/0x4d0 [ 888.359505][T20888] tipc_msg_build+0xcf5/0x1b20 [ 888.364532][T20888] tipc_send_group_bcast+0x9c1/0xd50 [ 888.369809][T20888] ? __tipc_sendmsg+0x2d30/0x2d30 [ 888.374841][T20888] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 888.380197][T20888] ? wait_woken+0x250/0x250 [ 888.384684][T20888] ? path_openat+0x2258/0x4270 [ 888.389431][T20888] ? do_filp_open+0x1f7/0x430 [ 888.394088][T20888] ? do_sys_open+0x343/0x620 [ 888.398657][T20888] ? do_syscall_64+0xcb/0x150 [ 888.403314][T20888] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 888.409361][T20888] ? new_inode+0x25/0x1d0 [ 888.413669][T20888] ? proc_pid_make_inode+0x23/0x1d0 [ 888.418886][T20888] ? proc_tid_base_lookup+0x185/0x1f0 [ 888.424284][T20888] ? path_openat+0x2258/0x4270 [ 888.429025][T20888] ? do_filp_open+0x1f7/0x430 [ 888.433723][T20888] __tipc_sendmsg+0x400/0x2d30 [ 888.438472][T20888] ? avc_has_perm+0xbd/0x260 [ 888.443042][T20888] ? memset+0x1f/0x40 [ 888.447016][T20888] ? unwind_next_frame+0x1c07/0x22b0 [ 888.452282][T20888] ? local_bh_enable+0x20/0x20 [ 888.457026][T20888] ? arch_stack_walk+0x78/0xe0 [ 888.461768][T20888] ? _raw_spin_lock_bh+0xa4/0x180 [ 888.466768][T20888] ? _local_bh_enable+0x30/0x30 [ 888.471596][T20888] ? memset+0x1f/0x40 [ 888.475559][T20888] ? selinux_socket_sendmsg+0x10b/0x320 [ 888.481129][T20888] ? lock_sock_nested+0x25a/0x320 [ 888.486131][T20888] ? import_iovec+0x171/0x340 [ 888.490789][T20888] ? tipc_recvmsg+0x17c0/0x17c0 [ 888.495614][T20888] tipc_sendmsg+0x51/0x70 [ 888.499923][T20888] ____sys_sendmsg+0x56f/0x860 [ 888.504664][T20888] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 888.509841][T20888] __sys_sendmmsg+0x338/0x680 [ 888.514500][T20888] ? __ia32_sys_sendmsg+0x90/0x90 [ 888.519506][T20888] ? __rcu_read_lock+0x50/0x50 [ 888.524280][T20888] ? __kasan_slab_free+0x1e2/0x220 [ 888.529370][T20888] ? __kasan_slab_free+0x168/0x220 [ 888.534464][T20888] ? slab_free_freelist_hook+0xd0/0x150 [ 888.539986][T20888] ? kmem_cache_free+0xac/0x5c0 [ 888.544813][T20888] ? do_sys_open+0x4a3/0x620 [ 888.549382][T20888] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 888.555425][T20888] ? do_sys_open+0x2fc/0x620 [ 888.560031][T20888] ? proc_fail_nth_write+0x166/0x200 [ 888.565291][T20888] ? _local_bh_enable+0x30/0x30 [ 888.570120][T20888] ? proc_fail_nth_read+0x1c0/0x1c0 [ 888.575293][T20888] ? proc_fail_nth_read+0x1c0/0x1c0 [ 888.580644][T20888] ? memset+0x1f/0x40 [ 888.584953][T20888] ? fsnotify+0x13a0/0x1460 [ 888.589436][T20888] ? __kernel_write+0x340/0x340 [ 888.594265][T20888] ? fsnotify+0x13a0/0x1460 [ 888.598750][T20888] ? security_file_permission+0x128/0x300 [ 888.604738][T20888] ? __sb_end_write+0xa4/0xf0 [ 888.609392][T20888] ? vfs_write+0x427/0x4f0 [ 888.613787][T20888] ? ksys_write+0x237/0x2a0 [ 888.618266][T20888] ? __ia32_sys_read+0x80/0x80 [ 888.623005][T20888] ? fput_many+0x42/0x1a0 [ 888.627352][T20888] __x64_sys_sendmmsg+0x9c/0xb0 [ 888.632182][T20888] do_syscall_64+0xcb/0x150 [ 888.636666][T20888] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 888.642535][T20888] RIP: 0033:0x45de59 [ 888.646406][T20888] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 888.665988][T20888] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 888.674417][T20888] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 888.682367][T20888] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 05:12:14 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {0x11}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:14 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x7a}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 888.690318][T20888] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 888.698271][T20888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 888.706221][T20888] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:14 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd70000000"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:14 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 888.782010][T20906] xt_TPROXY: Can be used only with -p tcp or -p udp [ 888.793199][T20914] xt_TPROXY: Can be used only with -p tcp or -p udp 05:12:14 executing program 3 (fault-call:10 fault-nth:17): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:14 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd70000000"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:14 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {0x12}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:14 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:14 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) fstat(r3, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) io_destroy(0x0) 05:12:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0xd684}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:14 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:14 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {0x25}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 889.056605][T20924] xt_TPROXY: Can be used only with -p tcp or -p udp [ 889.058585][T20930] FAULT_INJECTION: forcing a failure. [ 889.058585][T20930] name failslab, interval 1, probability 0, space 0, times 0 [ 889.076527][T20930] CPU: 1 PID: 20930 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 889.084883][T20935] xt_TPROXY: Can be used only with -p tcp or -p udp [ 889.088270][T20930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 05:12:14 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {0x48}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:14 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 889.088275][T20930] Call Trace: [ 889.088289][T20930] dump_stack+0x1b0/0x21e [ 889.088297][T20930] ? devkmsg_release+0x11c/0x11c [ 889.088305][T20930] ? show_regs_print_info+0x12/0x12 [ 889.088315][T20930] ? do_user_addr_fault+0x55c/0x9f0 [ 889.088324][T20930] should_fail+0x6fb/0x860 [ 889.088331][T20930] ? setup_fault_attr+0x2b0/0x2b0 [ 889.088339][T20930] ? setup_fault_attr+0x2b0/0x2b0 [ 889.088349][T20930] ? tipc_msg_build+0xcf5/0x1b20 [ 889.088357][T20930] should_failslab+0x5/0x20 05:12:14 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {0x4c}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:14 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {0x60}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 889.088365][T20930] __kmalloc_track_caller+0x5d/0x2b0 [ 889.088370][T20930] ? kmem_cache_alloc+0x1d5/0x250 [ 889.088381][T20930] ? tipc_msg_build+0xcf5/0x1b20 [ 889.102636][T20938] xt_TPROXY: Can be used only with -p tcp or -p udp [ 889.105092][T20930] __alloc_skb+0xd1/0x4d0 [ 889.105102][T20930] tipc_msg_build+0xcf5/0x1b20 [ 889.105115][T20930] tipc_send_group_bcast+0x9c1/0xd50 [ 889.124132][T20942] xt_TPROXY: Can be used only with -p tcp or -p udp [ 889.128070][T20930] ? __tipc_sendmsg+0x2d30/0x2d30 [ 889.128079][T20930] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 889.128089][T20930] ? wait_woken+0x250/0x250 [ 889.128101][T20930] ? path_openat+0x2258/0x4270 [ 889.140870][T20945] xt_TPROXY: Can be used only with -p tcp or -p udp [ 889.142637][T20930] ? do_filp_open+0x1f7/0x430 [ 889.142646][T20930] ? do_sys_open+0x343/0x620 [ 889.142651][T20930] ? do_syscall_64+0xcb/0x150 [ 889.142663][T20930] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 889.166735][T20948] xt_TPROXY: Can be used only with -p tcp or -p udp [ 889.167665][T20930] ? new_inode+0x25/0x1d0 [ 889.167673][T20930] ? proc_pid_make_inode+0x23/0x1d0 [ 889.167681][T20930] ? proc_tid_base_lookup+0x185/0x1f0 [ 889.167686][T20930] ? path_openat+0x2258/0x4270 [ 889.167691][T20930] ? do_filp_open+0x1f7/0x430 [ 889.167702][T20930] __tipc_sendmsg+0x400/0x2d30 [ 889.277746][T20930] ? avc_has_perm+0xbd/0x260 [ 889.282319][T20930] ? memset+0x1f/0x40 [ 889.286275][T20930] ? unwind_next_frame+0x1c07/0x22b0 [ 889.291541][T20930] ? local_bh_enable+0x20/0x20 [ 889.296281][T20930] ? arch_stack_walk+0x78/0xe0 [ 889.301163][T20930] ? _raw_spin_lock_bh+0xa4/0x180 [ 889.306165][T20930] ? _local_bh_enable+0x30/0x30 [ 889.310994][T20930] ? memset+0x1f/0x40 [ 889.314951][T20930] ? selinux_socket_sendmsg+0x10b/0x320 [ 889.320477][T20930] ? lock_sock_nested+0x25a/0x320 [ 889.325483][T20930] ? import_iovec+0x171/0x340 [ 889.330140][T20930] ? tipc_recvmsg+0x17c0/0x17c0 [ 889.334981][T20930] tipc_sendmsg+0x51/0x70 [ 889.339299][T20930] ____sys_sendmsg+0x56f/0x860 [ 889.344042][T20930] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 889.349225][T20930] __sys_sendmmsg+0x338/0x680 [ 889.353880][T20930] ? __ia32_sys_sendmsg+0x90/0x90 [ 889.358884][T20930] ? __rcu_read_lock+0x50/0x50 [ 889.363629][T20930] ? __kasan_slab_free+0x1e2/0x220 [ 889.368713][T20930] ? __kasan_slab_free+0x168/0x220 [ 889.373804][T20930] ? slab_free_freelist_hook+0xd0/0x150 [ 889.379327][T20930] ? kmem_cache_free+0xac/0x5c0 [ 889.384152][T20930] ? do_sys_open+0x4a3/0x620 [ 889.388717][T20930] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 889.394887][T20930] ? do_sys_open+0x2fc/0x620 [ 889.399463][T20930] ? proc_fail_nth_write+0x166/0x200 [ 889.404728][T20930] ? _local_bh_enable+0x30/0x30 [ 889.409575][T20930] ? proc_fail_nth_read+0x1c0/0x1c0 [ 889.414824][T20930] ? proc_fail_nth_read+0x1c0/0x1c0 [ 889.420207][T20930] ? memset+0x1f/0x40 [ 889.424171][T20930] ? fsnotify+0x13a0/0x1460 [ 889.428830][T20930] ? __kernel_write+0x340/0x340 [ 889.433655][T20930] ? fsnotify+0x13a0/0x1460 [ 889.438248][T20930] ? security_file_permission+0x128/0x300 [ 889.443950][T20930] ? __sb_end_write+0xa4/0xf0 [ 889.448615][T20930] ? vfs_write+0x427/0x4f0 [ 889.453010][T20930] ? ksys_write+0x237/0x2a0 [ 889.457597][T20930] ? __ia32_sys_read+0x80/0x80 [ 889.462338][T20930] ? fput_many+0x42/0x1a0 [ 889.466646][T20930] __x64_sys_sendmmsg+0x9c/0xb0 [ 889.471474][T20930] do_syscall_64+0xcb/0x150 [ 889.476079][T20930] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 889.481954][T20930] RIP: 0033:0x45de59 [ 889.485924][T20930] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 889.505508][T20930] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 889.514022][T20930] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 889.521980][T20930] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 889.530042][T20930] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 889.537992][T20930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000011 [ 889.545942][T20930] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:15 executing program 3 (fault-call:10 fault-nth:18): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:15 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:15 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {0x68}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:15 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd70000000"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:15 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0xe4d4}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:15 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) write$P9_RATTACH(r0, &(0x7f0000000000)={0x14, 0x69, 0x1, {0x40, 0x3, 0x5}}, 0x14) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) 05:12:15 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {0x6c}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:15 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:15 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 889.890362][T20978] FAULT_INJECTION: forcing a failure. [ 889.890362][T20978] name failslab, interval 1, probability 0, space 0, times 0 [ 889.903292][T20978] CPU: 1 PID: 20978 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 889.915079][T20978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 889.925122][T20978] Call Trace: [ 889.928399][T20978] dump_stack+0x1b0/0x21e [ 889.932713][T20978] ? devkmsg_release+0x11c/0x11c [ 889.937630][T20978] ? do_user_addr_fault+0x55c/0x9f0 [ 889.942803][T20978] ? show_regs_print_info+0x12/0x12 [ 889.947983][T20978] should_fail+0x6fb/0x860 [ 889.952381][T20978] ? setup_fault_attr+0x2b0/0x2b0 [ 889.957387][T20978] ? copy_user_enhanced_fast_string+0xe/0x30 [ 889.963544][T20978] ? __alloc_skb+0x88/0x4d0 [ 889.968112][T20978] should_failslab+0x5/0x20 [ 889.972604][T20978] kmem_cache_alloc+0x36/0x250 [ 889.977360][T20978] __alloc_skb+0x88/0x4d0 [ 889.981664][T20978] ? __check_object_size+0x2e5/0x3b0 [ 889.986935][T20978] tipc_msg_build+0xcf5/0x1b20 [ 889.991680][T20978] tipc_send_group_bcast+0x9c1/0xd50 [ 889.997051][T20978] ? __tipc_sendmsg+0x2d30/0x2d30 [ 890.002049][T20978] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 890.007396][T20978] ? wait_woken+0x250/0x250 [ 890.011876][T20978] ? path_openat+0x2258/0x4270 [ 890.016609][T20978] ? do_filp_open+0x1f7/0x430 [ 890.021257][T20978] ? do_sys_open+0x343/0x620 [ 890.025821][T20978] ? do_syscall_64+0xcb/0x150 [ 890.030479][T20978] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 890.036537][T20978] ? new_inode+0x25/0x1d0 [ 890.040845][T20978] ? proc_pid_make_inode+0x23/0x1d0 [ 890.046017][T20978] ? proc_tid_base_lookup+0x185/0x1f0 [ 890.051368][T20978] ? path_openat+0x2258/0x4270 [ 890.056110][T20978] ? do_filp_open+0x1f7/0x430 [ 890.060892][T20978] __tipc_sendmsg+0x400/0x2d30 [ 890.065720][T20978] ? avc_has_perm+0xbd/0x260 [ 890.070288][T20978] ? memset+0x1f/0x40 [ 890.074245][T20978] ? unwind_next_frame+0x1c07/0x22b0 [ 890.079501][T20978] ? local_bh_enable+0x20/0x20 [ 890.084239][T20978] ? arch_stack_walk+0x78/0xe0 [ 890.088978][T20978] ? _raw_spin_lock_bh+0xa4/0x180 [ 890.093981][T20978] ? _local_bh_enable+0x30/0x30 [ 890.098813][T20978] ? memset+0x1f/0x40 [ 890.102773][T20978] ? selinux_socket_sendmsg+0x10b/0x320 [ 890.108292][T20978] ? lock_sock_nested+0x25a/0x320 [ 890.113293][T20978] ? import_iovec+0x171/0x340 [ 890.117946][T20978] ? tipc_recvmsg+0x17c0/0x17c0 [ 890.122770][T20978] tipc_sendmsg+0x51/0x70 [ 890.127204][T20978] ____sys_sendmsg+0x56f/0x860 [ 890.131948][T20978] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 890.137132][T20978] __sys_sendmmsg+0x338/0x680 [ 890.141792][T20978] ? __ia32_sys_sendmsg+0x90/0x90 [ 890.146791][T20978] ? __rcu_read_lock+0x50/0x50 [ 890.151617][T20978] ? __kasan_slab_free+0x1e2/0x220 [ 890.156698][T20978] ? __kasan_slab_free+0x168/0x220 [ 890.161842][T20978] ? slab_free_freelist_hook+0xd0/0x150 [ 890.167537][T20978] ? kmem_cache_free+0xac/0x5c0 [ 890.172376][T20978] ? do_sys_open+0x4a3/0x620 [ 890.176995][T20978] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 890.183163][T20978] ? do_sys_open+0x2fc/0x620 [ 890.187821][T20978] ? proc_fail_nth_write+0x166/0x200 [ 890.193079][T20978] ? _raw_spin_lock+0x170/0x170 [ 890.197926][T20978] ? proc_fail_nth_read+0x1c0/0x1c0 [ 890.203100][T20978] ? proc_fail_nth_read+0x1c0/0x1c0 [ 890.208275][T20978] ? memset+0x1f/0x40 [ 890.212283][T20978] ? fsnotify+0x13a0/0x1460 [ 890.216853][T20978] ? __kernel_write+0x340/0x340 [ 890.221679][T20978] ? fsnotify+0x13a0/0x1460 [ 890.226170][T20978] ? security_file_permission+0x128/0x300 [ 890.231880][T20978] ? __sb_end_write+0xa4/0xf0 [ 890.236531][T20978] ? vfs_write+0x427/0x4f0 [ 890.240927][T20978] ? ksys_write+0x237/0x2a0 [ 890.245573][T20978] ? __ia32_sys_read+0x80/0x80 [ 890.250318][T20978] ? fput_many+0x42/0x1a0 [ 890.254631][T20978] __x64_sys_sendmmsg+0x9c/0xb0 [ 890.259503][T20978] do_syscall_64+0xcb/0x150 [ 890.263994][T20978] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 890.269956][T20978] RIP: 0033:0x45de59 05:12:16 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {0x74}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b0091"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 890.273834][T20978] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 890.293418][T20978] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 890.301851][T20978] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 890.309804][T20978] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 890.317865][T20978] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 890.325820][T20978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 890.333771][T20978] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:16 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 890.380625][T20989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=361 sclass=netlink_route_socket pid=20989 comm=syz-executor.1 05:12:16 executing program 3 (fault-call:10 fault-nth:19): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:16 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {0x7a}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:16 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:16 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0xffffffe0}, 0x10) write(r3, &(0x7f0000000040)="240000001e005f0214fffffffffffff8070000000000000000000000060008000e000000", 0x24) ftruncate(r3, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:12:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b0091"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0xf324}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) [ 890.702466][T21012] FAULT_INJECTION: forcing a failure. [ 890.702466][T21012] name failslab, interval 1, probability 0, space 0, times 0 [ 890.716054][T21012] CPU: 0 PID: 21012 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 890.727591][T21012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 890.737719][T21012] Call Trace: [ 890.740996][T21012] dump_stack+0x1b0/0x21e [ 890.745317][T21012] ? devkmsg_release+0x11c/0x11c [ 890.750237][T21012] ? show_regs_print_info+0x12/0x12 [ 890.755440][T21012] ? do_user_addr_fault+0x55c/0x9f0 [ 890.760618][T21012] should_fail+0x6fb/0x860 [ 890.765018][T21012] ? setup_fault_attr+0x2b0/0x2b0 [ 890.770034][T21012] ? setup_fault_attr+0x2b0/0x2b0 [ 890.775090][T21012] ? tipc_msg_build+0xcf5/0x1b20 [ 890.780132][T21012] should_failslab+0x5/0x20 [ 890.784614][T21012] __kmalloc_track_caller+0x5d/0x2b0 [ 890.789876][T21012] ? kmem_cache_alloc+0x1d5/0x250 [ 890.794876][T21012] ? tipc_msg_build+0xcf5/0x1b20 [ 890.799789][T21012] __alloc_skb+0xd1/0x4d0 [ 890.804096][T21012] tipc_msg_build+0xcf5/0x1b20 [ 890.808978][T21012] tipc_send_group_bcast+0x9c1/0xd50 [ 890.814257][T21012] ? __tipc_sendmsg+0x2d30/0x2d30 [ 890.819448][T21012] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 890.824806][T21012] ? wait_woken+0x250/0x250 [ 890.829294][T21012] ? path_openat+0x2258/0x4270 [ 890.834037][T21012] ? do_filp_open+0x1f7/0x430 [ 890.838692][T21012] ? do_sys_open+0x343/0x620 [ 890.843275][T21012] ? do_syscall_64+0xcb/0x150 [ 890.847934][T21012] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 890.853979][T21012] ? new_inode+0x25/0x1d0 [ 890.858285][T21012] ? proc_pid_make_inode+0x23/0x1d0 [ 890.863465][T21012] ? proc_tid_base_lookup+0x185/0x1f0 [ 890.868811][T21012] ? path_openat+0x2258/0x4270 [ 890.873548][T21012] ? do_filp_open+0x1f7/0x430 [ 890.878293][T21012] __tipc_sendmsg+0x400/0x2d30 [ 890.883033][T21012] ? avc_has_perm+0xbd/0x260 [ 890.887598][T21012] ? memset+0x1f/0x40 [ 890.891557][T21012] ? unwind_next_frame+0x1c07/0x22b0 [ 890.896822][T21012] ? local_bh_enable+0x20/0x20 [ 890.901560][T21012] ? arch_stack_walk+0x78/0xe0 [ 890.906301][T21012] ? _raw_spin_lock_bh+0xa4/0x180 [ 890.911302][T21012] ? _local_bh_enable+0x30/0x30 [ 890.916127][T21012] ? memset+0x1f/0x40 [ 890.920090][T21012] ? selinux_socket_sendmsg+0x10b/0x320 [ 890.925612][T21012] ? lock_sock_nested+0x25a/0x320 [ 890.930702][T21012] ? import_iovec+0x171/0x340 [ 890.935359][T21012] ? tipc_recvmsg+0x17c0/0x17c0 [ 890.940185][T21012] tipc_sendmsg+0x51/0x70 [ 890.944638][T21012] ____sys_sendmsg+0x56f/0x860 [ 890.949390][T21012] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 890.954571][T21012] __sys_sendmmsg+0x338/0x680 [ 890.959232][T21012] ? __ia32_sys_sendmsg+0x90/0x90 [ 890.964244][T21012] ? __rcu_read_lock+0x50/0x50 [ 890.968992][T21012] ? __kasan_slab_free+0x1e2/0x220 [ 890.974085][T21012] ? __kasan_slab_free+0x168/0x220 [ 890.979177][T21012] ? slab_free_freelist_hook+0xd0/0x150 [ 890.984701][T21012] ? kmem_cache_free+0xac/0x5c0 [ 890.989532][T21012] ? do_sys_open+0x4a3/0x620 [ 890.994101][T21012] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 891.000142][T21012] ? do_sys_open+0x2fc/0x620 [ 891.004727][T21012] ? proc_fail_nth_write+0x166/0x200 [ 891.010016][T21012] ? _local_bh_enable+0x30/0x30 [ 891.014847][T21012] ? proc_fail_nth_read+0x1c0/0x1c0 [ 891.020022][T21012] ? proc_fail_nth_read+0x1c0/0x1c0 [ 891.025400][T21012] ? memset+0x1f/0x40 [ 891.029361][T21012] ? fsnotify+0x13a0/0x1460 [ 891.033930][T21012] ? __kernel_write+0x340/0x340 [ 891.038758][T21012] ? fsnotify+0x13a0/0x1460 [ 891.043241][T21012] ? security_file_permission+0x128/0x300 [ 891.049053][T21012] ? __sb_end_write+0xa4/0xf0 [ 891.053707][T21012] ? vfs_write+0x427/0x4f0 [ 891.058103][T21012] ? ksys_write+0x237/0x2a0 [ 891.062586][T21012] ? __ia32_sys_read+0x80/0x80 [ 891.067324][T21012] ? fput_many+0x42/0x1a0 [ 891.071632][T21012] __x64_sys_sendmmsg+0x9c/0xb0 [ 891.076460][T21012] do_syscall_64+0xcb/0x150 [ 891.080961][T21012] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 891.086915][T21012] RIP: 0033:0x45de59 [ 891.090787][T21012] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 891.110370][T21012] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 891.118756][T21012] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 891.126707][T21012] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 891.134655][T21012] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 891.142636][T21012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 05:12:16 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:16 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 891.150583][T21012] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:16 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:17 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {0x2}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:17 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:17 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {0x3}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:17 executing program 3 (fault-call:10 fault-nth:20): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:17 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b0091"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:17 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:17 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {0x4}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:17 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f00000001c0)={0xe95, {{0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, [], 0x1}, 0x6}}}, 0x88) r3 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x448081, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="7db1f4b95d86200ff45c5a375236229dd8b3d6fdf17ac2942af54365acbdce38607a6966f0f42b90e62235f6b6842f076940668faba2feada13e3755f8e00e4a3026bbfe061a09a2d27f3131888df8f6868298e3a4abd68fff5652b948398deef6f46a7835d6bac38c", @ANYRES16=0x0, @ANYBLOB="00032abd7000fddbdf250700000008000c000100000006000b000000000006000b00010000000800020005000000080004000300000014000600fc00000000000000000000000000000006000b0006000000"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x40) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:12:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x10174}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:17 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {0x5}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:17 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:17 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 891.524885][T21058] FAULT_INJECTION: forcing a failure. [ 891.524885][T21058] name failslab, interval 1, probability 0, space 0, times 0 [ 891.541936][T21058] CPU: 0 PID: 21058 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 891.553573][T21058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 891.563621][T21058] Call Trace: [ 891.566911][T21058] dump_stack+0x1b0/0x21e [ 891.571240][T21058] ? devkmsg_release+0x11c/0x11c [ 891.576157][T21058] ? show_regs_print_info+0x12/0x12 [ 891.581473][T21058] ? do_user_addr_fault+0x55c/0x9f0 [ 891.586781][T21058] should_fail+0x6fb/0x860 [ 891.591190][T21058] ? setup_fault_attr+0x2b0/0x2b0 [ 891.596192][T21058] ? setup_fault_attr+0x2b0/0x2b0 [ 891.601196][T21058] ? tipc_msg_build+0xcf5/0x1b20 [ 891.606111][T21058] should_failslab+0x5/0x20 [ 891.610594][T21058] __kmalloc_track_caller+0x5d/0x2b0 [ 891.615868][T21058] ? kmem_cache_alloc+0x1d5/0x250 [ 891.620883][T21058] ? tipc_msg_build+0xcf5/0x1b20 [ 891.625795][T21058] __alloc_skb+0xd1/0x4d0 [ 891.630105][T21058] tipc_msg_build+0xcf5/0x1b20 [ 891.634982][T21058] tipc_send_group_bcast+0x9c1/0xd50 [ 891.640263][T21058] ? __tipc_sendmsg+0x2d30/0x2d30 [ 891.645269][T21058] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 891.650707][T21058] ? wait_woken+0x250/0x250 [ 891.655195][T21058] ? path_openat+0x2258/0x4270 [ 891.659934][T21058] ? do_filp_open+0x1f7/0x430 [ 891.664588][T21058] ? do_sys_open+0x343/0x620 [ 891.669294][T21058] ? do_syscall_64+0xcb/0x150 [ 891.673948][T21058] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 891.679988][T21058] ? new_inode+0x25/0x1d0 [ 891.684294][T21058] ? proc_pid_make_inode+0x23/0x1d0 [ 891.689469][T21058] ? proc_tid_base_lookup+0x185/0x1f0 [ 891.694817][T21058] ? path_openat+0x2258/0x4270 [ 891.699556][T21058] ? do_filp_open+0x1f7/0x430 [ 891.704245][T21058] __tipc_sendmsg+0x400/0x2d30 [ 891.708995][T21058] ? avc_has_perm+0xbd/0x260 [ 891.713565][T21058] ? memset+0x1f/0x40 [ 891.717526][T21058] ? unwind_next_frame+0x1c07/0x22b0 [ 891.722964][T21058] ? local_bh_enable+0x20/0x20 [ 891.727718][T21058] ? arch_stack_walk+0x78/0xe0 [ 891.732458][T21058] ? _raw_spin_lock_bh+0xa4/0x180 [ 891.737459][T21058] ? _local_bh_enable+0x30/0x30 [ 891.742284][T21058] ? memset+0x1f/0x40 [ 891.746240][T21058] ? selinux_socket_sendmsg+0x10b/0x320 [ 891.751767][T21058] ? lock_sock_nested+0x25a/0x320 [ 891.756803][T21058] ? import_iovec+0x171/0x340 [ 891.761465][T21058] ? tipc_recvmsg+0x17c0/0x17c0 [ 891.766291][T21058] tipc_sendmsg+0x51/0x70 [ 891.770642][T21058] ____sys_sendmsg+0x56f/0x860 [ 891.775380][T21058] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 891.780555][T21058] __sys_sendmmsg+0x338/0x680 [ 891.785343][T21058] ? __ia32_sys_sendmsg+0x90/0x90 [ 891.790351][T21058] ? __rcu_read_lock+0x50/0x50 [ 891.795091][T21058] ? __kasan_slab_free+0x1e2/0x220 [ 891.800377][T21058] ? __kasan_slab_free+0x168/0x220 [ 891.805554][T21058] ? slab_free_freelist_hook+0xd0/0x150 [ 891.811127][T21058] ? kmem_cache_free+0xac/0x5c0 [ 891.816046][T21058] ? do_sys_open+0x4a3/0x620 [ 891.820618][T21058] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 891.826664][T21058] ? do_sys_open+0x2fc/0x620 [ 891.831237][T21058] ? proc_fail_nth_write+0x166/0x200 [ 891.836500][T21058] ? _local_bh_enable+0x30/0x30 [ 891.841370][T21058] ? proc_fail_nth_read+0x1c0/0x1c0 [ 891.846605][T21058] ? proc_fail_nth_read+0x1c0/0x1c0 [ 891.851784][T21058] ? memset+0x1f/0x40 [ 891.855877][T21058] ? fsnotify+0x13a0/0x1460 [ 891.860359][T21058] ? __kernel_write+0x340/0x340 [ 891.865184][T21058] ? fsnotify+0x13a0/0x1460 [ 891.869677][T21058] ? security_file_permission+0x128/0x300 [ 891.875378][T21058] ? __sb_end_write+0xa4/0xf0 [ 891.880034][T21058] ? vfs_write+0x427/0x4f0 [ 891.884429][T21058] ? ksys_write+0x237/0x2a0 [ 891.888940][T21058] ? __ia32_sys_read+0x80/0x80 [ 891.893680][T21058] ? fput_many+0x42/0x1a0 [ 891.898077][T21058] __x64_sys_sendmmsg+0x9c/0xb0 [ 891.902959][T21058] do_syscall_64+0xcb/0x150 [ 891.907442][T21058] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 891.913312][T21058] RIP: 0033:0x45de59 [ 891.917186][T21058] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 891.936766][T21058] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 891.945238][T21058] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 891.953187][T21058] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 891.961146][T21058] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 891.969096][T21058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 05:12:17 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {0x6}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:17 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:17 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 891.977132][T21058] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:18 executing program 3 (fault-call:10 fault-nth:21): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:18 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:18 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {0x7}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:18 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:18 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, r3, 0xa0a, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x78}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) [ 892.355687][T21101] FAULT_INJECTION: forcing a failure. [ 892.355687][T21101] name failslab, interval 1, probability 0, space 0, times 0 [ 892.368741][T21101] CPU: 0 PID: 21101 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 892.380278][T21101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 892.390412][T21101] Call Trace: [ 892.393704][T21101] dump_stack+0x1b0/0x21e [ 892.398021][T21101] ? devkmsg_release+0x11c/0x11c [ 892.402941][T21101] ? do_user_addr_fault+0x55c/0x9f0 [ 892.408121][T21101] ? show_regs_print_info+0x12/0x12 [ 892.413346][T21101] should_fail+0x6fb/0x860 [ 892.417741][T21101] ? setup_fault_attr+0x2b0/0x2b0 [ 892.422790][T21101] ? copy_user_enhanced_fast_string+0xe/0x30 [ 892.428749][T21101] ? __alloc_skb+0x88/0x4d0 [ 892.433243][T21101] should_failslab+0x5/0x20 [ 892.437725][T21101] kmem_cache_alloc+0x36/0x250 [ 892.442466][T21101] __alloc_skb+0x88/0x4d0 [ 892.446773][T21101] ? __check_object_size+0x2e5/0x3b0 [ 892.452036][T21101] tipc_msg_build+0xcf5/0x1b20 [ 892.456779][T21101] tipc_send_group_bcast+0x9c1/0xd50 [ 892.462045][T21101] ? __tipc_sendmsg+0x2d30/0x2d30 [ 892.467081][T21101] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 892.472430][T21101] ? wait_woken+0x250/0x250 [ 892.476907][T21101] ? path_openat+0x2258/0x4270 [ 892.481684][T21101] ? do_filp_open+0x1f7/0x430 [ 892.486335][T21101] ? do_sys_open+0x343/0x620 [ 892.490903][T21101] ? do_syscall_64+0xcb/0x150 [ 892.495558][T21101] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 892.501650][T21101] ? new_inode+0x25/0x1d0 [ 892.505959][T21101] ? proc_pid_make_inode+0x23/0x1d0 [ 892.511138][T21101] ? proc_tid_base_lookup+0x185/0x1f0 [ 892.516488][T21101] ? path_openat+0x2258/0x4270 [ 892.521235][T21101] ? do_filp_open+0x1f7/0x430 [ 892.525899][T21101] __tipc_sendmsg+0x400/0x2d30 [ 892.530827][T21101] ? avc_has_perm+0xbd/0x260 [ 892.535436][T21101] ? memset+0x1f/0x40 [ 892.539399][T21101] ? unwind_next_frame+0x1c07/0x22b0 [ 892.544659][T21101] ? local_bh_enable+0x20/0x20 [ 892.549442][T21101] ? arch_stack_walk+0x78/0xe0 [ 892.554184][T21101] ? _raw_spin_lock_bh+0xa4/0x180 [ 892.559188][T21101] ? _local_bh_enable+0x30/0x30 [ 892.564134][T21101] ? memset+0x1f/0x40 [ 892.568319][T21101] ? selinux_socket_sendmsg+0x10b/0x320 [ 892.573931][T21101] ? lock_sock_nested+0x25a/0x320 [ 892.578961][T21101] ? import_iovec+0x171/0x340 [ 892.583620][T21101] ? tipc_recvmsg+0x17c0/0x17c0 [ 892.588555][T21101] tipc_sendmsg+0x51/0x70 [ 892.592878][T21101] ____sys_sendmsg+0x56f/0x860 [ 892.597624][T21101] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 892.602806][T21101] __sys_sendmmsg+0x338/0x680 [ 892.607503][T21101] ? __ia32_sys_sendmsg+0x90/0x90 [ 892.612508][T21101] ? __rcu_read_lock+0x50/0x50 [ 892.617255][T21101] ? __kasan_slab_free+0x1e2/0x220 [ 892.622342][T21101] ? __kasan_slab_free+0x168/0x220 [ 892.627432][T21101] ? slab_free_freelist_hook+0xd0/0x150 [ 892.632954][T21101] ? kmem_cache_free+0xac/0x5c0 [ 892.637780][T21101] ? do_sys_open+0x4a3/0x620 [ 892.642407][T21101] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 892.648452][T21101] ? do_sys_open+0x2fc/0x620 [ 892.653021][T21101] ? proc_fail_nth_write+0x166/0x200 [ 892.658296][T21101] ? _local_bh_enable+0x30/0x30 [ 892.663122][T21101] ? proc_fail_nth_read+0x1c0/0x1c0 [ 892.668296][T21101] ? proc_fail_nth_read+0x1c0/0x1c0 [ 892.673470][T21101] ? memset+0x1f/0x40 [ 892.677448][T21101] ? fsnotify+0x13a0/0x1460 [ 892.681947][T21101] ? __kernel_write+0x340/0x340 [ 892.686771][T21101] ? fsnotify+0x13a0/0x1460 [ 892.691261][T21101] ? security_file_permission+0x128/0x300 [ 892.696958][T21101] ? __sb_end_write+0xa4/0xf0 [ 892.701610][T21101] ? vfs_write+0x427/0x4f0 [ 892.706002][T21101] ? ksys_write+0x237/0x2a0 [ 892.710483][T21101] ? __ia32_sys_read+0x80/0x80 [ 892.715220][T21101] ? fput_many+0x42/0x1a0 [ 892.719525][T21101] __x64_sys_sendmmsg+0x9c/0xb0 [ 892.724353][T21101] do_syscall_64+0xcb/0x150 [ 892.728834][T21101] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 892.734705][T21101] RIP: 0033:0x45de59 05:12:18 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x200101d0}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:18 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {0x8}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 892.738579][T21101] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 892.758247][T21101] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 892.766634][T21101] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 892.774627][T21101] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 892.782579][T21101] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 892.790529][T21101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 892.798480][T21101] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:18 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:18 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {0x9}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:18 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:18 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {0xa}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 892.850557][T21096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21096 comm=syz-executor.1 05:12:18 executing program 3 (fault-call:10 fault-nth:22): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:18 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) get_robust_list(0xffffffffffffffff, &(0x7f0000000180)=&(0x7f0000000140)={&(0x7f0000000080)={&(0x7f0000000000)}, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)}}, &(0x7f00000001c0)=0x18) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:12:18 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:18 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:18 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {0xb}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:18 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 893.173531][T21142] FAULT_INJECTION: forcing a failure. [ 893.173531][T21142] name failslab, interval 1, probability 0, space 0, times 0 [ 893.188516][T21142] CPU: 1 PID: 21142 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 893.200337][T21142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 893.210438][T21142] Call Trace: [ 893.213708][T21142] dump_stack+0x1b0/0x21e [ 893.218016][T21142] ? devkmsg_release+0x11c/0x11c [ 893.223087][T21142] ? do_user_addr_fault+0x55c/0x9f0 [ 893.228267][T21142] ? show_regs_print_info+0x12/0x12 [ 893.233609][T21142] should_fail+0x6fb/0x860 [ 893.238004][T21142] ? setup_fault_attr+0x2b0/0x2b0 [ 893.243102][T21142] ? copy_user_enhanced_fast_string+0xe/0x30 [ 893.249075][T21142] ? __alloc_skb+0x88/0x4d0 [ 893.253563][T21142] should_failslab+0x5/0x20 [ 893.258045][T21142] kmem_cache_alloc+0x36/0x250 [ 893.262914][T21142] __alloc_skb+0x88/0x4d0 [ 893.267228][T21142] ? __check_object_size+0x2e5/0x3b0 [ 893.272507][T21142] tipc_msg_build+0xcf5/0x1b20 [ 893.277253][T21142] tipc_send_group_bcast+0x9c1/0xd50 [ 893.282518][T21142] ? __tipc_sendmsg+0x2d30/0x2d30 [ 893.287524][T21142] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 893.292879][T21142] ? wait_woken+0x250/0x250 [ 893.297357][T21142] ? path_openat+0x2258/0x4270 [ 893.302097][T21142] ? do_filp_open+0x1f7/0x430 [ 893.306752][T21142] ? do_sys_open+0x343/0x620 [ 893.311354][T21142] ? do_syscall_64+0xcb/0x150 [ 893.316009][T21142] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 893.322065][T21142] ? new_inode+0x25/0x1d0 [ 893.326470][T21142] ? proc_pid_make_inode+0x23/0x1d0 [ 893.331784][T21142] ? proc_tid_base_lookup+0x185/0x1f0 [ 893.337135][T21142] ? path_openat+0x2258/0x4270 [ 893.342148][T21142] ? do_filp_open+0x1f7/0x430 [ 893.346935][T21142] __tipc_sendmsg+0x400/0x2d30 [ 893.351775][T21142] ? avc_has_perm+0xbd/0x260 [ 893.356345][T21142] ? memset+0x1f/0x40 [ 893.360306][T21142] ? unwind_next_frame+0x1c07/0x22b0 [ 893.365563][T21142] ? local_bh_enable+0x20/0x20 [ 893.370432][T21142] ? arch_stack_walk+0x78/0xe0 [ 893.375175][T21142] ? _raw_spin_lock_bh+0xa4/0x180 [ 893.380178][T21142] ? _local_bh_enable+0x30/0x30 [ 893.385012][T21142] ? memset+0x1f/0x40 [ 893.388973][T21142] ? selinux_socket_sendmsg+0x10b/0x320 [ 893.394623][T21142] ? lock_sock_nested+0x25a/0x320 [ 893.399792][T21142] ? import_iovec+0x171/0x340 [ 893.404459][T21142] ? tipc_recvmsg+0x17c0/0x17c0 [ 893.409378][T21142] tipc_sendmsg+0x51/0x70 [ 893.413687][T21142] ____sys_sendmsg+0x56f/0x860 [ 893.418431][T21142] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 893.423624][T21142] __sys_sendmmsg+0x338/0x680 [ 893.428278][T21142] ? __ia32_sys_sendmsg+0x90/0x90 [ 893.433284][T21142] ? __rcu_read_lock+0x50/0x50 [ 893.438023][T21142] ? __kasan_slab_free+0x1e2/0x220 [ 893.443106][T21142] ? __kasan_slab_free+0x168/0x220 [ 893.448345][T21142] ? slab_free_freelist_hook+0xd0/0x150 [ 893.453878][T21142] ? kmem_cache_free+0xac/0x5c0 [ 893.458707][T21142] ? do_sys_open+0x4a3/0x620 [ 893.463276][T21142] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 893.469414][T21142] ? do_sys_open+0x2fc/0x620 [ 893.473984][T21142] ? proc_fail_nth_write+0x166/0x200 [ 893.479290][T21142] ? _raw_spin_lock+0x170/0x170 [ 893.484121][T21142] ? proc_fail_nth_read+0x1c0/0x1c0 [ 893.489295][T21142] ? mod_node_page_state+0xcf/0xf0 [ 893.494383][T21142] ? proc_fail_nth_read+0x1c0/0x1c0 [ 893.499559][T21142] ? memset+0x1f/0x40 [ 893.503529][T21142] ? fsnotify+0x13a0/0x1460 [ 893.508163][T21142] ? __kernel_write+0x340/0x340 [ 893.512994][T21142] ? fsnotify+0x13a0/0x1460 [ 893.517483][T21142] ? security_file_permission+0x128/0x300 [ 893.523186][T21142] ? __sb_end_write+0xa4/0xf0 [ 893.527843][T21142] ? vfs_write+0x427/0x4f0 [ 893.532317][T21142] ? ksys_write+0x237/0x2a0 [ 893.536816][T21142] ? __ia32_sys_read+0x80/0x80 [ 893.541560][T21142] ? fput_many+0x42/0x1a0 [ 893.545922][T21142] __x64_sys_sendmmsg+0x9c/0xb0 [ 893.550756][T21142] do_syscall_64+0xcb/0x150 [ 893.555238][T21142] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 893.561318][T21142] RIP: 0033:0x45de59 [ 893.565198][T21142] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 893.584777][T21142] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 893.593160][T21142] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 893.601104][T21142] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 893.609056][T21142] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 893.617013][T21142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 893.624981][T21142] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:19 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x7ffff000}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:19 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {0xc}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:19 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:19 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f00000300000000000000"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:19 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:19 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 893.715129][T21155] tproxy_tg6_check: 31 callbacks suppressed [ 893.715133][T21155] xt_TPROXY: Can be used only with -p tcp or -p udp [ 893.732767][T21161] xt_TPROXY: Can be used only with -p tcp or -p udp 05:12:19 executing program 3 (fault-call:10 fault-nth:23): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:19 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {0xd}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:19 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:19 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f00000300000000000000"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:19 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000100)={0x10}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000b, 0x12, r3, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000000)) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000000)) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:12:19 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 893.992368][T21174] xt_TPROXY: Can be used only with -p tcp or -p udp [ 894.000829][T21175] FAULT_INJECTION: forcing a failure. [ 894.000829][T21175] name failslab, interval 1, probability 0, space 0, times 0 [ 894.014249][T21175] CPU: 1 PID: 21175 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 894.015812][T21181] xt_TPROXY: Can be used only with -p tcp or -p udp [ 894.025785][T21175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 894.025788][T21175] Call Trace: [ 894.025803][T21175] dump_stack+0x1b0/0x21e [ 894.025811][T21175] ? devkmsg_release+0x11c/0x11c [ 894.025816][T21175] ? show_regs_print_info+0x12/0x12 [ 894.025824][T21175] ? do_user_addr_fault+0x55c/0x9f0 [ 894.025832][T21175] should_fail+0x6fb/0x860 [ 894.025838][T21175] ? setup_fault_attr+0x2b0/0x2b0 [ 894.025844][T21175] ? setup_fault_attr+0x2b0/0x2b0 [ 894.025853][T21175] ? tipc_msg_build+0xcf5/0x1b20 [ 894.025860][T21175] should_failslab+0x5/0x20 [ 894.025869][T21175] __kmalloc_track_caller+0x5d/0x2b0 [ 894.025876][T21175] ? kmem_cache_alloc+0x1d5/0x250 [ 894.025882][T21175] ? tipc_msg_build+0xcf5/0x1b20 [ 894.025890][T21175] __alloc_skb+0xd1/0x4d0 [ 894.025898][T21175] tipc_msg_build+0xcf5/0x1b20 [ 894.025909][T21175] tipc_send_group_bcast+0x9c1/0xd50 [ 894.025919][T21175] ? __tipc_sendmsg+0x2d30/0x2d30 [ 894.025927][T21175] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 894.025936][T21175] ? wait_woken+0x250/0x250 [ 894.025942][T21175] ? path_openat+0x2258/0x4270 [ 894.025948][T21175] ? do_filp_open+0x1f7/0x430 [ 894.025954][T21175] ? do_sys_open+0x343/0x620 [ 894.025960][T21175] ? do_syscall_64+0xcb/0x150 [ 894.025973][T21175] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 894.025978][T21175] ? new_inode+0x25/0x1d0 [ 894.025986][T21175] ? proc_pid_make_inode+0x23/0x1d0 [ 894.025993][T21175] ? proc_tid_base_lookup+0x185/0x1f0 [ 894.025998][T21175] ? path_openat+0x2258/0x4270 [ 894.026004][T21175] ? do_filp_open+0x1f7/0x430 [ 894.026011][T21175] __tipc_sendmsg+0x400/0x2d30 [ 894.026018][T21175] ? avc_has_perm+0xbd/0x260 [ 894.026027][T21175] ? memset+0x1f/0x40 [ 894.026034][T21175] ? unwind_next_frame+0x1c07/0x22b0 [ 894.026041][T21175] ? local_bh_enable+0x20/0x20 [ 894.026048][T21175] ? arch_stack_walk+0x78/0xe0 [ 894.026054][T21175] ? _raw_spin_lock_bh+0xa4/0x180 [ 894.026061][T21175] ? _local_bh_enable+0x30/0x30 [ 894.026067][T21175] ? memset+0x1f/0x40 [ 894.026073][T21175] ? selinux_socket_sendmsg+0x10b/0x320 [ 894.026080][T21175] ? lock_sock_nested+0x25a/0x320 [ 894.026089][T21175] ? import_iovec+0x171/0x340 [ 894.026097][T21175] ? tipc_recvmsg+0x17c0/0x17c0 [ 894.026102][T21175] tipc_sendmsg+0x51/0x70 [ 894.026110][T21175] ____sys_sendmsg+0x56f/0x860 [ 894.026121][T21175] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 894.259019][T21175] __sys_sendmmsg+0x338/0x680 [ 894.263674][T21175] ? __ia32_sys_sendmsg+0x90/0x90 [ 894.268675][T21175] ? __rcu_read_lock+0x50/0x50 [ 894.273451][T21175] ? __kasan_slab_free+0x1e2/0x220 [ 894.278533][T21175] ? __kasan_slab_free+0x168/0x220 [ 894.283617][T21175] ? slab_free_freelist_hook+0xd0/0x150 [ 894.289135][T21175] ? kmem_cache_free+0xac/0x5c0 [ 894.293962][T21175] ? do_sys_open+0x4a3/0x620 [ 894.298525][T21175] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 894.304729][T21175] ? do_sys_open+0x2fc/0x620 [ 894.309299][T21175] ? proc_fail_nth_write+0x166/0x200 [ 894.314559][T21175] ? _local_bh_enable+0x30/0x30 [ 894.319386][T21175] ? proc_fail_nth_read+0x1c0/0x1c0 [ 894.324561][T21175] ? proc_fail_nth_read+0x1c0/0x1c0 [ 894.329736][T21175] ? memset+0x1f/0x40 [ 894.333693][T21175] ? fsnotify+0x13a0/0x1460 [ 894.338167][T21175] ? __kernel_write+0x340/0x340 [ 894.343078][T21175] ? fsnotify+0x13a0/0x1460 [ 894.347647][T21175] ? security_file_permission+0x128/0x300 [ 894.353339][T21175] ? __sb_end_write+0xa4/0xf0 [ 894.358079][T21175] ? vfs_write+0x427/0x4f0 [ 894.362471][T21175] ? ksys_write+0x237/0x2a0 [ 894.366985][T21175] ? __ia32_sys_read+0x80/0x80 [ 894.371723][T21175] ? fput_many+0x42/0x1a0 [ 894.376030][T21175] __x64_sys_sendmmsg+0x9c/0xb0 [ 894.380856][T21175] do_syscall_64+0xcb/0x150 [ 894.385335][T21175] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 894.391202][T21175] RIP: 0033:0x45de59 [ 894.395074][T21175] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 894.414740][T21175] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 894.423166][T21175] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 894.431118][T21175] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 894.439069][T21175] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 894.447017][T21175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 894.455006][T21175] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0xfffffdef}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:20 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:20 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {0xe}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:20 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f00000300000000000000"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:20 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:20 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {0xf}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 894.581921][T21193] xt_TPROXY: Can be used only with -p tcp or -p udp [ 894.591158][T21198] xt_TPROXY: Can be used only with -p tcp or -p udp [ 894.613470][T21202] xt_TPROXY: Can be used only with -p tcp or -p udp 05:12:20 executing program 3 (fault-call:10 fault-nth:24): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:20 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:20 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {0x10}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:20 executing program 1: r0 = perf_event_open(&(0x7f0000000500)={0x2, 0xb7, 0x30, 0x2, 0x0, 0x0, 0x0, 0x9, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x80000000000000, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x80000, 0xffffffffffffffff, 0xb) r1 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r1, 0x200004) r4 = signalfd(r0, &(0x7f0000000000), 0x8) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000000080)={0x2b, @local, 0x4e23, 0x2, 'wlc\x00', 0x20, 0x3, 0x51}, 0x2c) sendfile(r1, r1, 0x0, 0x80001d00c0d3) 05:12:20 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b00"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:20 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {0x11}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 894.809428][T21214] xt_TPROXY: Can be used only with -p tcp or -p udp [ 894.819595][T21218] FAULT_INJECTION: forcing a failure. [ 894.819595][T21218] name failslab, interval 1, probability 0, space 0, times 0 [ 894.838839][T21218] CPU: 1 PID: 21218 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 894.844275][T21222] xt_TPROXY: Can be used only with -p tcp or -p udp [ 894.850658][T21218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 894.850662][T21218] Call Trace: [ 894.850677][T21218] dump_stack+0x1b0/0x21e [ 894.850687][T21218] ? devkmsg_release+0x11c/0x11c [ 894.850695][T21218] ? do_user_addr_fault+0x55c/0x9f0 [ 894.850706][T21218] ? show_regs_print_info+0x12/0x12 [ 894.890228][T21218] should_fail+0x6fb/0x860 [ 894.894666][T21218] ? setup_fault_attr+0x2b0/0x2b0 [ 894.899670][T21218] ? __alloc_skb+0x88/0x4d0 [ 894.904238][T21218] should_failslab+0x5/0x20 [ 894.908729][T21218] kmem_cache_alloc+0x36/0x250 [ 894.913471][T21218] __alloc_skb+0x88/0x4d0 [ 894.917796][T21218] ? __check_object_size+0x2e5/0x3b0 [ 894.923055][T21218] tipc_msg_build+0xcf5/0x1b20 [ 894.927951][T21218] tipc_send_group_bcast+0x9c1/0xd50 [ 894.933249][T21218] ? __tipc_sendmsg+0x2d30/0x2d30 [ 894.938284][T21218] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 894.943634][T21218] ? wait_woken+0x250/0x250 [ 894.948128][T21218] ? path_openat+0x2258/0x4270 [ 894.952867][T21218] ? do_filp_open+0x1f7/0x430 [ 894.957519][T21218] ? do_sys_open+0x343/0x620 [ 894.962085][T21218] ? do_syscall_64+0xcb/0x150 [ 894.966754][T21218] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 894.972799][T21218] ? new_inode+0x25/0x1d0 [ 894.977104][T21218] ? proc_pid_make_inode+0x23/0x1d0 [ 894.982279][T21218] ? proc_tid_base_lookup+0x185/0x1f0 [ 894.987624][T21218] ? path_openat+0x2258/0x4270 [ 894.992368][T21218] ? do_filp_open+0x1f7/0x430 [ 894.997035][T21218] __tipc_sendmsg+0x400/0x2d30 [ 895.001774][T21218] ? avc_has_perm+0xbd/0x260 [ 895.006373][T21218] ? memset+0x1f/0x40 [ 895.010329][T21218] ? unwind_next_frame+0x1c07/0x22b0 [ 895.015591][T21218] ? local_bh_enable+0x20/0x20 [ 895.020367][T21218] ? arch_stack_walk+0x78/0xe0 [ 895.025104][T21218] ? _raw_spin_lock_bh+0xa4/0x180 [ 895.030104][T21218] ? _local_bh_enable+0x30/0x30 [ 895.034928][T21218] ? memset+0x1f/0x40 [ 895.038886][T21218] ? selinux_socket_sendmsg+0x10b/0x320 [ 895.044407][T21218] ? lock_sock_nested+0x25a/0x320 [ 895.049413][T21218] ? import_iovec+0x171/0x340 [ 895.054070][T21218] ? tipc_recvmsg+0x17c0/0x17c0 [ 895.058984][T21218] tipc_sendmsg+0x51/0x70 [ 895.063292][T21218] ____sys_sendmsg+0x56f/0x860 [ 895.068120][T21218] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 895.073297][T21218] __sys_sendmmsg+0x338/0x680 [ 895.077949][T21218] ? __ia32_sys_sendmsg+0x90/0x90 [ 895.082947][T21218] ? __rcu_read_lock+0x50/0x50 [ 895.087701][T21218] ? __kasan_slab_free+0x1e2/0x220 [ 895.092785][T21218] ? __kasan_slab_free+0x168/0x220 [ 895.097869][T21218] ? slab_free_freelist_hook+0xd0/0x150 [ 895.103390][T21218] ? kmem_cache_free+0xac/0x5c0 [ 895.108214][T21218] ? do_sys_open+0x4a3/0x620 [ 895.112779][T21218] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 895.118818][T21218] ? do_sys_open+0x2fc/0x620 [ 895.123384][T21218] ? proc_fail_nth_write+0x166/0x200 [ 895.128655][T21218] ? _local_bh_enable+0x30/0x30 [ 895.133478][T21218] ? proc_fail_nth_read+0x1c0/0x1c0 [ 895.138683][T21218] ? proc_fail_nth_read+0x1c0/0x1c0 [ 895.143864][T21218] ? memset+0x1f/0x40 [ 895.147818][T21218] ? fsnotify+0x13a0/0x1460 [ 895.152311][T21218] ? __kernel_write+0x340/0x340 [ 895.157223][T21218] ? fsnotify+0x13a0/0x1460 [ 895.161707][T21218] ? security_file_permission+0x128/0x300 [ 895.167443][T21218] ? __sb_end_write+0xa4/0xf0 [ 895.172186][T21218] ? vfs_write+0x427/0x4f0 [ 895.176579][T21218] ? ksys_write+0x237/0x2a0 [ 895.181057][T21218] ? __ia32_sys_read+0x80/0x80 [ 895.185791][T21218] ? fput_many+0x42/0x1a0 [ 895.190097][T21218] __x64_sys_sendmmsg+0x9c/0xb0 [ 895.194923][T21218] do_syscall_64+0xcb/0x150 [ 895.199440][T21218] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 895.205348][T21218] RIP: 0033:0x45de59 [ 895.209270][T21218] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 895.228888][T21218] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 895.237280][T21218] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 895.245230][T21218] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 895.253267][T21218] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 895.261215][T21218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 895.269164][T21218] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x2}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:21 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:21 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {0x12}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:21 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b00"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:21 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x401200) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) wait4(0x0, 0x0, 0x8, &(0x7f00000000c0)) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:12:21 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 895.460692][T21237] xt_TPROXY: Can be used only with -p tcp or -p udp 05:12:21 executing program 3 (fault-call:10 fault-nth:25): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:21 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {0x25}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:21 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:21 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:12:21 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b00"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:21 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 895.661016][T21266] FAULT_INJECTION: forcing a failure. [ 895.661016][T21266] name failslab, interval 1, probability 0, space 0, times 0 [ 895.674044][T21266] CPU: 0 PID: 21266 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 895.685843][T21266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 895.695901][T21266] Call Trace: [ 895.699182][T21266] dump_stack+0x1b0/0x21e [ 895.703505][T21266] ? devkmsg_release+0x11c/0x11c [ 895.708516][T21266] ? do_user_addr_fault+0x55c/0x9f0 [ 895.713701][T21266] ? show_regs_print_info+0x12/0x12 [ 895.718893][T21266] should_fail+0x6fb/0x860 [ 895.723301][T21266] ? setup_fault_attr+0x2b0/0x2b0 [ 895.728460][T21266] ? copy_user_enhanced_fast_string+0xe/0x30 [ 895.734433][T21266] ? __alloc_skb+0x88/0x4d0 [ 895.739078][T21266] should_failslab+0x5/0x20 [ 895.743571][T21266] kmem_cache_alloc+0x36/0x250 [ 895.748329][T21266] __alloc_skb+0x88/0x4d0 [ 895.752683][T21266] ? __check_object_size+0x2e5/0x3b0 [ 895.757949][T21266] tipc_msg_build+0xcf5/0x1b20 [ 895.762693][T21266] tipc_send_group_bcast+0x9c1/0xd50 [ 895.767956][T21266] ? __tipc_sendmsg+0x2d30/0x2d30 [ 895.772957][T21266] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 895.778311][T21266] ? wait_woken+0x250/0x250 [ 895.782791][T21266] ? path_openat+0x2258/0x4270 [ 895.787527][T21266] ? do_filp_open+0x1f7/0x430 [ 895.792182][T21266] ? do_sys_open+0x343/0x620 [ 895.796745][T21266] ? do_syscall_64+0xcb/0x150 [ 895.801456][T21266] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 895.807504][T21266] ? new_inode+0x25/0x1d0 [ 895.811866][T21266] ? proc_pid_make_inode+0x23/0x1d0 [ 895.817141][T21266] ? proc_tid_base_lookup+0x185/0x1f0 [ 895.822488][T21266] ? path_openat+0x2258/0x4270 [ 895.827346][T21266] ? do_filp_open+0x1f7/0x430 [ 895.832009][T21266] __tipc_sendmsg+0x400/0x2d30 [ 895.836757][T21266] ? avc_has_perm+0xbd/0x260 [ 895.841327][T21266] ? memset+0x1f/0x40 [ 895.845338][T21266] ? unwind_next_frame+0x1c07/0x22b0 [ 895.850765][T21266] ? local_bh_enable+0x20/0x20 [ 895.855515][T21266] ? arch_stack_walk+0x78/0xe0 [ 895.860322][T21266] ? _raw_spin_lock_bh+0xa4/0x180 [ 895.865332][T21266] ? _local_bh_enable+0x30/0x30 [ 895.870169][T21266] ? memset+0x1f/0x40 [ 895.874137][T21266] ? selinux_socket_sendmsg+0x10b/0x320 [ 895.879661][T21266] ? lock_sock_nested+0x25a/0x320 [ 895.884670][T21266] ? import_iovec+0x171/0x340 [ 895.889327][T21266] ? tipc_recvmsg+0x17c0/0x17c0 [ 895.894160][T21266] tipc_sendmsg+0x51/0x70 [ 895.898481][T21266] ____sys_sendmsg+0x56f/0x860 [ 895.903226][T21266] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 895.908444][T21266] __sys_sendmmsg+0x338/0x680 [ 895.913104][T21266] ? __ia32_sys_sendmsg+0x90/0x90 [ 895.918112][T21266] ? __rcu_read_lock+0x50/0x50 [ 895.922854][T21266] ? __kasan_slab_free+0x1e2/0x220 [ 895.928028][T21266] ? __kasan_slab_free+0x168/0x220 [ 895.933120][T21266] ? slab_free_freelist_hook+0xd0/0x150 [ 895.938646][T21266] ? kmem_cache_free+0xac/0x5c0 [ 895.943595][T21266] ? do_sys_open+0x4a3/0x620 [ 895.948292][T21266] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 895.954346][T21266] ? do_sys_open+0x2fc/0x620 [ 895.958917][T21266] ? proc_fail_nth_write+0x166/0x200 [ 895.964231][T21266] ? _local_bh_enable+0x30/0x30 [ 895.969063][T21266] ? proc_fail_nth_read+0x1c0/0x1c0 [ 895.974241][T21266] ? proc_fail_nth_read+0x1c0/0x1c0 [ 895.979417][T21266] ? memset+0x1f/0x40 [ 895.983375][T21266] ? fsnotify+0x13a0/0x1460 [ 895.987857][T21266] ? __kernel_write+0x340/0x340 [ 895.992688][T21266] ? fsnotify+0x13a0/0x1460 [ 895.997172][T21266] ? security_file_permission+0x128/0x300 [ 896.002869][T21266] ? __sb_end_write+0xa4/0xf0 [ 896.007661][T21266] ? vfs_write+0x427/0x4f0 [ 896.012057][T21266] ? ksys_write+0x237/0x2a0 [ 896.016537][T21266] ? __ia32_sys_read+0x80/0x80 [ 896.021277][T21266] ? fput_many+0x42/0x1a0 [ 896.025588][T21266] __x64_sys_sendmmsg+0x9c/0xb0 [ 896.030430][T21266] do_syscall_64+0xcb/0x150 [ 896.034914][T21266] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 896.040835][T21266] RIP: 0033:0x45de59 [ 896.044707][T21266] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 896.064460][T21266] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 896.072850][T21266] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 896.080802][T21266] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 896.088755][T21266] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 896.096704][T21266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 896.104660][T21266] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x3}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:21 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:21 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {0x48}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:21 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:22 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {0x4c}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:22 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:22 executing program 3 (fault-call:10 fault-nth:26): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:22 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:22 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {0x60}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:22 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000000)={0xfd, 0x3}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0xffffffe0}, 0x10) write(r2, &(0x7f0000000040)="240000001e005f0214fffffffffffff8070000000000000000000000060008000e000000", 0x24) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="9b6f1e20", @ANYRES16=r3, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x4812}, 0x20000010) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:12:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x4}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:22 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:22 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {0x68}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:22 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 896.494411][T21341] FAULT_INJECTION: forcing a failure. [ 896.494411][T21341] name failslab, interval 1, probability 0, space 0, times 0 [ 896.510985][T21341] CPU: 0 PID: 21341 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 896.522531][T21341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 896.532599][T21341] Call Trace: [ 896.536201][T21341] dump_stack+0x1b0/0x21e [ 896.540525][T21341] ? devkmsg_release+0x11c/0x11c [ 896.545614][T21341] ? do_user_addr_fault+0x55c/0x9f0 [ 896.550788][T21341] ? show_regs_print_info+0x12/0x12 [ 896.555965][T21341] should_fail+0x6fb/0x860 [ 896.560358][T21341] ? setup_fault_attr+0x2b0/0x2b0 [ 896.565363][T21341] ? copy_user_enhanced_fast_string+0xe/0x30 [ 896.571318][T21341] ? __alloc_skb+0x88/0x4d0 [ 896.575811][T21341] should_failslab+0x5/0x20 [ 896.580293][T21341] kmem_cache_alloc+0x36/0x250 [ 896.585065][T21341] __alloc_skb+0x88/0x4d0 [ 896.589371][T21341] ? __check_object_size+0x2e5/0x3b0 [ 896.594634][T21341] tipc_msg_build+0xcf5/0x1b20 [ 896.599376][T21341] tipc_send_group_bcast+0x9c1/0xd50 [ 896.604637][T21341] ? __tipc_sendmsg+0x2d30/0x2d30 [ 896.609638][T21341] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 896.614990][T21341] ? wait_woken+0x250/0x250 [ 896.619470][T21341] ? path_openat+0x2258/0x4270 [ 896.624208][T21341] ? do_filp_open+0x1f7/0x430 [ 896.628863][T21341] ? do_sys_open+0x343/0x620 [ 896.633464][T21341] ? do_syscall_64+0xcb/0x150 [ 896.638304][T21341] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 896.644356][T21341] ? new_inode+0x25/0x1d0 [ 896.648793][T21341] ? proc_pid_make_inode+0x23/0x1d0 [ 896.653966][T21341] ? proc_tid_base_lookup+0x185/0x1f0 [ 896.659317][T21341] ? path_openat+0x2258/0x4270 [ 896.664070][T21341] ? do_filp_open+0x1f7/0x430 [ 896.668729][T21341] __tipc_sendmsg+0x400/0x2d30 [ 896.673472][T21341] ? avc_has_perm+0xbd/0x260 [ 896.678042][T21341] ? memset+0x1f/0x40 [ 896.682225][T21341] ? unwind_next_frame+0x1c07/0x22b0 [ 896.687484][T21341] ? local_bh_enable+0x20/0x20 [ 896.692221][T21341] ? arch_stack_walk+0x78/0xe0 [ 896.696972][T21341] ? _raw_spin_lock_bh+0xa4/0x180 [ 896.701970][T21341] ? _local_bh_enable+0x30/0x30 [ 896.706795][T21341] ? memset+0x1f/0x40 [ 896.710755][T21341] ? selinux_socket_sendmsg+0x10b/0x320 [ 896.716278][T21341] ? lock_sock_nested+0x25a/0x320 [ 896.721284][T21341] ? import_iovec+0x171/0x340 [ 896.725938][T21341] ? tipc_recvmsg+0x17c0/0x17c0 [ 896.730853][T21341] tipc_sendmsg+0x51/0x70 [ 896.735160][T21341] ____sys_sendmsg+0x56f/0x860 [ 896.739901][T21341] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 896.745090][T21341] __sys_sendmmsg+0x338/0x680 [ 896.749745][T21341] ? __ia32_sys_sendmsg+0x90/0x90 [ 896.754741][T21341] ? __rcu_read_lock+0x50/0x50 [ 896.759477][T21341] ? __kasan_slab_free+0x1e2/0x220 [ 896.764570][T21341] ? __kasan_slab_free+0x168/0x220 [ 896.769655][T21341] ? slab_free_freelist_hook+0xd0/0x150 [ 896.775264][T21341] ? kmem_cache_free+0xac/0x5c0 [ 896.780092][T21341] ? do_sys_open+0x4a3/0x620 [ 896.784661][T21341] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 896.790745][T21341] ? do_sys_open+0x2fc/0x620 [ 896.795312][T21341] ? proc_fail_nth_write+0x166/0x200 [ 896.800583][T21341] ? _local_bh_enable+0x30/0x30 [ 896.805500][T21341] ? proc_fail_nth_read+0x1c0/0x1c0 [ 896.810767][T21341] ? proc_fail_nth_read+0x1c0/0x1c0 [ 896.815945][T21341] ? memset+0x1f/0x40 [ 896.819904][T21341] ? fsnotify+0x13a0/0x1460 [ 896.824427][T21341] ? __kernel_write+0x340/0x340 [ 896.829255][T21341] ? fsnotify+0x13a0/0x1460 [ 896.833876][T21341] ? security_file_permission+0x128/0x300 [ 896.839574][T21341] ? __sb_end_write+0xa4/0xf0 [ 896.844230][T21341] ? vfs_write+0x427/0x4f0 [ 896.848630][T21341] ? ksys_write+0x237/0x2a0 [ 896.853120][T21341] ? __ia32_sys_read+0x80/0x80 [ 896.857949][T21341] ? fput_many+0x42/0x1a0 [ 896.862267][T21341] __x64_sys_sendmmsg+0x9c/0xb0 [ 896.867231][T21341] do_syscall_64+0xcb/0x150 [ 896.871720][T21341] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 896.877588][T21341] RIP: 0033:0x45de59 [ 896.881460][T21341] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 896.901039][T21341] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 896.909430][T21341] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 896.917381][T21341] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 896.925332][T21341] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 896.933430][T21341] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001a 05:12:22 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {0x6c}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:22 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 896.941377][T21341] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:22 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:22 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {0x74}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:23 executing program 3 (fault-call:10 fault-nth:27): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:23 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:23 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {0x7a}}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x7}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:23 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x400000000000003, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:23 executing program 1: r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x4, 0x80000001}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2000}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x40801) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r4, 0x8, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) ftruncate(r1, 0x200004) sendfile(r1, r1, 0x0, 0x80001d00c0d3) 05:12:23 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:23 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:23 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 897.321789][T21422] FAULT_INJECTION: forcing a failure. [ 897.321789][T21422] name failslab, interval 1, probability 0, space 0, times 0 [ 897.340451][T21422] CPU: 1 PID: 21422 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 897.352297][T21422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 897.362347][T21422] Call Trace: [ 897.365638][T21422] dump_stack+0x1b0/0x21e 05:12:23 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x2}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:23 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x3}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 897.370081][T21422] ? devkmsg_release+0x11c/0x11c [ 897.375016][T21422] ? show_regs_print_info+0x12/0x12 [ 897.380384][T21422] ? do_user_addr_fault+0x55c/0x9f0 [ 897.385589][T21422] ? _raw_spin_lock+0xa1/0x170 [ 897.390351][T21422] should_fail+0x6fb/0x860 [ 897.394772][T21422] ? setup_fault_attr+0x2b0/0x2b0 [ 897.399880][T21422] ? _raw_spin_unlock+0x5/0x20 [ 897.404648][T21422] ? tipc_msg_build+0xcf5/0x1b20 [ 897.409585][T21422] should_failslab+0x5/0x20 [ 897.414087][T21422] __kmalloc_track_caller+0x5d/0x2b0 05:12:23 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x4}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 897.419374][T21422] ? kmem_cache_alloc+0x1d5/0x250 [ 897.424498][T21422] ? tipc_msg_build+0xcf5/0x1b20 [ 897.429432][T21422] __alloc_skb+0xd1/0x4d0 [ 897.433762][T21422] tipc_msg_build+0xcf5/0x1b20 [ 897.438530][T21422] tipc_send_group_bcast+0x9c1/0xd50 [ 897.443813][T21422] ? __tipc_sendmsg+0x2d30/0x2d30 [ 897.448923][T21422] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 897.454294][T21422] ? wait_woken+0x250/0x250 [ 897.458804][T21422] ? path_openat+0x2258/0x4270 [ 897.463562][T21422] ? do_filp_open+0x1f7/0x430 [ 897.468239][T21422] ? do_sys_open+0x343/0x620 [ 897.472828][T21422] ? do_syscall_64+0xcb/0x150 [ 897.477503][T21422] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 897.483564][T21422] ? new_inode+0x25/0x1d0 [ 897.487889][T21422] ? proc_pid_make_inode+0x23/0x1d0 [ 897.493076][T21422] ? proc_tid_base_lookup+0x185/0x1f0 [ 897.498438][T21422] ? path_openat+0x2258/0x4270 [ 897.503180][T21422] ? do_filp_open+0x1f7/0x430 [ 897.507852][T21422] __tipc_sendmsg+0x400/0x2d30 [ 897.512600][T21422] ? avc_has_perm+0xbd/0x260 [ 897.517175][T21422] ? memset+0x1f/0x40 [ 897.521227][T21422] ? unwind_next_frame+0x1c07/0x22b0 [ 897.526515][T21422] ? local_bh_enable+0x20/0x20 [ 897.531262][T21422] ? arch_stack_walk+0x78/0xe0 [ 897.536001][T21422] ? _raw_spin_lock_bh+0xa4/0x180 [ 897.541003][T21422] ? _local_bh_enable+0x30/0x30 [ 897.546131][T21422] ? memset+0x1f/0x40 [ 897.550097][T21422] ? selinux_socket_sendmsg+0x10b/0x320 [ 897.555633][T21422] ? lock_sock_nested+0x25a/0x320 [ 897.560785][T21422] ? import_iovec+0x171/0x340 [ 897.565568][T21422] ? tipc_recvmsg+0x17c0/0x17c0 [ 897.570395][T21422] tipc_sendmsg+0x51/0x70 [ 897.574707][T21422] ____sys_sendmsg+0x56f/0x860 [ 897.579450][T21422] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 897.584623][T21422] __sys_sendmmsg+0x338/0x680 [ 897.589278][T21422] ? __ia32_sys_sendmsg+0x90/0x90 [ 897.594278][T21422] ? __rcu_read_lock+0x50/0x50 [ 897.599016][T21422] ? __kasan_slab_free+0x1e2/0x220 [ 897.604102][T21422] ? __kasan_slab_free+0x168/0x220 [ 897.609191][T21422] ? slab_free_freelist_hook+0xd0/0x150 [ 897.614713][T21422] ? kmem_cache_free+0xac/0x5c0 [ 897.619742][T21422] ? do_sys_open+0x4a3/0x620 [ 897.624397][T21422] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 897.630548][T21422] ? do_sys_open+0x2fc/0x620 [ 897.635256][T21422] ? proc_fail_nth_write+0x166/0x200 [ 897.640531][T21422] ? perf_pmu_sched_task+0x370/0x370 [ 897.646036][T21422] ? proc_fail_nth_read+0x1c0/0x1c0 [ 897.651333][T21422] ? switch_mm_irqs_off+0x46e/0x870 [ 897.656660][T21422] ? trace_event_raw_event_sched_switch+0x480/0x480 [ 897.663334][T21422] ? switch_mm+0xe0/0xe0 [ 897.667553][T21422] ? proc_fail_nth_read+0x1c0/0x1c0 [ 897.672730][T21422] ? memset+0x1f/0x40 [ 897.676686][T21422] ? fsnotify+0x13a0/0x1460 [ 897.681164][T21422] ? __kernel_write+0x340/0x340 [ 897.685987][T21422] ? fsnotify+0x13a0/0x1460 [ 897.690475][T21422] ? security_file_permission+0x128/0x300 [ 897.696171][T21422] ? __sb_end_write+0xa4/0xf0 [ 897.700944][T21422] ? vfs_write+0x427/0x4f0 [ 897.705425][T21422] ? ksys_write+0x237/0x2a0 [ 897.709908][T21422] ? __ia32_sys_read+0x80/0x80 [ 897.714649][T21422] ? do_syscall_64+0x57/0x150 [ 897.719306][T21422] __x64_sys_sendmmsg+0x9c/0xb0 [ 897.724200][T21422] do_syscall_64+0xcb/0x150 [ 897.728812][T21422] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 897.734682][T21422] RIP: 0033:0x45de59 [ 897.738552][T21422] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 897.758228][T21422] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 897.766714][T21422] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 897.774667][T21422] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 897.782621][T21422] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 897.790581][T21422] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001b [ 897.798532][T21422] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:23 executing program 3 (fault-call:10 fault-nth:28): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:23 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x5}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:23 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 898.133220][T21505] FAULT_INJECTION: forcing a failure. [ 898.133220][T21505] name failslab, interval 1, probability 0, space 0, times 0 [ 898.146004][T21505] CPU: 1 PID: 21505 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 898.157526][T21505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 898.167557][T21505] Call Trace: [ 898.170831][T21505] dump_stack+0x1b0/0x21e [ 898.175211][T21505] ? devkmsg_release+0x11c/0x11c [ 898.180129][T21505] ? do_user_addr_fault+0x55c/0x9f0 [ 898.185323][T21505] ? show_regs_print_info+0x12/0x12 [ 898.190499][T21505] should_fail+0x6fb/0x860 [ 898.194895][T21505] ? setup_fault_attr+0x2b0/0x2b0 [ 898.199904][T21505] ? copy_user_enhanced_fast_string+0xe/0x30 [ 898.205997][T21505] ? __alloc_skb+0x88/0x4d0 [ 898.210488][T21505] should_failslab+0x5/0x20 [ 898.214967][T21505] kmem_cache_alloc+0x36/0x250 [ 898.219709][T21505] __alloc_skb+0x88/0x4d0 [ 898.224018][T21505] ? __check_object_size+0x2e5/0x3b0 [ 898.229280][T21505] tipc_msg_build+0xcf5/0x1b20 [ 898.234019][T21505] tipc_send_group_bcast+0x9c1/0xd50 [ 898.239278][T21505] ? __tipc_sendmsg+0x2d30/0x2d30 [ 898.244276][T21505] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 898.249627][T21505] ? wait_woken+0x250/0x250 [ 898.254110][T21505] ? path_openat+0x2258/0x4270 [ 898.258998][T21505] ? do_filp_open+0x1f7/0x430 [ 898.263646][T21505] ? do_sys_open+0x343/0x620 [ 898.268210][T21505] ? do_syscall_64+0xcb/0x150 [ 898.272880][T21505] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 898.279064][T21505] ? new_inode+0x25/0x1d0 [ 898.283368][T21505] ? proc_pid_make_inode+0x23/0x1d0 [ 898.288543][T21505] ? proc_tid_base_lookup+0x185/0x1f0 [ 898.293894][T21505] ? path_openat+0x2258/0x4270 [ 898.298638][T21505] ? do_filp_open+0x1f7/0x430 [ 898.303294][T21505] __tipc_sendmsg+0x400/0x2d30 [ 898.308036][T21505] ? avc_has_perm+0xbd/0x260 [ 898.312619][T21505] ? memset+0x1f/0x40 [ 898.316590][T21505] ? unwind_next_frame+0x1c07/0x22b0 [ 898.321855][T21505] ? local_bh_enable+0x20/0x20 [ 898.326606][T21505] ? arch_stack_walk+0x78/0xe0 [ 898.331427][T21505] ? _raw_spin_lock_bh+0xa4/0x180 [ 898.336428][T21505] ? _local_bh_enable+0x30/0x30 [ 898.341325][T21505] ? memset+0x1f/0x40 [ 898.345282][T21505] ? selinux_socket_sendmsg+0x10b/0x320 [ 898.350806][T21505] ? lock_sock_nested+0x25a/0x320 [ 898.355805][T21505] ? import_iovec+0x171/0x340 [ 898.360457][T21505] ? tipc_recvmsg+0x17c0/0x17c0 [ 898.365282][T21505] tipc_sendmsg+0x51/0x70 [ 898.369588][T21505] ____sys_sendmsg+0x56f/0x860 [ 898.374330][T21505] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 898.379503][T21505] __sys_sendmmsg+0x338/0x680 [ 898.384159][T21505] ? __ia32_sys_sendmsg+0x90/0x90 [ 898.389160][T21505] ? __rcu_read_lock+0x50/0x50 [ 898.393894][T21505] ? __kasan_slab_free+0x1e2/0x220 [ 898.398976][T21505] ? __kasan_slab_free+0x168/0x220 [ 898.404062][T21505] ? slab_free_freelist_hook+0xd0/0x150 [ 898.409640][T21505] ? kmem_cache_free+0xac/0x5c0 [ 898.414464][T21505] ? do_sys_open+0x4a3/0x620 [ 898.419031][T21505] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 898.425079][T21505] ? do_sys_open+0x2fc/0x620 [ 898.429643][T21505] ? proc_fail_nth_write+0x166/0x200 [ 898.434899][T21505] ? _raw_spin_lock+0x170/0x170 [ 898.439726][T21505] ? proc_fail_nth_read+0x1c0/0x1c0 [ 898.444900][T21505] ? proc_fail_nth_read+0x1c0/0x1c0 [ 898.450068][T21505] ? memset+0x1f/0x40 [ 898.454022][T21505] ? fsnotify+0x13a0/0x1460 [ 898.458518][T21505] ? __kernel_write+0x340/0x340 [ 898.463336][T21505] ? fsnotify+0x13a0/0x1460 [ 898.467813][T21505] ? security_file_permission+0x128/0x300 [ 898.473502][T21505] ? __sb_end_write+0xa4/0xf0 [ 898.478148][T21505] ? vfs_write+0x427/0x4f0 [ 898.482535][T21505] ? ksys_write+0x237/0x2a0 [ 898.487008][T21505] ? __ia32_sys_read+0x80/0x80 [ 898.491739][T21505] ? fput_many+0x42/0x1a0 [ 898.496035][T21505] __x64_sys_sendmmsg+0x9c/0xb0 [ 898.500854][T21505] do_syscall_64+0xcb/0x150 [ 898.505323][T21505] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 898.511192][T21505] RIP: 0033:0x45de59 [ 898.515052][T21505] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:12:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x8}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:24 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:24 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) stat(&(0x7f0000000000)='.\x00', &(0x7f0000000080)) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:12:24 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x6}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:24 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:24 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 898.534635][T21505] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 898.543010][T21505] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 898.550962][T21505] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 898.558904][T21505] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 898.566858][T21505] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001c [ 898.574814][T21505] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:24 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x7}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:24 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:24 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x8}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:24 executing program 3 (fault-call:10 fault-nth:29): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:24 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:24 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x9}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 898.948046][T21582] FAULT_INJECTION: forcing a failure. [ 898.948046][T21582] name failslab, interval 1, probability 0, space 0, times 0 [ 898.952284][T21584] tproxy_tg6_check: 32 callbacks suppressed [ 898.952287][T21584] xt_TPROXY: Can be used only with -p tcp or -p udp [ 898.961084][T21582] CPU: 1 PID: 21582 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 898.984690][T21582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 898.994726][T21582] Call Trace: [ 898.997990][T21582] dump_stack+0x1b0/0x21e [ 899.002298][T21582] ? devkmsg_release+0x11c/0x11c [ 899.007203][T21582] ? show_regs_print_info+0x12/0x12 [ 899.012371][T21582] ? do_user_addr_fault+0x55c/0x9f0 [ 899.017536][T21582] should_fail+0x6fb/0x860 [ 899.021920][T21582] ? setup_fault_attr+0x2b0/0x2b0 [ 899.026913][T21582] ? setup_fault_attr+0x2b0/0x2b0 [ 899.031905][T21582] ? tipc_msg_build+0xcf5/0x1b20 [ 899.036810][T21582] should_failslab+0x5/0x20 [ 899.041282][T21582] __kmalloc_track_caller+0x5d/0x2b0 [ 899.046537][T21582] ? kmem_cache_alloc+0x1d5/0x250 [ 899.051527][T21582] ? tipc_msg_build+0xcf5/0x1b20 [ 899.056434][T21582] __alloc_skb+0xd1/0x4d0 [ 899.060730][T21582] tipc_msg_build+0xcf5/0x1b20 [ 899.065463][T21582] tipc_send_group_bcast+0x9c1/0xd50 [ 899.070718][T21582] ? __tipc_sendmsg+0x2d30/0x2d30 [ 899.075708][T21582] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 899.081049][T21582] ? wait_woken+0x250/0x250 [ 899.085534][T21582] ? path_openat+0x2258/0x4270 [ 899.090263][T21582] ? do_filp_open+0x1f7/0x430 [ 899.094908][T21582] ? do_sys_open+0x343/0x620 [ 899.099465][T21582] ? do_syscall_64+0xcb/0x150 [ 899.104112][T21582] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 899.110145][T21582] ? new_inode+0x25/0x1d0 [ 899.114439][T21582] ? proc_pid_make_inode+0x23/0x1d0 [ 899.119605][T21582] ? proc_tid_base_lookup+0x185/0x1f0 [ 899.124942][T21582] ? path_openat+0x2258/0x4270 [ 899.129671][T21582] ? do_filp_open+0x1f7/0x430 [ 899.134316][T21582] __tipc_sendmsg+0x400/0x2d30 [ 899.139060][T21582] ? avc_has_perm+0xbd/0x260 [ 899.143648][T21582] ? memset+0x1f/0x40 [ 899.147609][T21582] ? unwind_next_frame+0x1c07/0x22b0 [ 899.152879][T21582] ? local_bh_enable+0x20/0x20 [ 899.157612][T21582] ? arch_stack_walk+0x78/0xe0 [ 899.162350][T21582] ? _raw_spin_lock_bh+0xa4/0x180 [ 899.167341][T21582] ? _local_bh_enable+0x30/0x30 [ 899.172183][T21582] ? memset+0x1f/0x40 [ 899.176132][T21582] ? selinux_socket_sendmsg+0x10b/0x320 [ 899.181645][T21582] ? lock_sock_nested+0x25a/0x320 [ 899.186637][T21582] ? import_iovec+0x171/0x340 [ 899.191292][T21582] ? tipc_recvmsg+0x17c0/0x17c0 [ 899.196110][T21582] tipc_sendmsg+0x51/0x70 [ 899.200407][T21582] ____sys_sendmsg+0x56f/0x860 [ 899.205136][T21582] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 899.210302][T21582] __sys_sendmmsg+0x338/0x680 [ 899.214947][T21582] ? __ia32_sys_sendmsg+0x90/0x90 [ 899.219939][T21582] ? __rcu_read_lock+0x50/0x50 [ 899.224667][T21582] ? __kasan_slab_free+0x1e2/0x220 [ 899.229751][T21582] ? __kasan_slab_free+0x168/0x220 [ 899.234826][T21582] ? slab_free_freelist_hook+0xd0/0x150 [ 899.240335][T21582] ? kmem_cache_free+0xac/0x5c0 [ 899.245149][T21582] ? do_sys_open+0x4a3/0x620 [ 899.249705][T21582] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 899.255736][T21582] ? do_sys_open+0x2fc/0x620 [ 899.260294][T21582] ? proc_fail_nth_write+0x166/0x200 [ 899.265545][T21582] ? _local_bh_enable+0x30/0x30 [ 899.270362][T21582] ? proc_fail_nth_read+0x1c0/0x1c0 [ 899.275554][T21582] ? proc_fail_nth_read+0x1c0/0x1c0 [ 899.280727][T21582] ? memset+0x1f/0x40 [ 899.284682][T21582] ? fsnotify+0x13a0/0x1460 [ 899.289150][T21582] ? __kernel_write+0x340/0x340 [ 899.293971][T21582] ? fsnotify+0x13a0/0x1460 [ 899.298446][T21582] ? security_file_permission+0x128/0x300 [ 899.304130][T21582] ? __sb_end_write+0xa4/0xf0 [ 899.308791][T21582] ? vfs_write+0x427/0x4f0 [ 899.313185][T21582] ? ksys_write+0x237/0x2a0 [ 899.317664][T21582] ? __ia32_sys_read+0x80/0x80 [ 899.322404][T21582] ? fput_many+0x42/0x1a0 [ 899.326700][T21582] __x64_sys_sendmmsg+0x9c/0xb0 [ 899.331520][T21582] do_syscall_64+0xcb/0x150 [ 899.335991][T21582] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 899.341847][T21582] RIP: 0033:0x45de59 [ 899.345708][T21582] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 899.365277][T21582] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 899.373650][T21582] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 899.381692][T21582] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 899.389630][T21582] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 899.397587][T21582] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001d [ 899.405523][T21582] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:25 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:25 executing program 1: r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x1) r2 = socket(0x10, 0x3, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = dup(r2) prctl$PR_GET_DUMPABLE(0x3) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r1, 0x200004) sendfile(r1, r1, 0x0, 0x80001d00c0d3) 05:12:25 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0xa}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x91}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:25 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:25 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:25 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:25 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0xb}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:25 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 899.507682][T21603] xt_TPROXY: Can be used only with -p tcp or -p udp [ 899.516261][T21611] xt_TPROXY: Can be used only with -p tcp or -p udp [ 899.561543][T21624] xt_TPROXY: Can be used only with -p tcp or -p udp [ 899.611358][T21629] xt_TPROXY: Can be used only with -p tcp or -p udp 05:12:25 executing program 3 (fault-call:10 fault-nth:30): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:25 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:25 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:25 executing program 1: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7fff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:12:25 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0xc}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 899.776441][T21666] FAULT_INJECTION: forcing a failure. [ 899.776441][T21666] name failslab, interval 1, probability 0, space 0, times 0 [ 899.776609][T21667] xt_TPROXY: Can be used only with -p tcp or -p udp [ 899.793685][T21666] CPU: 0 PID: 21666 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 899.807494][T21666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 899.817536][T21666] Call Trace: [ 899.820812][T21666] dump_stack+0x1b0/0x21e [ 899.825113][T21666] ? devkmsg_release+0x11c/0x11c [ 899.830019][T21666] ? show_regs_print_info+0x12/0x12 [ 899.835273][T21666] ? do_user_addr_fault+0x55c/0x9f0 [ 899.840440][T21666] should_fail+0x6fb/0x860 [ 899.844829][T21666] ? setup_fault_attr+0x2b0/0x2b0 [ 899.849828][T21666] ? setup_fault_attr+0x2b0/0x2b0 [ 899.854824][T21666] ? tipc_msg_build+0xcf5/0x1b20 [ 899.859730][T21666] should_failslab+0x5/0x20 [ 899.864201][T21666] __kmalloc_track_caller+0x5d/0x2b0 [ 899.869458][T21666] ? kmem_cache_alloc+0x1d5/0x250 [ 899.874465][T21666] ? tipc_msg_build+0xcf5/0x1b20 [ 899.879370][T21666] __alloc_skb+0xd1/0x4d0 [ 899.883669][T21666] tipc_msg_build+0xcf5/0x1b20 [ 899.888403][T21666] tipc_send_group_bcast+0x9c1/0xd50 [ 899.893658][T21666] ? __tipc_sendmsg+0x2d30/0x2d30 [ 899.898649][T21666] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 899.903991][T21666] ? wait_woken+0x250/0x250 [ 899.908462][T21666] ? path_openat+0x2258/0x4270 [ 899.913189][T21666] ? do_filp_open+0x1f7/0x430 [ 899.917830][T21666] ? do_sys_open+0x343/0x620 [ 899.922386][T21666] ? do_syscall_64+0xcb/0x150 [ 899.927061][T21666] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 899.933092][T21666] ? new_inode+0x25/0x1d0 [ 899.937388][T21666] ? proc_pid_make_inode+0x23/0x1d0 [ 899.942548][T21666] ? proc_tid_base_lookup+0x185/0x1f0 [ 899.947910][T21666] ? path_openat+0x2258/0x4270 [ 899.952639][T21666] ? do_filp_open+0x1f7/0x430 [ 899.957282][T21666] __tipc_sendmsg+0x400/0x2d30 [ 899.962016][T21666] ? avc_has_perm+0xbd/0x260 [ 899.966575][T21666] ? memset+0x1f/0x40 [ 899.970526][T21666] ? unwind_next_frame+0x1c07/0x22b0 [ 899.975862][T21666] ? local_bh_enable+0x20/0x20 [ 899.980593][T21666] ? arch_stack_walk+0x78/0xe0 [ 899.985323][T21666] ? _raw_spin_lock_bh+0xa4/0x180 [ 899.990311][T21666] ? _local_bh_enable+0x30/0x30 [ 899.995127][T21666] ? memset+0x1f/0x40 [ 899.999075][T21666] ? selinux_socket_sendmsg+0x10b/0x320 [ 900.004590][T21666] ? lock_sock_nested+0x25a/0x320 [ 900.009582][T21666] ? import_iovec+0x171/0x340 [ 900.014237][T21666] ? tipc_recvmsg+0x17c0/0x17c0 [ 900.019063][T21666] tipc_sendmsg+0x51/0x70 [ 900.023364][T21666] ____sys_sendmsg+0x56f/0x860 [ 900.028095][T21666] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 900.033262][T21666] __sys_sendmmsg+0x338/0x680 [ 900.037906][T21666] ? __ia32_sys_sendmsg+0x90/0x90 [ 900.042901][T21666] ? __rcu_read_lock+0x50/0x50 [ 900.047628][T21666] ? __kasan_slab_free+0x1e2/0x220 [ 900.052708][T21666] ? __kasan_slab_free+0x168/0x220 [ 900.057885][T21666] ? slab_free_freelist_hook+0xd0/0x150 [ 900.063396][T21666] ? kmem_cache_free+0xac/0x5c0 [ 900.068214][T21666] ? do_sys_open+0x4a3/0x620 [ 900.072811][T21666] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 900.078842][T21666] ? do_sys_open+0x2fc/0x620 [ 900.083396][T21666] ? trace_event_raw_event_rcu_utilization+0x170/0x170 [ 900.090209][T21666] ? proc_fail_nth_write+0x166/0x200 [ 900.095460][T21666] ? _local_bh_enable+0x30/0x30 [ 900.100277][T21666] ? proc_fail_nth_read+0x1c0/0x1c0 [ 900.105451][T21666] ? __perf_event_task_sched_out+0x1127/0x1250 [ 900.111569][T21666] ? __perf_event_task_sched_in+0x4ed/0x550 [ 900.117433][T21666] ? perf_pmu_sched_task+0x370/0x370 [ 900.122694][T21666] ? switch_mm_irqs_off+0x46e/0x870 [ 900.127875][T21666] ? trace_event_raw_event_sched_switch+0x480/0x480 [ 900.134434][T21666] ? __schedule+0x8ae/0xe30 [ 900.138902][T21666] ? __fpregs_load_activate+0x2d3/0x390 [ 900.144409][T21666] ? switch_fpu_return+0x10/0x10 [ 900.149315][T21666] ? fput_many+0x42/0x1a0 [ 900.153632][T21666] __x64_sys_sendmmsg+0x9c/0xb0 [ 900.158451][T21666] do_syscall_64+0xcb/0x150 [ 900.162939][T21666] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 900.168794][T21666] RIP: 0033:0x45de59 [ 900.172664][T21666] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 900.192248][T21666] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 900.200630][T21666] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 900.208576][T21666] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 900.216516][T21666] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 05:12:26 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 900.224452][T21666] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001e [ 900.232388][T21666] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c [ 900.264827][T21692] xt_TPROXY: Can be used only with -p tcp or -p udp 05:12:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x92}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:26 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x41140}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) creat(&(0x7f0000000000)='./file1\x00', 0x60) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:12:26 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0xd}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:26 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:26 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:26 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 900.357641][T21722] xt_TPROXY: Can be used only with -p tcp or -p udp 05:12:26 executing program 3 (fault-call:10 fault-nth:31): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:26 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0xe}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:26 executing program 1: r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x1) r2 = socket(0x10, 0x3, 0x0) fcntl$setlease(r0, 0x400, 0x0) r3 = dup(r2) prctl$PR_GET_DUMPABLE(0x3) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ftruncate(r1, 0x200004) sendfile(r1, r1, 0x0, 0x80001d00c0d3) 05:12:26 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:26 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, 0x0}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:26 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0xf}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 900.603308][T21746] FAULT_INJECTION: forcing a failure. [ 900.603308][T21746] name failslab, interval 1, probability 0, space 0, times 0 [ 900.606444][T21749] xt_TPROXY: Can be used only with -p tcp or -p udp [ 900.621425][T21746] CPU: 0 PID: 21746 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 900.634435][T21746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 900.644465][T21746] Call Trace: [ 900.647738][T21746] dump_stack+0x1b0/0x21e [ 900.652059][T21746] ? devkmsg_release+0x11c/0x11c [ 900.656992][T21746] ? show_regs_print_info+0x12/0x12 [ 900.662177][T21746] ? do_user_addr_fault+0x55c/0x9f0 [ 900.667364][T21746] should_fail+0x6fb/0x860 [ 900.671769][T21746] ? setup_fault_attr+0x2b0/0x2b0 [ 900.676867][T21746] ? setup_fault_attr+0x2b0/0x2b0 [ 900.681882][T21746] ? tipc_msg_build+0xcf5/0x1b20 [ 900.686803][T21746] should_failslab+0x5/0x20 [ 900.691289][T21746] __kmalloc_track_caller+0x5d/0x2b0 [ 900.696561][T21746] ? kmem_cache_alloc+0x1d5/0x250 [ 900.701570][T21746] ? tipc_msg_build+0xcf5/0x1b20 [ 900.706494][T21746] __alloc_skb+0xd1/0x4d0 [ 900.710809][T21746] tipc_msg_build+0xcf5/0x1b20 [ 900.715549][T21746] tipc_send_group_bcast+0x9c1/0xd50 [ 900.720803][T21746] ? __tipc_sendmsg+0x2d30/0x2d30 [ 900.725819][T21746] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 900.731161][T21746] ? wait_woken+0x250/0x250 [ 900.735628][T21746] ? path_openat+0x2258/0x4270 [ 900.740357][T21746] ? do_filp_open+0x1f7/0x430 [ 900.745000][T21746] ? do_sys_open+0x343/0x620 [ 900.749558][T21746] ? do_syscall_64+0xcb/0x150 [ 900.754201][T21746] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 900.760232][T21746] ? new_inode+0x25/0x1d0 [ 900.764526][T21746] ? proc_pid_make_inode+0x23/0x1d0 [ 900.769688][T21746] ? proc_tid_base_lookup+0x185/0x1f0 [ 900.775021][T21746] ? path_openat+0x2258/0x4270 [ 900.779752][T21746] ? do_filp_open+0x1f7/0x430 [ 900.784395][T21746] __tipc_sendmsg+0x400/0x2d30 [ 900.789132][T21746] ? avc_has_perm+0xbd/0x260 [ 900.793699][T21746] ? memset+0x1f/0x40 [ 900.797665][T21746] ? unwind_next_frame+0x1c07/0x22b0 [ 900.802928][T21746] ? local_bh_enable+0x20/0x20 [ 900.807669][T21746] ? arch_stack_walk+0x78/0xe0 [ 900.812403][T21746] ? _raw_spin_lock_bh+0xa4/0x180 [ 900.817401][T21746] ? _local_bh_enable+0x30/0x30 [ 900.822308][T21746] ? memset+0x1f/0x40 [ 900.826270][T21746] ? selinux_socket_sendmsg+0x10b/0x320 [ 900.831800][T21746] ? lock_sock_nested+0x25a/0x320 [ 900.836804][T21746] ? import_iovec+0x171/0x340 [ 900.841550][T21746] ? tipc_recvmsg+0x17c0/0x17c0 [ 900.846368][T21746] tipc_sendmsg+0x51/0x70 [ 900.850678][T21746] ____sys_sendmsg+0x56f/0x860 [ 900.855415][T21746] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 900.860582][T21746] __sys_sendmmsg+0x338/0x680 [ 900.865239][T21746] ? __ia32_sys_sendmsg+0x90/0x90 [ 900.870233][T21746] ? __rcu_read_lock+0x50/0x50 [ 900.874962][T21746] ? __kasan_slab_free+0x1e2/0x220 [ 900.880038][T21746] ? __kasan_slab_free+0x168/0x220 [ 900.885137][T21746] ? slab_free_freelist_hook+0xd0/0x150 [ 900.890645][T21746] ? kmem_cache_free+0xac/0x5c0 [ 900.895458][T21746] ? do_sys_open+0x4a3/0x620 [ 900.900015][T21746] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 900.906046][T21746] ? do_sys_open+0x2fc/0x620 [ 900.910617][T21746] ? proc_fail_nth_write+0x166/0x200 [ 900.915869][T21746] ? _local_bh_enable+0x30/0x30 [ 900.920686][T21746] ? proc_fail_nth_read+0x1c0/0x1c0 [ 900.925850][T21746] ? proc_fail_nth_read+0x1c0/0x1c0 [ 900.931017][T21746] ? memset+0x1f/0x40 [ 900.934978][T21746] ? fsnotify+0x13a0/0x1460 [ 900.939449][T21746] ? __kernel_write+0x340/0x340 [ 900.944267][T21746] ? fsnotify+0x13a0/0x1460 [ 900.948739][T21746] ? security_file_permission+0x128/0x300 [ 900.954424][T21746] ? __sb_end_write+0xa4/0xf0 [ 900.959067][T21746] ? vfs_write+0x427/0x4f0 [ 900.963450][T21746] ? ksys_write+0x237/0x2a0 [ 900.967936][T21746] ? __ia32_sys_read+0x80/0x80 [ 900.972692][T21746] ? fput_many+0x42/0x1a0 [ 900.977000][T21746] __x64_sys_sendmmsg+0x9c/0xb0 [ 900.981825][T21746] do_syscall_64+0xcb/0x150 [ 900.986298][T21746] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 900.992160][T21746] RIP: 0033:0x45de59 [ 900.996025][T21746] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 901.015595][T21746] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 901.023975][T21746] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 901.031915][T21746] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 901.039854][T21746] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 901.047796][T21746] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001f [ 901.055734][T21746] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x500}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:27 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:27 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x10}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:27 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:27 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, 0x0}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:27 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x11}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 901.215242][T21796] xt_TPROXY: Can be used only with -p tcp or -p udp 05:12:27 executing program 3 (fault-call:10 fault-nth:32): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:27 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:27 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x12}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:27 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x25}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:27 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 901.422564][T21875] FAULT_INJECTION: forcing a failure. [ 901.422564][T21875] name failslab, interval 1, probability 0, space 0, times 0 [ 901.449605][T21875] CPU: 0 PID: 21875 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 901.461156][T21875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 05:12:27 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x48}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 901.471201][T21875] Call Trace: [ 901.474483][T21875] dump_stack+0x1b0/0x21e [ 901.478799][T21875] ? devkmsg_release+0x11c/0x11c [ 901.483740][T21875] ? do_user_addr_fault+0x55c/0x9f0 [ 901.488916][T21875] ? show_regs_print_info+0x12/0x12 [ 901.494096][T21875] should_fail+0x6fb/0x860 [ 901.498479][T21875] ? setup_fault_attr+0x2b0/0x2b0 [ 901.503470][T21875] ? copy_user_enhanced_fast_string+0xe/0x30 [ 901.509418][T21875] ? __alloc_skb+0x88/0x4d0 [ 901.513887][T21875] should_failslab+0x5/0x20 [ 901.518358][T21875] kmem_cache_alloc+0x36/0x250 [ 901.523092][T21875] __alloc_skb+0x88/0x4d0 [ 901.527403][T21875] ? __check_object_size+0x2e5/0x3b0 [ 901.532661][T21875] tipc_msg_build+0xcf5/0x1b20 [ 901.537394][T21875] tipc_send_group_bcast+0x9c1/0xd50 [ 901.542648][T21875] ? __tipc_sendmsg+0x2d30/0x2d30 [ 901.547699][T21875] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 901.553040][T21875] ? wait_woken+0x250/0x250 [ 901.557532][T21875] ? path_openat+0x2258/0x4270 [ 901.562261][T21875] ? do_filp_open+0x1f7/0x430 [ 901.566903][T21875] ? do_sys_open+0x343/0x620 [ 901.571458][T21875] ? do_syscall_64+0xcb/0x150 [ 901.576102][T21875] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 901.582131][T21875] ? new_inode+0x25/0x1d0 [ 901.586425][T21875] ? proc_pid_make_inode+0x23/0x1d0 [ 901.591591][T21875] ? proc_tid_base_lookup+0x185/0x1f0 [ 901.596927][T21875] ? path_openat+0x2258/0x4270 [ 901.601656][T21875] ? do_filp_open+0x1f7/0x430 [ 901.606305][T21875] __tipc_sendmsg+0x400/0x2d30 [ 901.611045][T21875] ? avc_has_perm+0xbd/0x260 [ 901.615606][T21875] ? memset+0x1f/0x40 [ 901.619569][T21875] ? unwind_next_frame+0x1c07/0x22b0 [ 901.624828][T21875] ? local_bh_enable+0x20/0x20 [ 901.629615][T21875] ? arch_stack_walk+0x78/0xe0 [ 901.634349][T21875] ? _raw_spin_lock_bh+0xa4/0x180 [ 901.639350][T21875] ? _local_bh_enable+0x30/0x30 [ 901.644200][T21875] ? memset+0x1f/0x40 [ 901.648147][T21875] ? selinux_socket_sendmsg+0x10b/0x320 [ 901.653821][T21875] ? lock_sock_nested+0x25a/0x320 [ 901.658823][T21875] ? import_iovec+0x171/0x340 [ 901.663472][T21875] ? tipc_recvmsg+0x17c0/0x17c0 [ 901.668288][T21875] tipc_sendmsg+0x51/0x70 [ 901.672722][T21875] ____sys_sendmsg+0x56f/0x860 [ 901.677543][T21875] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 901.682708][T21875] __sys_sendmmsg+0x338/0x680 [ 901.687391][T21875] ? __ia32_sys_sendmsg+0x90/0x90 [ 901.692405][T21875] ? __rcu_read_lock+0x50/0x50 [ 901.697141][T21875] ? __kasan_slab_free+0x1e2/0x220 [ 901.702240][T21875] ? __kasan_slab_free+0x168/0x220 [ 901.707321][T21875] ? slab_free_freelist_hook+0xd0/0x150 [ 901.712928][T21875] ? kmem_cache_free+0xac/0x5c0 [ 901.717859][T21875] ? do_sys_open+0x4a3/0x620 [ 901.722416][T21875] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 901.728575][T21875] ? do_sys_open+0x2fc/0x620 [ 901.733157][T21875] ? proc_fail_nth_write+0x166/0x200 [ 901.738420][T21875] ? _local_bh_enable+0x30/0x30 [ 901.743246][T21875] ? proc_fail_nth_read+0x1c0/0x1c0 [ 901.748414][T21875] ? proc_fail_nth_read+0x1c0/0x1c0 [ 901.753587][T21875] ? memset+0x1f/0x40 [ 901.757537][T21875] ? fsnotify+0x13a0/0x1460 [ 901.762007][T21875] ? __kernel_write+0x340/0x340 [ 901.766828][T21875] ? fsnotify+0x13a0/0x1460 [ 901.771308][T21875] ? security_file_permission+0x128/0x300 [ 901.777000][T21875] ? __sb_end_write+0xa4/0xf0 [ 901.781646][T21875] ? vfs_write+0x427/0x4f0 [ 901.786028][T21875] ? ksys_write+0x237/0x2a0 [ 901.790497][T21875] ? __ia32_sys_read+0x80/0x80 [ 901.795228][T21875] ? fput_many+0x42/0x1a0 [ 901.799534][T21875] __x64_sys_sendmmsg+0x9c/0xb0 [ 901.804366][T21875] do_syscall_64+0xcb/0x150 [ 901.808965][T21875] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 901.814825][T21875] RIP: 0033:0x45de59 [ 901.818690][T21875] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 901.838262][T21875] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 901.846647][T21875] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 901.854594][T21875] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 901.862532][T21875] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 901.870482][T21875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000020 [ 901.878428][T21875] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x2}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:27 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x4c}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:27 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:27 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, 0x0}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:27 executing program 1: r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x4, 0x80000001}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2000}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x40801) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r4, 0x8, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) ftruncate(r1, 0x200004) sendfile(r1, r1, 0x0, 0x80001d00c0d3) 05:12:27 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:28 executing program 3 (fault-call:10 fault-nth:33): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:28 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x60}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:28 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:28 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x155842, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x78, r3, 0xa0a, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x78}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r0, 0x200004) sendfile(r0, r0, 0x0, 0x80001d00c0d3) 05:12:28 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:28 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x68}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 902.264200][T21945] FAULT_INJECTION: forcing a failure. [ 902.264200][T21945] name failslab, interval 1, probability 0, space 0, times 0 [ 902.282534][T21945] CPU: 1 PID: 21945 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 902.294071][T21945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 902.304108][T21945] Call Trace: [ 902.307382][T21945] dump_stack+0x1b0/0x21e [ 902.311688][T21945] ? devkmsg_release+0x11c/0x11c [ 902.316603][T21945] ? do_user_addr_fault+0x55c/0x9f0 [ 902.321798][T21945] ? show_regs_print_info+0x12/0x12 [ 902.326994][T21945] should_fail+0x6fb/0x860 [ 902.331397][T21945] ? setup_fault_attr+0x2b0/0x2b0 [ 902.336547][T21945] ? copy_user_enhanced_fast_string+0xe/0x30 [ 902.342502][T21945] ? __alloc_skb+0x88/0x4d0 [ 902.346991][T21945] should_failslab+0x5/0x20 [ 902.351483][T21945] kmem_cache_alloc+0x36/0x250 [ 902.356238][T21945] __alloc_skb+0x88/0x4d0 [ 902.360558][T21945] ? __check_object_size+0x2e5/0x3b0 [ 902.365822][T21945] tipc_msg_build+0xcf5/0x1b20 [ 902.370559][T21945] tipc_send_group_bcast+0x9c1/0xd50 [ 902.375836][T21945] ? __tipc_sendmsg+0x2d30/0x2d30 [ 902.380832][T21945] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 902.386171][T21945] ? wait_woken+0x250/0x250 [ 902.390680][T21945] ? path_openat+0x2258/0x4270 [ 902.395410][T21945] ? do_filp_open+0x1f7/0x430 [ 902.400058][T21945] ? do_sys_open+0x343/0x620 [ 902.404699][T21945] ? do_syscall_64+0xcb/0x150 [ 902.409553][T21945] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 902.415586][T21945] ? new_inode+0x25/0x1d0 [ 902.419884][T21945] ? proc_pid_make_inode+0x23/0x1d0 [ 902.425050][T21945] ? proc_tid_base_lookup+0x185/0x1f0 [ 902.430430][T21945] ? path_openat+0x2258/0x4270 [ 902.435158][T21945] ? do_filp_open+0x1f7/0x430 [ 902.439845][T21945] __tipc_sendmsg+0x400/0x2d30 [ 902.444612][T21945] ? avc_has_perm+0xbd/0x260 [ 902.449175][T21945] ? memset+0x1f/0x40 [ 902.453125][T21945] ? unwind_next_frame+0x1c07/0x22b0 [ 902.458376][T21945] ? local_bh_enable+0x20/0x20 [ 902.463112][T21945] ? arch_stack_walk+0x78/0xe0 [ 902.467887][T21945] ? _raw_spin_lock_bh+0xa4/0x180 [ 902.472880][T21945] ? _local_bh_enable+0x30/0x30 [ 902.477696][T21945] ? memset+0x1f/0x40 [ 902.481646][T21945] ? selinux_socket_sendmsg+0x10b/0x320 [ 902.487156][T21945] ? lock_sock_nested+0x25a/0x320 [ 902.492148][T21945] ? import_iovec+0x171/0x340 [ 902.496791][T21945] ? tipc_recvmsg+0x17c0/0x17c0 [ 902.501607][T21945] tipc_sendmsg+0x51/0x70 [ 902.506030][T21945] ____sys_sendmsg+0x56f/0x860 [ 902.510800][T21945] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 902.515967][T21945] __sys_sendmmsg+0x338/0x680 [ 902.520616][T21945] ? __ia32_sys_sendmsg+0x90/0x90 [ 902.525607][T21945] ? __rcu_read_lock+0x50/0x50 [ 902.530335][T21945] ? __kasan_slab_free+0x1e2/0x220 [ 902.535414][T21945] ? __kasan_slab_free+0x168/0x220 [ 902.540490][T21945] ? slab_free_freelist_hook+0xd0/0x150 [ 902.546014][T21945] ? kmem_cache_free+0xac/0x5c0 [ 902.550830][T21945] ? do_sys_open+0x4a3/0x620 [ 902.555387][T21945] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 902.561418][T21945] ? do_sys_open+0x2fc/0x620 [ 902.565976][T21945] ? proc_fail_nth_write+0x166/0x200 [ 902.571231][T21945] ? _local_bh_enable+0x30/0x30 [ 902.576063][T21945] ? proc_fail_nth_read+0x1c0/0x1c0 [ 902.581227][T21945] ? proc_fail_nth_read+0x1c0/0x1c0 [ 902.586390][T21945] ? memset+0x1f/0x40 [ 902.590339][T21945] ? fsnotify+0x13a0/0x1460 [ 902.594809][T21945] ? __kernel_write+0x340/0x340 [ 902.599622][T21945] ? fsnotify+0x13a0/0x1460 [ 902.604093][T21945] ? security_file_permission+0x128/0x300 [ 902.609777][T21945] ? __sb_end_write+0xa4/0xf0 [ 902.614479][T21945] ? vfs_write+0x427/0x4f0 [ 902.618874][T21945] ? ksys_write+0x237/0x2a0 [ 902.623352][T21945] ? __ia32_sys_read+0x80/0x80 [ 902.628087][T21945] ? fput_many+0x42/0x1a0 [ 902.632390][T21945] __x64_sys_sendmmsg+0x9c/0xb0 [ 902.637223][T21945] do_syscall_64+0xcb/0x150 [ 902.641692][T21945] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 902.647554][T21945] RIP: 0033:0x45de59 [ 902.651424][T21945] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 902.671082][T21945] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 902.679459][T21945] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 902.687397][T21945] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 902.695343][T21945] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 902.703280][T21945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000021 [ 902.711353][T21945] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x3}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:28 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:28 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x6c}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0xe4d4}], 0x1}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:28 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:28 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b2}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:28 executing program 3 (fault-call:10 fault-nth:34): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:28 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x74}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:28 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:28 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:28 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x7a}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 903.108923][T22025] FAULT_INJECTION: forcing a failure. [ 903.108923][T22025] name failslab, interval 1, probability 0, space 0, times 0 05:12:28 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 903.200529][T22025] CPU: 0 PID: 22025 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 903.212296][T22025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 903.222432][T22025] Call Trace: [ 903.225711][T22025] dump_stack+0x1b0/0x21e [ 903.230031][T22025] ? devkmsg_release+0x11c/0x11c [ 903.234958][T22025] ? show_regs_print_info+0x12/0x12 [ 903.240143][T22025] ? do_user_addr_fault+0x55c/0x9f0 [ 903.245333][T22025] should_fail+0x6fb/0x860 [ 903.249739][T22025] ? setup_fault_attr+0x2b0/0x2b0 [ 903.254748][T22025] ? setup_fault_attr+0x2b0/0x2b0 [ 903.259756][T22025] ? tipc_msg_build+0xcf5/0x1b20 [ 903.264665][T22025] should_failslab+0x5/0x20 [ 903.269160][T22025] __kmalloc_track_caller+0x5d/0x2b0 [ 903.275473][T22025] ? kmem_cache_alloc+0x1d5/0x250 [ 903.280477][T22025] ? tipc_msg_build+0xcf5/0x1b20 [ 903.285393][T22025] __alloc_skb+0xd1/0x4d0 [ 903.289718][T22025] tipc_msg_build+0xcf5/0x1b20 [ 903.294478][T22025] tipc_send_group_bcast+0x9c1/0xd50 [ 903.299756][T22025] ? __tipc_sendmsg+0x2d30/0x2d30 [ 903.304761][T22025] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 903.310103][T22025] ? wait_woken+0x250/0x250 [ 903.314572][T22025] ? path_openat+0x2258/0x4270 [ 903.319335][T22025] ? do_filp_open+0x1f7/0x430 [ 903.323977][T22025] ? do_sys_open+0x343/0x620 [ 903.328533][T22025] ? do_syscall_64+0xcb/0x150 [ 903.333177][T22025] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 903.339211][T22025] ? new_inode+0x25/0x1d0 [ 903.343507][T22025] ? proc_pid_make_inode+0x23/0x1d0 [ 903.348729][T22025] ? proc_tid_base_lookup+0x185/0x1f0 [ 903.354069][T22025] ? path_openat+0x2258/0x4270 [ 903.358795][T22025] ? do_filp_open+0x1f7/0x430 [ 903.363444][T22025] __tipc_sendmsg+0x400/0x2d30 [ 903.368193][T22025] ? avc_has_perm+0xbd/0x260 [ 903.372750][T22025] ? memset+0x1f/0x40 [ 903.376699][T22025] ? unwind_next_frame+0x1c07/0x22b0 [ 903.381951][T22025] ? local_bh_enable+0x20/0x20 [ 903.386679][T22025] ? arch_stack_walk+0x78/0xe0 [ 903.391454][T22025] ? _raw_spin_lock_bh+0xa4/0x180 [ 903.396445][T22025] ? _local_bh_enable+0x30/0x30 [ 903.401262][T22025] ? memset+0x1f/0x40 [ 903.405219][T22025] ? selinux_socket_sendmsg+0x10b/0x320 [ 903.410740][T22025] ? lock_sock_nested+0x25a/0x320 [ 903.415729][T22025] ? import_iovec+0x171/0x340 [ 903.420378][T22025] ? tipc_recvmsg+0x17c0/0x17c0 [ 903.425201][T22025] tipc_sendmsg+0x51/0x70 [ 903.429499][T22025] ____sys_sendmsg+0x56f/0x860 [ 903.434233][T22025] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 903.439401][T22025] __sys_sendmmsg+0x338/0x680 [ 903.444048][T22025] ? __ia32_sys_sendmsg+0x90/0x90 [ 903.449039][T22025] ? __rcu_read_lock+0x50/0x50 [ 903.453768][T22025] ? __kasan_slab_free+0x1e2/0x220 [ 903.458841][T22025] ? __kasan_slab_free+0x168/0x220 [ 903.463916][T22025] ? slab_free_freelist_hook+0xd0/0x150 [ 903.469445][T22025] ? kmem_cache_free+0xac/0x5c0 [ 903.474259][T22025] ? do_sys_open+0x4a3/0x620 [ 903.478814][T22025] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 903.484846][T22025] ? do_sys_open+0x2fc/0x620 [ 903.489405][T22025] ? proc_fail_nth_write+0x166/0x200 [ 903.494671][T22025] ? _local_bh_enable+0x30/0x30 [ 903.499492][T22025] ? proc_fail_nth_read+0x1c0/0x1c0 [ 903.504654][T22025] ? proc_fail_nth_read+0x1c0/0x1c0 [ 903.509817][T22025] ? memset+0x1f/0x40 [ 903.513765][T22025] ? fsnotify+0x13a0/0x1460 [ 903.518236][T22025] ? __kernel_write+0x340/0x340 [ 903.523095][T22025] ? fsnotify+0x13a0/0x1460 [ 903.527569][T22025] ? security_file_permission+0x128/0x300 [ 903.533261][T22025] ? __sb_end_write+0xa4/0xf0 [ 903.537909][T22025] ? vfs_write+0x427/0x4f0 [ 903.542291][T22025] ? ksys_write+0x237/0x2a0 [ 903.546757][T22025] ? __ia32_sys_read+0x80/0x80 [ 903.551564][T22025] ? fput_many+0x42/0x1a0 [ 903.555861][T22025] __x64_sys_sendmmsg+0x9c/0xb0 [ 903.560676][T22025] do_syscall_64+0xcb/0x150 [ 903.565144][T22025] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 903.571003][T22025] RIP: 0033:0x45de59 [ 903.574862][T22025] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 903.594472][T22025] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 903.602963][T22025] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 903.610899][T22025] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 903.618836][T22025] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 903.626792][T22025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000022 [ 903.634746][T22025] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:29 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x4}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:29 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:29 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0xc}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:29 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:29 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x300}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:29 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x6, &(0x7f0000000040)=[{&(0x7f00000000c0)="0201a5ffffff0a000000ff45ac000000000005000800000000000000024000ffffff82000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000000)) 05:12:29 executing program 3 (fault-call:10 fault-nth:35): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:29 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:29 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x3b8}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:29 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x3fe}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:29 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 903.944043][T22100] FAULT_INJECTION: forcing a failure. [ 903.944043][T22100] name failslab, interval 1, probability 0, space 0, times 0 [ 903.964198][T22104] tproxy_tg6_check: 23 callbacks suppressed [ 903.964201][T22104] xt_TPROXY: Can be used only with -p tcp or -p udp [ 903.989084][T22109] xt_TPROXY: Can be used only with -p tcp or -p udp [ 903.997225][T22100] CPU: 1 PID: 22100 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 904.008750][T22100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 904.018789][T22100] Call Trace: [ 904.022066][T22100] dump_stack+0x1b0/0x21e [ 904.026380][T22100] ? devkmsg_release+0x11c/0x11c [ 904.031319][T22100] ? show_regs_print_info+0x12/0x12 [ 904.036501][T22100] ? do_user_addr_fault+0x55c/0x9f0 [ 904.041713][T22100] should_fail+0x6fb/0x860 [ 904.046112][T22100] ? setup_fault_attr+0x2b0/0x2b0 [ 904.051121][T22100] ? setup_fault_attr+0x2b0/0x2b0 [ 904.056130][T22100] ? tipc_msg_build+0xcf5/0x1b20 [ 904.061047][T22100] should_failslab+0x5/0x20 [ 904.065534][T22100] __kmalloc_track_caller+0x5d/0x2b0 [ 904.070804][T22100] ? kmem_cache_alloc+0x1d5/0x250 [ 904.075812][T22100] ? tipc_msg_build+0xcf5/0x1b20 [ 904.080733][T22100] __alloc_skb+0xd1/0x4d0 [ 904.085047][T22100] tipc_msg_build+0xcf5/0x1b20 [ 904.089799][T22100] tipc_send_group_bcast+0x9c1/0xd50 [ 904.095066][T22100] ? __tipc_sendmsg+0x2d30/0x2d30 [ 904.100079][T22100] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 904.105438][T22100] ? wait_woken+0x250/0x250 [ 904.109918][T22100] ? path_openat+0x2258/0x4270 [ 904.114660][T22100] ? do_filp_open+0x1f7/0x430 [ 904.119321][T22100] ? do_sys_open+0x343/0x620 [ 904.123893][T22100] ? do_syscall_64+0xcb/0x150 [ 904.128554][T22100] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 904.134604][T22100] ? new_inode+0x25/0x1d0 [ 904.138937][T22100] ? proc_pid_make_inode+0x23/0x1d0 [ 904.144119][T22100] ? proc_tid_base_lookup+0x185/0x1f0 [ 904.149472][T22100] ? path_openat+0x2258/0x4270 [ 904.154215][T22100] ? do_filp_open+0x1f7/0x430 [ 904.158871][T22100] __tipc_sendmsg+0x400/0x2d30 [ 904.163615][T22100] ? avc_has_perm+0xbd/0x260 [ 904.168194][T22100] ? memset+0x1f/0x40 [ 904.172177][T22100] ? unwind_next_frame+0x1c07/0x22b0 [ 904.177443][T22100] ? local_bh_enable+0x20/0x20 [ 904.182192][T22100] ? arch_stack_walk+0x78/0xe0 [ 904.186934][T22100] ? _raw_spin_lock_bh+0xa4/0x180 [ 904.191934][T22100] ? _local_bh_enable+0x30/0x30 [ 904.196770][T22100] ? memset+0x1f/0x40 [ 904.200747][T22100] ? selinux_socket_sendmsg+0x10b/0x320 [ 904.206311][T22100] ? lock_sock_nested+0x25a/0x320 [ 904.211325][T22100] ? import_iovec+0x171/0x340 [ 904.215987][T22100] ? tipc_recvmsg+0x17c0/0x17c0 [ 904.220819][T22100] tipc_sendmsg+0x51/0x70 [ 904.225138][T22100] ____sys_sendmsg+0x56f/0x860 [ 904.229884][T22100] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 904.235068][T22100] __sys_sendmmsg+0x338/0x680 [ 904.239732][T22100] ? __ia32_sys_sendmsg+0x90/0x90 [ 904.244738][T22100] ? __rcu_read_lock+0x50/0x50 [ 904.249582][T22100] ? __kasan_slab_free+0x1e2/0x220 [ 904.254675][T22100] ? __kasan_slab_free+0x168/0x220 [ 904.259770][T22100] ? slab_free_freelist_hook+0xd0/0x150 [ 904.265301][T22100] ? kmem_cache_free+0xac/0x5c0 [ 904.270135][T22100] ? do_sys_open+0x4a3/0x620 [ 904.274711][T22100] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 904.280888][T22100] ? do_sys_open+0x2fc/0x620 [ 904.285462][T22100] ? proc_fail_nth_write+0x166/0x200 [ 904.290843][T22100] ? _local_bh_enable+0x30/0x30 [ 904.295758][T22100] ? proc_fail_nth_read+0x1c0/0x1c0 [ 904.300935][T22100] ? proc_fail_nth_read+0x1c0/0x1c0 [ 904.306112][T22100] ? memset+0x1f/0x40 [ 904.310075][T22100] ? fsnotify+0x13a0/0x1460 [ 904.314566][T22100] ? __kernel_write+0x340/0x340 [ 904.319397][T22100] ? fsnotify+0x13a0/0x1460 [ 904.323890][T22100] ? security_file_permission+0x128/0x300 [ 904.329589][T22100] ? __sb_end_write+0xa4/0xf0 [ 904.334252][T22100] ? vfs_write+0x427/0x4f0 [ 904.338657][T22100] ? ksys_write+0x237/0x2a0 [ 904.343146][T22100] ? __ia32_sys_read+0x80/0x80 [ 904.347891][T22100] ? fput_many+0x42/0x1a0 [ 904.352205][T22100] __x64_sys_sendmmsg+0x9c/0xb0 [ 904.357078][T22100] do_syscall_64+0xcb/0x150 [ 904.361590][T22100] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 904.367464][T22100] RIP: 0033:0x45de59 [ 904.371346][T22100] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:12:30 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x4d8}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 904.390944][T22100] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 904.399337][T22100] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 904.407289][T22100] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 904.415259][T22100] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 904.423215][T22100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000023 [ 904.431167][T22100] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c [ 904.489221][T22126] xt_TPROXY: Can be used only with -p tcp or -p udp [ 904.516386][T22138] xt_TPROXY: Can be used only with -p tcp or -p udp 05:12:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x5}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:30 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:30 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x500}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:30 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:30 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:30 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x600}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:30 executing program 3 (fault-call:10 fault-nth:36): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) [ 904.723928][T22148] xt_TPROXY: Can be used only with -p tcp or -p udp [ 904.744991][T22152] xt_TPROXY: Can be used only with -p tcp or -p udp [ 904.796318][T22161] FAULT_INJECTION: forcing a failure. [ 904.796318][T22161] name failslab, interval 1, probability 0, space 0, times 0 [ 904.813477][T22162] xt_TPROXY: Can be used only with -p tcp or -p udp [ 904.830974][T22161] CPU: 0 PID: 22161 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 904.842595][T22161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 904.852633][T22161] Call Trace: [ 904.855909][T22161] dump_stack+0x1b0/0x21e [ 904.860226][T22161] ? devkmsg_release+0x11c/0x11c [ 904.865151][T22161] ? do_user_addr_fault+0x55c/0x9f0 [ 904.870335][T22161] ? show_regs_print_info+0x12/0x12 [ 904.875518][T22161] should_fail+0x6fb/0x860 [ 904.879917][T22161] ? setup_fault_attr+0x2b0/0x2b0 [ 904.884928][T22161] ? copy_user_enhanced_fast_string+0xe/0x30 [ 904.890892][T22161] ? __alloc_skb+0x88/0x4d0 [ 904.895377][T22161] should_failslab+0x5/0x20 [ 904.899863][T22161] kmem_cache_alloc+0x36/0x250 [ 904.904624][T22161] __alloc_skb+0x88/0x4d0 [ 904.908939][T22161] ? __check_object_size+0x2e5/0x3b0 [ 904.914208][T22161] tipc_msg_build+0xcf5/0x1b20 [ 904.918963][T22161] tipc_send_group_bcast+0x9c1/0xd50 [ 904.924238][T22161] ? __tipc_sendmsg+0x2d30/0x2d30 [ 904.929249][T22161] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 904.934605][T22161] ? wait_woken+0x250/0x250 [ 904.939088][T22161] ? path_openat+0x2258/0x4270 [ 904.943832][T22161] ? do_filp_open+0x1f7/0x430 [ 904.948491][T22161] ? do_sys_open+0x343/0x620 [ 904.953062][T22161] ? do_syscall_64+0xcb/0x150 [ 904.957722][T22161] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 904.963770][T22161] ? new_inode+0x25/0x1d0 [ 904.968084][T22161] ? proc_pid_make_inode+0x23/0x1d0 [ 904.969500][T22172] xt_TPROXY: Can be used only with -p tcp or -p udp [ 904.973264][T22161] ? proc_tid_base_lookup+0x185/0x1f0 [ 904.973271][T22161] ? path_openat+0x2258/0x4270 [ 904.973280][T22161] ? do_filp_open+0x1f7/0x430 [ 904.994561][T22161] __tipc_sendmsg+0x400/0x2d30 [ 904.999308][T22161] ? avc_has_perm+0xbd/0x260 [ 905.003894][T22161] ? memset+0x1f/0x40 [ 905.007859][T22161] ? unwind_next_frame+0x1c07/0x22b0 [ 905.013134][T22161] ? local_bh_enable+0x20/0x20 [ 905.017888][T22161] ? arch_stack_walk+0x78/0xe0 [ 905.022645][T22161] ? _raw_spin_lock_bh+0xa4/0x180 [ 905.027650][T22161] ? _local_bh_enable+0x30/0x30 [ 905.032485][T22161] ? memset+0x1f/0x40 [ 905.036449][T22161] ? selinux_socket_sendmsg+0x10b/0x320 [ 905.041976][T22161] ? lock_sock_nested+0x25a/0x320 05:12:30 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x700}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 905.046983][T22161] ? import_iovec+0x171/0x340 [ 905.051658][T22161] ? tipc_recvmsg+0x17c0/0x17c0 [ 905.056489][T22161] tipc_sendmsg+0x51/0x70 [ 905.060806][T22161] ____sys_sendmsg+0x56f/0x860 [ 905.065569][T22161] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 905.070765][T22161] __sys_sendmmsg+0x338/0x680 [ 905.075424][T22161] ? __ia32_sys_sendmsg+0x90/0x90 [ 905.080430][T22161] ? __rcu_read_lock+0x50/0x50 [ 905.085176][T22161] ? __kasan_slab_free+0x1e2/0x220 [ 905.090266][T22161] ? __kasan_slab_free+0x168/0x220 [ 905.095356][T22161] ? slab_free_freelist_hook+0xd0/0x150 [ 905.100881][T22161] ? kmem_cache_free+0xac/0x5c0 [ 905.105714][T22161] ? do_sys_open+0x4a3/0x620 [ 905.110288][T22161] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 905.116342][T22161] ? do_sys_open+0x2fc/0x620 [ 905.120913][T22161] ? proc_fail_nth_write+0x166/0x200 [ 905.126177][T22161] ? _local_bh_enable+0x30/0x30 [ 905.131012][T22161] ? proc_fail_nth_read+0x1c0/0x1c0 [ 905.136188][T22161] ? __perf_event_task_sched_out+0x1127/0x1250 [ 905.142315][T22161] ? proc_fail_nth_read+0x1c0/0x1c0 [ 905.147503][T22161] ? memset+0x1f/0x40 [ 905.151468][T22161] ? fsnotify+0x13a0/0x1460 [ 905.155954][T22161] ? __kernel_write+0x340/0x340 [ 905.160793][T22161] ? fsnotify+0x13a0/0x1460 [ 905.161893][T22177] xt_TPROXY: Can be used only with -p tcp or -p udp [ 905.165369][T22161] ? security_file_permission+0x128/0x300 [ 905.165380][T22161] ? __sb_end_write+0xa4/0xf0 [ 905.182277][T22161] ? vfs_write+0x427/0x4f0 [ 905.186675][T22161] ? ksys_write+0x237/0x2a0 [ 905.191159][T22161] ? __ia32_sys_read+0x80/0x80 [ 905.195903][T22161] ? fput_many+0x42/0x1a0 [ 905.200221][T22161] __x64_sys_sendmmsg+0x9c/0xb0 [ 905.205072][T22161] do_syscall_64+0xcb/0x150 [ 905.209578][T22161] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 905.215457][T22161] RIP: 0033:0x45de59 [ 905.219335][T22161] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 905.238916][T22161] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 905.247308][T22161] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 905.255262][T22161] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 905.258650][T22177] xt_TPROXY: Can be used only with -p tcp or -p udp [ 905.263212][T22161] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 905.263216][T22161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 905.263225][T22161] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:31 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x900}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:31 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0xa00}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x8}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:31 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0xb00}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:31 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:31 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0xc00}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:31 executing program 3 (fault-call:10 fault-nth:37): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:31 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0xd00}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 905.628410][T22247] FAULT_INJECTION: forcing a failure. [ 905.628410][T22247] name failslab, interval 1, probability 0, space 0, times 0 [ 905.657993][T22247] CPU: 0 PID: 22247 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 905.669533][T22247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 905.679683][T22247] Call Trace: [ 905.682958][T22247] dump_stack+0x1b0/0x21e [ 905.687274][T22247] ? devkmsg_release+0x11c/0x11c [ 905.692195][T22247] ? show_regs_print_info+0x12/0x12 [ 905.697378][T22247] ? do_user_addr_fault+0x55c/0x9f0 [ 905.702560][T22247] should_fail+0x6fb/0x860 [ 905.706961][T22247] ? setup_fault_attr+0x2b0/0x2b0 [ 905.711978][T22247] ? setup_fault_attr+0x2b0/0x2b0 [ 905.716992][T22247] ? tipc_msg_build+0xcf5/0x1b20 [ 905.721911][T22247] should_failslab+0x5/0x20 [ 905.726423][T22247] __kmalloc_track_caller+0x5d/0x2b0 [ 905.731692][T22247] ? kmem_cache_alloc+0x1d5/0x250 [ 905.736707][T22247] ? tipc_msg_build+0xcf5/0x1b20 [ 905.741633][T22247] __alloc_skb+0xd1/0x4d0 [ 905.745949][T22247] tipc_msg_build+0xcf5/0x1b20 [ 905.750705][T22247] tipc_send_group_bcast+0x9c1/0xd50 [ 905.755983][T22247] ? __tipc_sendmsg+0x2d30/0x2d30 [ 905.760992][T22247] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 905.766441][T22247] ? wait_woken+0x250/0x250 [ 905.770927][T22247] ? path_openat+0x2258/0x4270 [ 905.775674][T22247] ? do_filp_open+0x1f7/0x430 [ 905.780338][T22247] ? do_sys_open+0x343/0x620 [ 905.784912][T22247] ? do_syscall_64+0xcb/0x150 [ 905.789573][T22247] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 905.795625][T22247] ? new_inode+0x25/0x1d0 [ 905.799942][T22247] ? proc_pid_make_inode+0x23/0x1d0 [ 905.805129][T22247] ? proc_tid_base_lookup+0x185/0x1f0 [ 905.810483][T22247] ? path_openat+0x2258/0x4270 [ 905.815226][T22247] ? do_filp_open+0x1f7/0x430 [ 905.819881][T22247] __tipc_sendmsg+0x400/0x2d30 [ 905.824624][T22247] ? avc_has_perm+0xbd/0x260 [ 905.829213][T22247] ? memset+0x1f/0x40 [ 905.833181][T22247] ? unwind_next_frame+0x1c07/0x22b0 [ 905.838447][T22247] ? local_bh_enable+0x20/0x20 [ 905.843192][T22247] ? arch_stack_walk+0x78/0xe0 [ 905.847946][T22247] ? _raw_spin_lock_bh+0xa4/0x180 [ 905.852954][T22247] ? _local_bh_enable+0x30/0x30 [ 905.857785][T22247] ? memset+0x1f/0x40 [ 905.861752][T22247] ? selinux_socket_sendmsg+0x10b/0x320 [ 905.867295][T22247] ? lock_sock_nested+0x25a/0x320 [ 905.872305][T22247] ? import_iovec+0x171/0x340 [ 905.876967][T22247] ? tipc_recvmsg+0x17c0/0x17c0 [ 905.881799][T22247] tipc_sendmsg+0x51/0x70 [ 905.886108][T22247] ____sys_sendmsg+0x56f/0x860 [ 905.890856][T22247] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 905.896044][T22247] __sys_sendmmsg+0x338/0x680 [ 905.900709][T22247] ? __ia32_sys_sendmsg+0x90/0x90 [ 905.905738][T22247] ? __rcu_read_lock+0x50/0x50 [ 905.910481][T22247] ? __kasan_slab_free+0x1e2/0x220 [ 905.915585][T22247] ? __kasan_slab_free+0x168/0x220 [ 905.920679][T22247] ? slab_free_freelist_hook+0xd0/0x150 [ 905.926204][T22247] ? kmem_cache_free+0xac/0x5c0 [ 905.931035][T22247] ? do_sys_open+0x4a3/0x620 [ 905.935609][T22247] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 905.941744][T22247] ? do_sys_open+0x2fc/0x620 [ 905.946317][T22247] ? proc_fail_nth_write+0x166/0x200 [ 905.951587][T22247] ? _local_bh_enable+0x30/0x30 [ 905.956422][T22247] ? proc_fail_nth_read+0x1c0/0x1c0 [ 905.961605][T22247] ? proc_fail_nth_read+0x1c0/0x1c0 [ 905.966784][T22247] ? memset+0x1f/0x40 [ 905.970757][T22247] ? fsnotify+0x13a0/0x1460 [ 905.975249][T22247] ? __kernel_write+0x340/0x340 [ 905.980082][T22247] ? fsnotify+0x13a0/0x1460 [ 905.984580][T22247] ? security_file_permission+0x128/0x300 [ 905.990284][T22247] ? __sb_end_write+0xa4/0xf0 [ 905.994949][T22247] ? vfs_write+0x427/0x4f0 [ 905.999348][T22247] ? ksys_write+0x237/0x2a0 [ 906.003837][T22247] ? __ia32_sys_read+0x80/0x80 [ 906.008584][T22247] ? fput_many+0x42/0x1a0 [ 906.012897][T22247] __x64_sys_sendmmsg+0x9c/0xb0 [ 906.017736][T22247] do_syscall_64+0xcb/0x150 [ 906.022228][T22247] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 906.028102][T22247] RIP: 0033:0x45de59 [ 906.031976][T22247] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 906.051561][T22247] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 906.059956][T22247] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 906.067913][T22247] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 05:12:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:31 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0xe00}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 906.075872][T22247] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 906.083822][T22247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000025 [ 906.091772][T22247] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c 05:12:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x10}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:32 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:32 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0xf00}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:32 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 05:12:32 executing program 3 (fault-call:10 fault-nth:38): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:32 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x1100}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:32 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2500}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 906.480693][T22314] FAULT_INJECTION: forcing a failure. [ 906.480693][T22314] name failslab, interval 1, probability 0, space 0, times 0 [ 906.529437][T22314] CPU: 1 PID: 22314 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 906.540985][T22314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 906.551022][T22314] Call Trace: [ 906.554300][T22314] dump_stack+0x1b0/0x21e [ 906.558618][T22314] ? devkmsg_release+0x11c/0x11c [ 906.563540][T22314] ? show_regs_print_info+0x12/0x12 [ 906.568720][T22314] ? 0xffffffffa00a0000 [ 906.572859][T22314] should_fail+0x6fb/0x860 [ 906.577255][T22314] ? setup_fault_attr+0x2b0/0x2b0 [ 906.582263][T22314] ? unwind_get_return_address+0x48/0x90 [ 906.587881][T22314] ? arch_stack_walk+0x98/0xe0 [ 906.592629][T22314] ? __alloc_skb+0x88/0x4d0 [ 906.597114][T22314] should_failslab+0x5/0x20 [ 906.601614][T22314] kmem_cache_alloc+0x36/0x250 [ 906.606361][T22314] __alloc_skb+0x88/0x4d0 [ 906.610681][T22314] skb_copy+0xe3/0x740 [ 906.614735][T22314] ? memcpy+0x38/0x50 [ 906.618703][T22314] tipc_buf_append+0x461/0xad0 [ 906.623450][T22314] ? __kasan_kmalloc+0x117/0x1b0 [ 906.628376][T22314] ? tipc_msg_create+0x3a0/0x3a0 [ 906.633316][T22314] ? skb_clone+0x1f4/0x370 [ 906.637722][T22314] tipc_msg_reassemble+0x331/0x590 [ 906.642819][T22314] ? tipc_msg_lookup_dest+0x980/0x980 [ 906.648170][T22314] ? should_fail+0x182/0x860 [ 906.652740][T22314] ? page_fault+0x2f/0x40 [ 906.657050][T22314] ? should_fail+0x182/0x860 [ 906.661620][T22314] ? setup_fault_attr+0x2b0/0x2b0 [ 906.666631][T22314] tipc_mcast_xmit+0x223/0x16c0 [ 906.671471][T22314] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 906.677610][T22314] ? __check_object_size+0x2e5/0x3b0 [ 906.682878][T22314] ? __start___ex_table+0x2cc9/0xa620 [ 906.688233][T22314] tipc_send_group_bcast+0x9f8/0xd50 [ 906.693502][T22314] ? __tipc_sendmsg+0x2d30/0x2d30 [ 906.698508][T22314] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 906.703864][T22314] ? wait_woken+0x250/0x250 [ 906.708353][T22314] ? path_openat+0x2258/0x4270 [ 906.713109][T22314] ? do_filp_open+0x1f7/0x430 [ 906.717860][T22314] ? do_sys_open+0x343/0x620 [ 906.722446][T22314] ? do_syscall_64+0xcb/0x150 [ 906.727112][T22314] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 906.733157][T22314] ? new_inode+0x25/0x1d0 [ 906.737463][T22314] ? proc_pid_make_inode+0x23/0x1d0 [ 906.742643][T22314] ? proc_tid_base_lookup+0x185/0x1f0 [ 906.747995][T22314] ? path_openat+0x2258/0x4270 [ 906.752742][T22314] ? do_filp_open+0x1f7/0x430 [ 906.757413][T22314] __tipc_sendmsg+0x400/0x2d30 [ 906.762160][T22314] ? avc_has_perm+0xbd/0x260 [ 906.766732][T22314] ? memset+0x1f/0x40 [ 906.770700][T22314] ? unwind_next_frame+0x1c07/0x22b0 [ 906.775968][T22314] ? local_bh_enable+0x20/0x20 [ 906.780713][T22314] ? arch_stack_walk+0x78/0xe0 [ 906.785457][T22314] ? _raw_spin_lock_bh+0xa4/0x180 [ 906.790465][T22314] ? _local_bh_enable+0x30/0x30 [ 906.795297][T22314] ? memset+0x1f/0x40 [ 906.799264][T22314] ? selinux_socket_sendmsg+0x10b/0x320 [ 906.804792][T22314] ? lock_sock_nested+0x25a/0x320 [ 906.809909][T22314] ? import_iovec+0x171/0x340 [ 906.814576][T22314] ? tipc_recvmsg+0x17c0/0x17c0 [ 906.819417][T22314] tipc_sendmsg+0x51/0x70 [ 906.823728][T22314] ____sys_sendmsg+0x56f/0x860 [ 906.828479][T22314] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 906.833669][T22314] __sys_sendmmsg+0x338/0x680 [ 906.838336][T22314] ? __ia32_sys_sendmsg+0x90/0x90 [ 906.843344][T22314] ? __rcu_read_lock+0x50/0x50 [ 906.848082][T22314] ? __kasan_slab_free+0x1e2/0x220 [ 906.853182][T22314] ? __kasan_slab_free+0x168/0x220 [ 906.858280][T22314] ? slab_free_freelist_hook+0xd0/0x150 [ 906.863823][T22314] ? kmem_cache_free+0xac/0x5c0 [ 906.868651][T22314] ? do_sys_open+0x4a3/0x620 [ 906.873220][T22314] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 906.879263][T22314] ? do_sys_open+0x2fc/0x620 [ 906.883833][T22314] ? proc_fail_nth_write+0x166/0x200 [ 906.889092][T22314] ? _local_bh_enable+0x30/0x30 [ 906.893925][T22314] ? proc_fail_nth_read+0x1c0/0x1c0 [ 906.899105][T22314] ? proc_fail_nth_read+0x1c0/0x1c0 [ 906.904284][T22314] ? memset+0x1f/0x40 [ 906.908249][T22314] ? fsnotify+0x13a0/0x1460 [ 906.912735][T22314] ? __kernel_write+0x340/0x340 [ 906.917574][T22314] ? fsnotify+0x13a0/0x1460 [ 906.922062][T22314] ? security_file_permission+0x128/0x300 [ 906.927763][T22314] ? __sb_end_write+0xa4/0xf0 [ 906.932421][T22314] ? vfs_write+0x427/0x4f0 [ 906.936820][T22314] ? ksys_write+0x237/0x2a0 [ 906.941306][T22314] ? __ia32_sys_read+0x80/0x80 [ 906.946047][T22314] ? fput_many+0x42/0x1a0 [ 906.950356][T22314] __x64_sys_sendmmsg+0x9c/0xb0 [ 906.955184][T22314] do_syscall_64+0xcb/0x150 [ 906.959667][T22314] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 906.965538][T22314] RIP: 0033:0x45de59 [ 906.969428][T22314] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 906.989153][T22314] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 906.997541][T22314] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 907.005493][T22314] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 907.013453][T22314] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 907.021403][T22314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000026 05:12:32 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x1200}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 907.029356][T22314] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c [ 907.078605][T22314] tipc: Failed do clone local mcast rcv buffer [ 907.085904][T22314] ================================================================== [ 907.093970][T22314] BUG: KASAN: use-after-free in tipc_mcast_xmit+0x1026/0x16c0 [ 907.101400][T22314] Read of size 8 at addr ffff88817bce0780 by task syz-executor.3/22314 [ 907.109606][T22314] [ 907.111924][T22314] CPU: 1 PID: 22314 Comm: syz-executor.3 Tainted: G W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 907.123541][T22314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 907.133579][T22314] Call Trace: [ 907.136856][T22314] dump_stack+0x1b0/0x21e [ 907.141177][T22314] ? show_regs_print_info+0x12/0x12 [ 907.146353][T22314] ? printk+0xc0/0x104 [ 907.150398][T22314] ? printk+0xc0/0x104 [ 907.154449][T22314] print_address_description+0x96/0x5d0 [ 907.160063][T22314] ? devkmsg_release+0x11c/0x11c [ 907.164996][T22314] ? skb_clone+0x1f4/0x370 [ 907.169391][T22314] ? kfree_skb+0x1b6/0x220 [ 907.173388][T22343] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 907.173789][T22314] ? tipc_msg_reassemble+0x3e2/0x590 [ 907.173796][T22314] __kasan_report+0x14b/0x1c0 [ 907.173808][T22314] ? tipc_mcast_xmit+0x1026/0x16c0 [ 907.196907][T22314] kasan_report+0x27/0x50 [ 907.201204][T22314] tipc_mcast_xmit+0x1026/0x16c0 [ 907.206199][T22314] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 907.212319][T22314] ? __check_object_size+0x2e5/0x3b0 [ 907.217573][T22314] ? __start___ex_table+0x2cc9/0xa620 [ 907.223025][T22314] tipc_send_group_bcast+0x9f8/0xd50 [ 907.228281][T22314] ? __tipc_sendmsg+0x2d30/0x2d30 [ 907.233288][T22314] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 907.238629][T22314] ? wait_woken+0x250/0x250 [ 907.243104][T22314] ? path_openat+0x2258/0x4270 [ 907.247835][T22314] ? do_filp_open+0x1f7/0x430 [ 907.252579][T22314] ? do_sys_open+0x343/0x620 [ 907.257134][T22314] ? do_syscall_64+0xcb/0x150 [ 907.261779][T22314] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 907.267809][T22314] ? new_inode+0x25/0x1d0 [ 907.272109][T22314] ? proc_pid_make_inode+0x23/0x1d0 [ 907.277274][T22314] ? proc_tid_base_lookup+0x185/0x1f0 [ 907.282630][T22314] ? path_openat+0x2258/0x4270 [ 907.287365][T22314] ? do_filp_open+0x1f7/0x430 [ 907.292008][T22314] __tipc_sendmsg+0x400/0x2d30 [ 907.296738][T22314] ? avc_has_perm+0xbd/0x260 [ 907.301296][T22314] ? memset+0x1f/0x40 [ 907.305246][T22314] ? unwind_next_frame+0x1c07/0x22b0 [ 907.310496][T22314] ? local_bh_enable+0x20/0x20 [ 907.315229][T22314] ? arch_stack_walk+0x78/0xe0 [ 907.320076][T22314] ? _raw_spin_lock_bh+0xa4/0x180 [ 907.325151][T22314] ? _local_bh_enable+0x30/0x30 [ 907.329966][T22314] ? memset+0x1f/0x40 [ 907.333914][T22314] ? selinux_socket_sendmsg+0x10b/0x320 [ 907.339441][T22314] ? lock_sock_nested+0x25a/0x320 [ 907.344431][T22314] ? import_iovec+0x171/0x340 [ 907.349074][T22314] ? tipc_recvmsg+0x17c0/0x17c0 [ 907.353888][T22314] tipc_sendmsg+0x51/0x70 [ 907.358183][T22314] ____sys_sendmsg+0x56f/0x860 [ 907.362920][T22314] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 907.368093][T22314] __sys_sendmmsg+0x338/0x680 [ 907.372738][T22314] ? __ia32_sys_sendmsg+0x90/0x90 [ 907.377731][T22314] ? __rcu_read_lock+0x50/0x50 [ 907.382460][T22314] ? __kasan_slab_free+0x1e2/0x220 [ 907.387544][T22314] ? __kasan_slab_free+0x168/0x220 [ 907.392621][T22314] ? slab_free_freelist_hook+0xd0/0x150 [ 907.398132][T22314] ? kmem_cache_free+0xac/0x5c0 [ 907.402949][T22314] ? do_sys_open+0x4a3/0x620 [ 907.407506][T22314] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 907.413543][T22314] ? do_sys_open+0x2fc/0x620 [ 907.418099][T22314] ? proc_fail_nth_write+0x166/0x200 [ 907.423348][T22314] ? _local_bh_enable+0x30/0x30 [ 907.428165][T22314] ? proc_fail_nth_read+0x1c0/0x1c0 [ 907.433330][T22314] ? proc_fail_nth_read+0x1c0/0x1c0 [ 907.438493][T22314] ? memset+0x1f/0x40 [ 907.442441][T22314] ? fsnotify+0x13a0/0x1460 [ 907.446911][T22314] ? __kernel_write+0x340/0x340 [ 907.451728][T22314] ? fsnotify+0x13a0/0x1460 [ 907.456203][T22314] ? security_file_permission+0x128/0x300 [ 907.461886][T22314] ? __sb_end_write+0xa4/0xf0 [ 907.466530][T22314] ? vfs_write+0x427/0x4f0 [ 907.470912][T22314] ? ksys_write+0x237/0x2a0 [ 907.475380][T22314] ? __ia32_sys_read+0x80/0x80 [ 907.480110][T22314] ? fput_many+0x42/0x1a0 [ 907.484406][T22314] __x64_sys_sendmmsg+0x9c/0xb0 [ 907.489225][T22314] do_syscall_64+0xcb/0x150 [ 907.493694][T22314] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 907.499553][T22314] RIP: 0033:0x45de59 [ 907.503415][T22314] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 907.522986][T22314] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 907.531361][T22314] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 907.539299][T22314] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 907.547238][T22314] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 907.555177][T22314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000026 [ 907.563115][T22314] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c [ 907.571055][T22314] [ 907.573350][T22314] Allocated by task 22314: [ 907.577728][T22314] __kasan_kmalloc+0x117/0x1b0 [ 907.582453][T22314] kmem_cache_alloc+0x1d5/0x250 [ 907.587281][T22314] __alloc_skb+0x88/0x4d0 [ 907.591577][T22314] tipc_msg_build+0x74a/0x1b20 [ 907.596305][T22314] tipc_send_group_bcast+0x9c1/0xd50 [ 907.601551][T22314] __tipc_sendmsg+0x400/0x2d30 [ 907.606279][T22314] tipc_sendmsg+0x51/0x70 [ 907.610575][T22314] ____sys_sendmsg+0x56f/0x860 [ 907.615303][T22314] __sys_sendmmsg+0x338/0x680 [ 907.619942][T22314] __x64_sys_sendmmsg+0x9c/0xb0 [ 907.624848][T22314] do_syscall_64+0xcb/0x150 [ 907.629453][T22314] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 907.635309][T22314] [ 907.637608][T22314] Freed by task 22314: [ 907.641645][T22314] __kasan_slab_free+0x168/0x220 [ 907.646551][T22314] slab_free_freelist_hook+0xd0/0x150 [ 907.651890][T22314] kmem_cache_free+0xac/0x5c0 [ 907.656532][T22314] tipc_buf_append+0x2d1/0xad0 [ 907.661264][T22314] tipc_msg_reassemble+0x331/0x590 [ 907.666341][T22314] tipc_mcast_xmit+0x223/0x16c0 [ 907.671154][T22314] tipc_send_group_bcast+0x9f8/0xd50 [ 907.676404][T22314] __tipc_sendmsg+0x400/0x2d30 [ 907.681131][T22314] tipc_sendmsg+0x51/0x70 [ 907.685425][T22314] ____sys_sendmsg+0x56f/0x860 [ 907.690163][T22314] __sys_sendmmsg+0x338/0x680 [ 907.694814][T22314] __x64_sys_sendmmsg+0x9c/0xb0 [ 907.699630][T22314] do_syscall_64+0xcb/0x150 [ 907.704115][T22314] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 907.709968][T22314] [ 907.712267][T22314] The buggy address belongs to the object at ffff88817bce0780 [ 907.712267][T22314] which belongs to the cache skbuff_fclone_cache of size 488 [ 907.726976][T22314] The buggy address is located 0 bytes inside of [ 907.726976][T22314] 488-byte region [ffff88817bce0780, ffff88817bce0968) [ 907.740041][T22314] The buggy address belongs to the page: [ 907.745650][T22314] page:ffffea0005ef3800 refcount:1 mapcount:0 mapping:ffff8881daa93680 index:0xffff88817bce1400 compound_mapcount: 0 [ 907.757844][T22314] flags: 0x8000000000010200(slab|head) [ 907.763270][T22314] raw: 8000000000010200 ffffea00013dec00 0000000300000003 ffff8881daa93680 [ 907.771934][T22314] raw: ffff88817bce1400 00000000800c0009 00000001ffffffff 0000000000000000 [ 907.780478][T22314] page dumped because: kasan: bad access detected [ 907.786860][T22314] [ 907.789163][T22314] Memory state around the buggy address: [ 907.794764][T22314] ffff88817bce0680: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 907.802797][T22314] ffff88817bce0700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 907.810829][T22314] >ffff88817bce0780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 907.818853][T22314] ^ [ 907.822885][T22314] ffff88817bce0800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 05:12:32 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2700}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r4, @ANYBLOB="0a000600ffffff08000001000c008100040001"], 0x34}}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r5) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f00000001c0)={0x3bc, r3, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x24}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1}, @NL80211_ATTR_IE={0x1f5, 0x2a, [@perr={0x84, 0xcf, {0xff, 0xd, [@ext={{}, @device_a, 0x3, @broadcast, 0x22}, @ext={{}, @device_a, 0x2, @device_b, 0x9}, @not_ext={{}, @device_b, 0x5aad, "", 0x2d}, @not_ext={{}, @broadcast, 0x8, "", 0x3}, @ext={{}, @broadcast, 0x0, @broadcast, 0x30}, @ext={{}, @device_b, 0x1a7, @broadcast, 0x33}, @not_ext={{}, @device_b, 0x0, "", 0xc}, @not_ext={{}, @broadcast, 0xfffffff0, "", 0x32}, @ext={{}, @broadcast, 0x1, @device_a, 0x31}, @not_ext={{}, @device_a, 0x7f, "", 0x32}, @not_ext={{}, @broadcast, 0x0, "", 0x7}, @not_ext={{}, @broadcast, 0x9, "", 0x1a}, @ext={{}, @broadcast, 0x3, @device_a, 0x2e}]}}, @perr={0x84, 0x110, {0x3f, 0x12, [@not_ext={{}, @device_a, 0x1, "", 0x14}, @not_ext={{}, @broadcast, 0x2, "", 0x25}, @not_ext={{}, @device_b, 0x9, "", 0x24}, @ext={{}, @device_b, 0x85c8, @broadcast, 0x2a}, @not_ext={{}, @device_a, 0x3, "", 0x34}, @ext={{}, @broadcast, 0x2, @device_a, 0x29}, @ext={{}, @device_a, 0xffff83b5, @device_a, 0x2a}, @not_ext={{}, @device_a, 0x1, "", 0x13}, @ext={{}, @device_a, 0x1, @device_a, 0xb}, @ext={{}, @device_a, 0x2, @device_b, 0x2}, @ext={{}, @device_b, 0x8, @broadcast, 0x21}, @not_ext={{}, @device_b, 0xe2}, @not_ext={{}, @device_a, 0x58579291, "", 0x3b}, @not_ext={{}, @broadcast, 0x1, "", 0xa}, @not_ext={{}, @broadcast, 0x80000001, "", 0x11}, @not_ext={{}, @device_b, 0x3ff, "", 0x38}, @not_ext={{}, @device_b, 0x4, "", 0x29}, @not_ext={{}, @device_b, 0x7f, "", 0x26}]}}, @mesh_chsw={0x76, 0x6, {0x2, 0x8, 0x35, 0x800}}, @dsss={0x3, 0x1, 0x68}, @challenge={0x10, 0x1, 0x5c}]}, @NL80211_ATTR_KEYS={0x154, 0x51, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "150cfaf6cc"}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "f33e6cc8fc"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b6929d0679"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b855f0a6cd"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "853e7c254c"}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x5, 0x4, "0e"}, @NL80211_KEY_CIPHER={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, {0x6c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "85a50ded2f8f0d08ca27ce807f"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0023ed5403"}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "64972d7699"}, @NL80211_KEY_TYPE={0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d16818a5c3"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_TYPE={0x8}]}]}, @NL80211_ATTR_KEYS={0x40, 0x51, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "f39073111c"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "de7aac6575"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0x7aac0403f46a8a6a}]}]}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x10}, 0xc4004) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r6, &(0x7f0000000100)={0x10}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000b, 0x12, r6, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000000)) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007999d02ff278039a60e2a885a593f9d4827ea4d48e0c452b77d89caec41e7867e971e2000000002613f462acb4244feb138d7505bcafe8b5cc53a631019fefb3e90c2427629135932f9b2f770a21583691283d466b9e480b78939eaefeedc64e968fc06e26729b1045b7d4ef774679f9f294788a20c11390fad2a0702ddc96f825b27643124b69"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r8, 0xc0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x6, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x0, 0x6, 0xa, 0xa, 0xfffffffffffffff8, 0x1}, @map_val={0x18, 0x4, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x7fff}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @exit], &(0x7f0000000080)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r9}, 0x78) 05:12:33 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x2000}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) [ 907.831018][T22314] ffff88817bce0880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 907.839045][T22314] ================================================================== [ 907.847082][T22314] Disabling lock debugging due to kernel taint 05:12:33 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 907.939676][T22314] ================================================================== [ 907.947777][T22314] BUG: KASAN: double-free or invalid-free in kfree+0x12b/0x5d0 [ 907.955313][T22314] [ 907.957621][T22314] CPU: 1 PID: 22314 Comm: syz-executor.3 Tainted: G B W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 907.969118][T22314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 907.979141][T22314] Call Trace: [ 907.982403][T22314] dump_stack+0x1b0/0x21e [ 907.986711][T22314] ? show_regs_print_info+0x12/0x12 [ 907.991881][T22314] ? __perf_event_task_sched_in+0x4ed/0x550 [ 907.997742][T22314] ? printk+0xc0/0x104 [ 908.001778][T22314] ? kfree+0x12b/0x5d0 [ 908.005830][T22314] ? kfree+0x12b/0x5d0 [ 908.009868][T22314] print_address_description+0x96/0x5d0 [ 908.015398][T22314] ? devkmsg_release+0x11c/0x11c [ 908.020303][T22314] ? kfree+0x12b/0x5d0 [ 908.024334][T22314] ? kfree+0x12b/0x5d0 [ 908.028381][T22314] kasan_report_invalid_free+0x54/0xc0 [ 908.033802][T22314] __kasan_slab_free+0x102/0x220 [ 908.038704][T22314] ? cmp_ex_search+0x6d/0x90 [ 908.043261][T22314] ? __start___ex_table+0x717c/0xa620 [ 908.048600][T22314] ? bsearch+0x9b/0xc0 [ 908.052642][T22314] ? search_extable+0xf0/0xf0 [ 908.057369][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 908.063311][T22314] ? __stop_notes+0xc/0xc [ 908.067606][T22314] ? search_extable+0xaf/0xf0 [ 908.072252][T22314] ? __rcu_read_lock+0x50/0x50 [ 908.076980][T22314] ? trim_init_extable+0x3e0/0x3e0 [ 908.082053][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 908.087998][T22314] ? __start___ex_table+0x717c/0xa620 [ 908.093335][T22314] ? __start___ex_table+0x717c/0xa620 [ 908.098686][T22314] ? __rcu_read_lock+0x50/0x50 [ 908.103416][T22314] ? ex_handler_refcount+0x130/0x170 [ 908.108668][T22314] ? ex_handler_fault+0xa0/0xa0 [ 908.113489][T22314] ? unix_write_space+0x18a/0x230 [ 908.118482][T22314] ? sock_wfree+0x117/0x160 [ 908.122952][T22314] ? unix_destruct_scm+0x2e4/0x350 [ 908.128032][T22314] slab_free_freelist_hook+0xd0/0x150 [ 908.133369][T22314] ? __kfree_skb+0x55/0x180 [ 908.137837][T22314] kfree+0x12b/0x5d0 [ 908.141697][T22314] __kfree_skb+0x55/0x180 [ 908.145991][T22314] tipc_mcast_xmit+0x10a8/0x16c0 [ 908.150898][T22314] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 908.157020][T22314] ? __check_object_size+0x2e5/0x3b0 [ 908.162269][T22314] ? __start___ex_table+0x2cc9/0xa620 [ 908.167606][T22314] tipc_send_group_bcast+0x9f8/0xd50 [ 908.172857][T22314] ? __tipc_sendmsg+0x2d30/0x2d30 [ 908.177847][T22314] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 908.183185][T22314] ? wait_woken+0x250/0x250 [ 908.187654][T22314] ? path_openat+0x2258/0x4270 [ 908.192382][T22314] ? do_filp_open+0x1f7/0x430 [ 908.197044][T22314] ? do_sys_open+0x343/0x620 [ 908.201600][T22314] ? do_syscall_64+0xcb/0x150 [ 908.206242][T22314] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 908.212273][T22314] ? new_inode+0x25/0x1d0 [ 908.216567][T22314] ? proc_pid_make_inode+0x23/0x1d0 [ 908.221730][T22314] ? proc_tid_base_lookup+0x185/0x1f0 [ 908.227068][T22314] ? path_openat+0x2258/0x4270 [ 908.231794][T22314] ? do_filp_open+0x1f7/0x430 [ 908.236444][T22314] __tipc_sendmsg+0x400/0x2d30 [ 908.241174][T22314] ? avc_has_perm+0xbd/0x260 [ 908.245818][T22314] ? memset+0x1f/0x40 [ 908.249767][T22314] ? unwind_next_frame+0x1c07/0x22b0 [ 908.255016][T22314] ? local_bh_enable+0x20/0x20 [ 908.259744][T22314] ? arch_stack_walk+0x78/0xe0 [ 908.264481][T22314] ? _raw_spin_lock_bh+0xa4/0x180 [ 908.269473][T22314] ? _local_bh_enable+0x30/0x30 [ 908.274289][T22314] ? memset+0x1f/0x40 [ 908.278239][T22314] ? selinux_socket_sendmsg+0x10b/0x320 [ 908.283750][T22314] ? lock_sock_nested+0x25a/0x320 [ 908.288756][T22314] ? import_iovec+0x171/0x340 [ 908.293399][T22314] ? tipc_recvmsg+0x17c0/0x17c0 [ 908.298214][T22314] tipc_sendmsg+0x51/0x70 [ 908.302509][T22314] ____sys_sendmsg+0x56f/0x860 [ 908.307242][T22314] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 908.312407][T22314] __sys_sendmmsg+0x338/0x680 [ 908.317047][T22314] ? __ia32_sys_sendmsg+0x90/0x90 [ 908.322147][T22314] ? __rcu_read_lock+0x50/0x50 [ 908.326873][T22314] ? __kasan_slab_free+0x1e2/0x220 [ 908.331965][T22314] ? __kasan_slab_free+0x168/0x220 [ 908.337059][T22314] ? slab_free_freelist_hook+0xd0/0x150 [ 908.342569][T22314] ? kmem_cache_free+0xac/0x5c0 [ 908.347394][T22314] ? do_sys_open+0x4a3/0x620 [ 908.351950][T22314] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 908.357984][T22314] ? do_sys_open+0x2fc/0x620 [ 908.362565][T22314] ? proc_fail_nth_write+0x166/0x200 [ 908.367819][T22314] ? _local_bh_enable+0x30/0x30 [ 908.372636][T22314] ? proc_fail_nth_read+0x1c0/0x1c0 [ 908.377826][T22314] ? proc_fail_nth_read+0x1c0/0x1c0 [ 908.382990][T22314] ? memset+0x1f/0x40 [ 908.386935][T22314] ? fsnotify+0x13a0/0x1460 [ 908.391404][T22314] ? __kernel_write+0x340/0x340 [ 908.396218][T22314] ? fsnotify+0x13a0/0x1460 [ 908.400791][T22314] ? security_file_permission+0x128/0x300 [ 908.406473][T22314] ? __sb_end_write+0xa4/0xf0 [ 908.411116][T22314] ? vfs_write+0x427/0x4f0 [ 908.415512][T22314] ? ksys_write+0x237/0x2a0 [ 908.419982][T22314] ? __ia32_sys_read+0x80/0x80 [ 908.424717][T22314] ? fput_many+0x42/0x1a0 [ 908.429025][T22314] __x64_sys_sendmmsg+0x9c/0xb0 [ 908.433841][T22314] do_syscall_64+0xcb/0x150 [ 908.438314][T22314] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 908.444173][T22314] RIP: 0033:0x45de59 [ 908.448039][T22314] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 908.467607][T22314] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 908.475981][T22314] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 908.483918][T22314] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 908.491857][T22314] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 908.499811][T22314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000026 [ 908.507752][T22314] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c [ 908.515697][T22314] [ 908.517999][T22314] Allocated by task 1: [ 908.522036][T22314] __kasan_kmalloc+0x117/0x1b0 [ 908.526764][T22314] __kmalloc_track_caller+0x201/0x2b0 [ 908.532102][T22314] __alloc_skb+0xd1/0x4d0 [ 908.536399][T22314] alloc_skb_with_frags+0xb1/0x580 [ 908.541476][T22314] sock_alloc_send_pskb+0x87e/0xcc0 [ 908.546640][T22314] unix_dgram_sendmsg+0x6c3/0x26b0 [ 908.551717][T22314] ____sys_sendmsg+0x56f/0x860 [ 908.556444][T22314] __sys_sendmsg+0x26a/0x350 [ 908.561009][T22314] do_syscall_64+0xcb/0x150 [ 908.565478][T22314] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 908.571334][T22314] [ 908.573630][T22314] Freed by task 143: [ 908.577489][T22314] __kasan_slab_free+0x168/0x220 [ 908.582389][T22314] slab_free_freelist_hook+0xd0/0x150 [ 908.587835][T22314] kfree+0x12b/0x5d0 [ 908.591714][T22314] __kfree_skb+0x55/0x180 [ 908.596007][T22314] skb_free_datagram+0x24/0xd0 [ 908.600735][T22314] unix_dgram_recvmsg+0xb0e/0xfe0 [ 908.605721][T22314] __sys_recvmsg+0x632/0xc00 [ 908.610289][T22314] do_syscall_64+0xcb/0x150 [ 908.614763][T22314] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 908.620625][T22314] [ 908.622923][T22314] The buggy address belongs to the object at ffff88804e169800 [ 908.622923][T22314] which belongs to the cache kmalloc-1k of size 1024 [ 908.636945][T22314] The buggy address is located 0 bytes inside of [ 908.636945][T22314] 1024-byte region [ffff88804e169800, ffff88804e169c00) [ 908.650091][T22314] The buggy address belongs to the page: [ 908.655692][T22314] page:ffffea0001385a00 refcount:1 mapcount:0 mapping:ffff8881da802280 index:0x0 compound_mapcount: 0 [ 908.666596][T22314] flags: 0x4000000000010200(slab|head) [ 908.672025][T22314] raw: 4000000000010200 ffffea00076ab200 0000000600000006 ffff8881da802280 [ 908.680581][T22314] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 908.689130][T22314] page dumped because: kasan: bad access detected [ 908.695507][T22314] [ 908.697799][T22314] Memory state around the buggy address: [ 908.703395][T22314] ffff88804e169700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 908.711429][T22314] ffff88804e169780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 908.719543][T22314] >ffff88804e169800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 908.727567][T22314] ^ [ 908.731611][T22314] ffff88804e169880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 908.739647][T22314] ffff88804e169900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 908.747764][T22314] ================================================================== [ 908.761834][T22314] ================================================================== [ 908.769908][T22314] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 908.778317][T22314] [ 908.780640][T22314] CPU: 1 PID: 22314 Comm: syz-executor.3 Tainted: G B W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 908.792159][T22314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 908.802194][T22314] Call Trace: [ 908.805464][T22314] dump_stack+0x1b0/0x21e [ 908.809781][T22314] ? vprintk_emit+0x31e/0x470 [ 908.814441][T22314] ? show_regs_print_info+0x12/0x12 [ 908.819624][T22314] ? kfree+0x12b/0x5d0 [ 908.823683][T22314] ? printk+0xc0/0x104 [ 908.827736][T22314] ? kmem_cache_free+0xac/0x5c0 [ 908.832574][T22314] ? kmem_cache_free+0xac/0x5c0 [ 908.837422][T22314] print_address_description+0x96/0x5d0 [ 908.842951][T22314] ? devkmsg_release+0x11c/0x11c [ 908.847875][T22314] ? kmem_cache_free+0xac/0x5c0 [ 908.848446][T22343] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 908.852704][T22314] ? kmem_cache_free+0xac/0x5c0 [ 908.852713][T22314] kasan_report_invalid_free+0x54/0xc0 [ 908.852719][T22314] __kasan_slab_free+0x102/0x220 [ 908.852731][T22314] ? cmp_ex_search+0x6d/0x90 [ 908.881614][T22314] ? __start___ex_table+0x717c/0xa620 [ 908.886949][T22314] ? bsearch+0x9b/0xc0 [ 908.890990][T22314] ? search_extable+0xf0/0xf0 [ 908.895638][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 908.901585][T22314] ? __stop_notes+0xc/0xc [ 908.905882][T22314] ? search_extable+0xaf/0xf0 [ 908.910530][T22314] ? __rcu_read_lock+0x50/0x50 [ 908.915257][T22314] ? trim_init_extable+0x3e0/0x3e0 [ 908.920339][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 908.926307][T22314] ? __start___ex_table+0x717c/0xa620 [ 908.931674][T22314] ? __start___ex_table+0x717c/0xa620 [ 908.937047][T22314] ? __rcu_read_lock+0x50/0x50 [ 908.941790][T22314] ? ex_handler_refcount+0x130/0x170 [ 908.947058][T22314] ? ex_handler_fault+0xa0/0xa0 [ 908.951874][T22314] ? unix_write_space+0x18a/0x230 [ 908.956867][T22314] ? sock_wfree+0x117/0x160 [ 908.961335][T22314] ? unix_destruct_scm+0x2e4/0x350 [ 908.966437][T22314] slab_free_freelist_hook+0xd0/0x150 [ 908.971782][T22314] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 908.976861][T22314] kmem_cache_free+0xac/0x5c0 [ 908.981505][T22314] ? kasan_report+0x27/0x50 [ 908.985976][T22314] tipc_mcast_xmit+0x10a8/0x16c0 [ 908.990884][T22314] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 908.997010][T22314] ? __check_object_size+0x2e5/0x3b0 [ 909.002278][T22314] ? __start___ex_table+0x2cc9/0xa620 [ 909.007617][T22314] tipc_send_group_bcast+0x9f8/0xd50 [ 909.012872][T22314] ? __tipc_sendmsg+0x2d30/0x2d30 [ 909.017863][T22314] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 909.023201][T22314] ? wait_woken+0x250/0x250 [ 909.027668][T22314] ? path_openat+0x2258/0x4270 [ 909.032425][T22314] ? do_filp_open+0x1f7/0x430 [ 909.037080][T22314] ? do_sys_open+0x343/0x620 [ 909.041639][T22314] ? do_syscall_64+0xcb/0x150 [ 909.046282][T22314] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 909.052316][T22314] ? new_inode+0x25/0x1d0 [ 909.056612][T22314] ? proc_pid_make_inode+0x23/0x1d0 [ 909.061778][T22314] ? proc_tid_base_lookup+0x185/0x1f0 [ 909.067138][T22314] ? path_openat+0x2258/0x4270 [ 909.071878][T22314] ? do_filp_open+0x1f7/0x430 [ 909.076520][T22314] __tipc_sendmsg+0x400/0x2d30 [ 909.081254][T22314] ? avc_has_perm+0xbd/0x260 [ 909.086043][T22314] ? memset+0x1f/0x40 [ 909.089992][T22314] ? unwind_next_frame+0x1c07/0x22b0 [ 909.095240][T22314] ? local_bh_enable+0x20/0x20 [ 909.100002][T22314] ? arch_stack_walk+0x78/0xe0 [ 909.104728][T22314] ? _raw_spin_lock_bh+0xa4/0x180 [ 909.109716][T22314] ? _local_bh_enable+0x30/0x30 [ 909.114531][T22314] ? memset+0x1f/0x40 [ 909.118476][T22314] ? selinux_socket_sendmsg+0x10b/0x320 [ 909.123986][T22314] ? lock_sock_nested+0x25a/0x320 [ 909.129110][T22314] ? import_iovec+0x171/0x340 [ 909.133754][T22314] ? tipc_recvmsg+0x17c0/0x17c0 [ 909.138569][T22314] tipc_sendmsg+0x51/0x70 [ 909.142866][T22314] ____sys_sendmsg+0x56f/0x860 [ 909.147596][T22314] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 909.152769][T22314] __sys_sendmmsg+0x338/0x680 [ 909.157432][T22314] ? __ia32_sys_sendmsg+0x90/0x90 [ 909.162424][T22314] ? __rcu_read_lock+0x50/0x50 [ 909.167152][T22314] ? __kasan_slab_free+0x1e2/0x220 [ 909.172254][T22314] ? __kasan_slab_free+0x168/0x220 [ 909.177345][T22314] ? slab_free_freelist_hook+0xd0/0x150 [ 909.182860][T22314] ? kmem_cache_free+0xac/0x5c0 [ 909.187678][T22314] ? do_sys_open+0x4a3/0x620 [ 909.192236][T22314] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 909.198272][T22314] ? do_sys_open+0x2fc/0x620 [ 909.202938][T22314] ? proc_fail_nth_write+0x166/0x200 [ 909.208188][T22314] ? _local_bh_enable+0x30/0x30 [ 909.213041][T22314] ? proc_fail_nth_read+0x1c0/0x1c0 [ 909.218214][T22314] ? proc_fail_nth_read+0x1c0/0x1c0 [ 909.223380][T22314] ? memset+0x1f/0x40 [ 909.227360][T22314] ? fsnotify+0x13a0/0x1460 [ 909.231826][T22314] ? __kernel_write+0x340/0x340 [ 909.236697][T22314] ? fsnotify+0x13a0/0x1460 [ 909.241174][T22314] ? security_file_permission+0x128/0x300 [ 909.246863][T22314] ? __sb_end_write+0xa4/0xf0 [ 909.251545][T22314] ? vfs_write+0x427/0x4f0 [ 909.255928][T22314] ? ksys_write+0x237/0x2a0 [ 909.260418][T22314] ? __ia32_sys_read+0x80/0x80 [ 909.265150][T22314] ? fput_many+0x42/0x1a0 [ 909.269449][T22314] __x64_sys_sendmmsg+0x9c/0xb0 [ 909.274268][T22314] do_syscall_64+0xcb/0x150 [ 909.278740][T22314] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 909.284600][T22314] RIP: 0033:0x45de59 [ 909.288462][T22314] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 909.308158][T22314] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 909.316531][T22314] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 909.324469][T22314] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 909.332407][T22314] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 909.340342][T22314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000026 [ 909.348282][T22314] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c [ 909.356233][T22314] [ 909.358536][T22314] Allocated by task 1: [ 909.362574][T22314] __kasan_kmalloc+0x117/0x1b0 [ 909.367308][T22314] kmem_cache_alloc+0x1d5/0x250 [ 909.372134][T22314] __alloc_skb+0x88/0x4d0 [ 909.376428][T22314] alloc_skb_with_frags+0xb1/0x580 [ 909.381515][T22314] sock_alloc_send_pskb+0x87e/0xcc0 [ 909.386679][T22314] unix_dgram_sendmsg+0x6c3/0x26b0 [ 909.391756][T22314] ____sys_sendmsg+0x56f/0x860 [ 909.396484][T22314] __sys_sendmsg+0x26a/0x350 [ 909.401038][T22314] do_syscall_64+0xcb/0x150 [ 909.405507][T22314] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 909.411360][T22314] [ 909.413668][T22314] Freed by task 143: [ 909.417530][T22314] __kasan_slab_free+0x168/0x220 [ 909.422435][T22314] slab_free_freelist_hook+0xd0/0x150 [ 909.427778][T22314] kmem_cache_free+0xac/0x5c0 [ 909.432422][T22314] skb_free_datagram+0x24/0xd0 [ 909.437152][T22314] unix_dgram_recvmsg+0xb0e/0xfe0 [ 909.442140][T22314] __sys_recvmsg+0x632/0xc00 [ 909.446695][T22314] do_syscall_64+0xcb/0x150 [ 909.451164][T22314] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 909.457017][T22314] [ 909.459319][T22314] The buggy address belongs to the object at ffff8881cf258500 [ 909.459319][T22314] which belongs to the cache skbuff_head_cache of size 240 [ 909.473855][T22314] The buggy address is located 0 bytes inside of [ 909.473855][T22314] 240-byte region [ffff8881cf258500, ffff8881cf2585f0) [ 909.486917][T22314] The buggy address belongs to the page: [ 909.492518][T22314] page:ffffea00073c9600 refcount:1 mapcount:0 mapping:ffff8881daa92500 index:0x0 [ 909.501587][T22314] flags: 0x8000000000000200(slab) [ 909.506583][T22314] raw: 8000000000000200 ffffea0001ef4080 0000000700000007 ffff8881daa92500 [ 909.515145][T22314] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 909.523690][T22314] page dumped because: kasan: bad access detected [ 909.530063][T22314] [ 909.532357][T22314] Memory state around the buggy address: [ 909.537952][T22314] ffff8881cf258400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 909.545977][T22314] ffff8881cf258480: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 909.554000][T22314] >ffff8881cf258500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 909.562057][T22314] ^ [ 909.566088][T22314] ffff8881cf258580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 909.574142][T22314] ffff8881cf258600: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 909.582175][T22314] ================================================================== 05:12:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1, 0x0, 0x12}}], 0x92, 0x0) r5 = dup3(r4, r3, 0x0) recvmmsg(r5, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1}}], 0x2, 0x0, 0x0) 05:12:35 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000}, [@call={0x61, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 05:12:35 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5a8, 0xc00, 0x2c8, 0x3b8, 0x0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x2500}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d2f9e1ff8f24a22cc77c80bcfccd00d06f06a91c77cffd4fed5d712121a6"}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@ipv4={[], [], @broadcast}}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, [], [], 'tunl0\x00', 'ip6gre0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x169) 05:12:35 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000005c0)=0x100000001) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070000220000000000000000000000020013001500000026bd700000000000010016004e21000002000b00910f000003000000000000001b0008"], 0x110}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000]}}}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@ipv4={[], [], @private=0xa010102}, 0x23, 0x10}, @sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}]}, 0x88}}, 0x0) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 909.601085][T22314] ================================================================== [ 909.609153][T22314] BUG: KASAN: double-free or invalid-free in kfree+0x12b/0x5d0 [ 909.616694][T22314] [ 909.619013][T22314] CPU: 1 PID: 22314 Comm: syz-executor.3 Tainted: G B W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 909.630525][T22314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 909.640559][T22314] Call Trace: [ 909.643080][T22422] tproxy_tg6_check: 17 callbacks suppressed [ 909.643082][T22422] xt_TPROXY: Can be used only with -p tcp or -p udp [ 909.643851][T22314] dump_stack+0x1b0/0x21e [ 909.643860][T22314] ? is_mmconf_reserved+0x420/0x420 [ 909.643870][T22314] ? snprintf+0xc0/0x110 [ 909.669984][T22314] ? show_regs_print_info+0x12/0x12 [ 909.675163][T22314] ? printk+0xc0/0x104 [ 909.679218][T22314] ? kfree+0x12b/0x5d0 [ 909.683276][T22314] ? kfree+0x12b/0x5d0 [ 909.687369][T22314] print_address_description+0x96/0x5d0 [ 909.692913][T22314] ? devkmsg_release+0x11c/0x11c [ 909.697836][T22314] ? search_extable+0xaf/0xf0 [ 909.702502][T22314] ? __rcu_read_lock+0x50/0x50 [ 909.707253][T22314] ? csum_partial_copy_generic+0x1f2e/0x3f00 [ 909.713230][T22314] ? kfree+0x12b/0x5d0 [ 909.717279][T22314] ? kfree+0x12b/0x5d0 [ 909.721333][T22314] kasan_report_invalid_free+0x54/0xc0 [ 909.726796][T22314] __kasan_slab_free+0x102/0x220 [ 909.731737][T22314] ? ex_handler_refcount+0x130/0x170 [ 909.737064][T22314] ? ex_handler_fault+0xa0/0xa0 [ 909.741935][T22314] ? __start___ex_table+0x70a0/0xa620 [ 909.747271][T22314] ? fixup_exception+0x92/0xd0 [ 909.751999][T22314] ? do_trap+0x148/0x340 [ 909.756207][T22314] ? csum_partial_copy_generic+0x1f2e/0x3f00 [ 909.762151][T22314] ? csum_partial_copy_generic+0x1f2e/0x3f00 [ 909.768216][T22314] ? do_invalid_op+0xfb/0x110 [ 909.772858][T22314] ? csum_partial_copy_generic+0x1f2e/0x3f00 [ 909.778805][T22314] ? invalid_op+0x1e/0x30 [ 909.783111][T22314] ? unix_write_space+0x180/0x230 [ 909.788120][T22314] ? sock_wfree+0x100/0x160 [ 909.792588][T22314] ? sock_wfree+0x117/0x160 [ 909.797064][T22314] ? unix_destruct_scm+0x2e4/0x350 [ 909.802164][T22314] slab_free_freelist_hook+0xd0/0x150 [ 909.807512][T22314] ? __kfree_skb+0x55/0x180 [ 909.811983][T22314] kfree+0x12b/0x5d0 [ 909.815847][T22314] __kfree_skb+0x55/0x180 [ 909.820145][T22314] tipc_mcast_xmit+0x10a8/0x16c0 [ 909.825050][T22314] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 909.831169][T22314] ? __check_object_size+0x2e5/0x3b0 [ 909.836421][T22314] ? __start___ex_table+0x2cc9/0xa620 [ 909.841774][T22314] tipc_send_group_bcast+0x9f8/0xd50 [ 909.847037][T22314] ? __tipc_sendmsg+0x2d30/0x2d30 [ 909.852031][T22314] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 909.857503][T22314] ? wait_woken+0x250/0x250 [ 909.861971][T22314] ? path_openat+0x2258/0x4270 [ 909.866703][T22314] ? do_filp_open+0x1f7/0x430 [ 909.871348][T22314] ? do_sys_open+0x343/0x620 [ 909.875901][T22314] ? do_syscall_64+0xcb/0x150 [ 909.880542][T22314] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 909.886571][T22314] ? new_inode+0x25/0x1d0 [ 909.890867][T22314] ? proc_pid_make_inode+0x23/0x1d0 [ 909.896029][T22314] ? proc_tid_base_lookup+0x185/0x1f0 [ 909.901362][T22314] ? path_openat+0x2258/0x4270 [ 909.906087][T22314] ? do_filp_open+0x1f7/0x430 [ 909.910729][T22314] __tipc_sendmsg+0x400/0x2d30 [ 909.915456][T22314] ? avc_has_perm+0xbd/0x260 [ 909.920013][T22314] ? memset+0x1f/0x40 [ 909.923962][T22314] ? unwind_next_frame+0x1c07/0x22b0 [ 909.929214][T22314] ? local_bh_enable+0x20/0x20 [ 909.933961][T22314] ? arch_stack_walk+0x78/0xe0 [ 909.938703][T22314] ? _raw_spin_lock_bh+0xa4/0x180 [ 909.943694][T22314] ? _local_bh_enable+0x30/0x30 [ 909.948512][T22314] ? memset+0x1f/0x40 [ 909.952464][T22314] ? selinux_socket_sendmsg+0x10b/0x320 [ 909.957983][T22314] ? lock_sock_nested+0x25a/0x320 [ 909.963076][T22314] ? import_iovec+0x171/0x340 [ 909.967722][T22314] ? tipc_recvmsg+0x17c0/0x17c0 [ 909.972553][T22314] tipc_sendmsg+0x51/0x70 [ 909.976870][T22314] ____sys_sendmsg+0x56f/0x860 [ 909.981605][T22314] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 909.986783][T22314] __sys_sendmmsg+0x338/0x680 [ 909.991431][T22314] ? __ia32_sys_sendmsg+0x90/0x90 [ 909.996430][T22314] ? __rcu_read_lock+0x50/0x50 [ 910.001157][T22314] ? __kasan_slab_free+0x1e2/0x220 [ 910.006229][T22314] ? __kasan_slab_free+0x168/0x220 [ 910.011308][T22314] ? slab_free_freelist_hook+0xd0/0x150 [ 910.016817][T22314] ? kmem_cache_free+0xac/0x5c0 [ 910.021642][T22314] ? do_sys_open+0x4a3/0x620 [ 910.026198][T22314] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 910.032227][T22314] ? do_sys_open+0x2fc/0x620 [ 910.036781][T22314] ? proc_fail_nth_write+0x166/0x200 [ 910.042027][T22314] ? _local_bh_enable+0x30/0x30 [ 910.046847][T22314] ? proc_fail_nth_read+0x1c0/0x1c0 [ 910.052016][T22314] ? proc_fail_nth_read+0x1c0/0x1c0 [ 910.057177][T22314] ? memset+0x1f/0x40 [ 910.061123][T22314] ? fsnotify+0x13a0/0x1460 [ 910.065590][T22314] ? __kernel_write+0x340/0x340 [ 910.070403][T22314] ? fsnotify+0x13a0/0x1460 [ 910.074872][T22314] ? security_file_permission+0x128/0x300 [ 910.080553][T22314] ? __sb_end_write+0xa4/0xf0 [ 910.085208][T22314] ? vfs_write+0x427/0x4f0 [ 910.089592][T22314] ? ksys_write+0x237/0x2a0 [ 910.094078][T22314] ? __ia32_sys_read+0x80/0x80 [ 910.098812][T22314] ? fput_many+0x42/0x1a0 [ 910.103105][T22314] __x64_sys_sendmmsg+0x9c/0xb0 [ 910.107921][T22314] do_syscall_64+0xcb/0x150 [ 910.112390][T22314] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 910.118247][T22314] RIP: 0033:0x45de59 [ 910.122127][T22314] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 910.141694][T22314] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 910.150066][T22314] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 910.158113][T22314] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 910.166057][T22314] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 910.173994][T22314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000026 [ 910.181932][T22314] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c [ 910.189871][T22314] [ 910.192166][T22314] Allocated by task 143: [ 910.196379][T22314] __kasan_kmalloc+0x117/0x1b0 [ 910.201126][T22314] __kmalloc_track_caller+0x201/0x2b0 [ 910.206473][T22314] __alloc_skb+0xd1/0x4d0 [ 910.210766][T22314] alloc_skb_with_frags+0xb1/0x580 [ 910.215930][T22314] sock_alloc_send_pskb+0x87e/0xcc0 [ 910.221121][T22314] unix_dgram_sendmsg+0x6c3/0x26b0 [ 910.226210][T22314] ____sys_sendmsg+0x56f/0x860 [ 910.230987][T22314] __sys_sendmsg+0x26a/0x350 [ 910.235540][T22314] do_syscall_64+0xcb/0x150 [ 910.240008][T22314] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 910.245859][T22314] [ 910.248173][T22314] Freed by task 195: [ 910.252123][T22314] __kasan_slab_free+0x168/0x220 [ 910.257024][T22314] slab_free_freelist_hook+0xd0/0x150 [ 910.262376][T22314] kfree+0x12b/0x5d0 [ 910.266234][T22314] __kfree_skb+0x55/0x180 [ 910.270530][T22314] skb_free_datagram+0x24/0xd0 [ 910.275260][T22314] unix_dgram_recvmsg+0xb0e/0xfe0 [ 910.280254][T22314] __sys_recvmsg+0x632/0xc00 [ 910.284928][T22314] do_syscall_64+0xcb/0x150 [ 910.289412][T22314] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 910.295289][T22314] [ 910.297597][T22314] The buggy address belongs to the object at ffff888049767800 [ 910.297597][T22314] which belongs to the cache kmalloc-512 of size 512 [ 910.311614][T22314] The buggy address is located 0 bytes inside of [ 910.311614][T22314] 512-byte region [ffff888049767800, ffff888049767a00) [ 910.324676][T22314] The buggy address belongs to the page: [ 910.330377][T22314] page:ffffea000125d900 refcount:1 mapcount:0 mapping:ffff8881da802500 index:0xffff888049766800 compound_mapcount: 0 [ 910.365837][T22314] flags: 0x4000000000010200(slab|head) [ 910.371350][T22314] raw: 4000000000010200 ffffea0005c66208 ffffea0007273508 ffff8881da802500 [ 910.379894][T22314] raw: ffff888049766800 0000000000100001 00000001ffffffff 0000000000000000 [ 910.388436][T22314] page dumped because: kasan: bad access detected [ 910.394808][T22314] [ 910.397117][T22314] Memory state around the buggy address: [ 910.402715][T22314] ffff888049767700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 910.410741][T22314] ffff888049767780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 910.418769][T22314] >ffff888049767800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 910.426793][T22314] ^ [ 910.430826][T22314] ffff888049767880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 910.438853][T22314] ffff888049767900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 910.446876][T22314] ================================================================== [ 910.460668][T22314] ================================================================== [ 910.468736][T22314] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 910.477036][T22314] [ 910.479345][T22314] CPU: 1 PID: 22314 Comm: syz-executor.3 Tainted: G B W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 910.490844][T22314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 910.500863][T22314] Call Trace: [ 910.504126][T22314] dump_stack+0x1b0/0x21e [ 910.508425][T22314] ? vprintk_emit+0x31e/0x470 [ 910.513067][T22314] ? show_regs_print_info+0x12/0x12 [ 910.518234][T22314] ? kfree+0x12b/0x5d0 [ 910.522290][T22314] ? printk+0xc0/0x104 [ 910.526339][T22314] ? kmem_cache_free+0xac/0x5c0 [ 910.531163][T22314] ? kmem_cache_free+0xac/0x5c0 [ 910.535978][T22314] print_address_description+0x96/0x5d0 [ 910.541488][T22314] ? devkmsg_release+0x11c/0x11c [ 910.546392][T22314] ? kmem_cache_free+0xac/0x5c0 [ 910.551210][T22314] ? kmem_cache_free+0xac/0x5c0 [ 910.556030][T22314] kasan_report_invalid_free+0x54/0xc0 [ 910.561466][T22314] __kasan_slab_free+0x102/0x220 [ 910.566383][T22314] ? __start___ex_table+0x70a0/0xa620 [ 910.571722][T22314] ? fixup_exception+0x92/0xd0 [ 910.576453][T22314] ? do_trap+0x148/0x340 [ 910.580662][T22314] ? csum_partial_copy_generic+0x1f2e/0x3f00 [ 910.586607][T22314] ? csum_partial_copy_generic+0x1f2e/0x3f00 [ 910.592552][T22314] ? do_invalid_op+0xfb/0x110 [ 910.597191][T22314] ? csum_partial_copy_generic+0x1f2e/0x3f00 [ 910.603136][T22314] ? invalid_op+0x1e/0x30 [ 910.607635][T22314] ? unix_write_space+0x180/0x230 [ 910.612623][T22314] ? sock_wfree+0x100/0x160 [ 910.617106][T22314] ? sock_wfree+0x117/0x160 [ 910.621575][T22314] ? unix_destruct_scm+0x2e4/0x350 [ 910.626654][T22314] slab_free_freelist_hook+0xd0/0x150 [ 910.631992][T22314] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 910.637072][T22314] kmem_cache_free+0xac/0x5c0 [ 910.641711][T22314] ? kasan_report+0x27/0x50 [ 910.646179][T22314] tipc_mcast_xmit+0x10a8/0x16c0 [ 910.651085][T22314] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 910.657208][T22314] ? __check_object_size+0x2e5/0x3b0 [ 910.662467][T22314] ? __start___ex_table+0x2cc9/0xa620 [ 910.667806][T22314] tipc_send_group_bcast+0x9f8/0xd50 [ 910.673073][T22314] ? __tipc_sendmsg+0x2d30/0x2d30 [ 910.678068][T22314] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 910.683421][T22314] ? wait_woken+0x250/0x250 [ 910.687893][T22314] ? path_openat+0x2258/0x4270 [ 910.692619][T22314] ? do_filp_open+0x1f7/0x430 [ 910.697259][T22314] ? do_sys_open+0x343/0x620 [ 910.701813][T22314] ? do_syscall_64+0xcb/0x150 [ 910.706457][T22314] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 910.712489][T22314] ? new_inode+0x25/0x1d0 [ 910.716792][T22314] ? proc_pid_make_inode+0x23/0x1d0 [ 910.721956][T22314] ? proc_tid_base_lookup+0x185/0x1f0 [ 910.727291][T22314] ? path_openat+0x2258/0x4270 [ 910.732021][T22314] ? do_filp_open+0x1f7/0x430 [ 910.736661][T22314] __tipc_sendmsg+0x400/0x2d30 [ 910.741390][T22314] ? avc_has_perm+0xbd/0x260 [ 910.746033][T22314] ? memset+0x1f/0x40 [ 910.749981][T22314] ? unwind_next_frame+0x1c07/0x22b0 [ 910.755231][T22314] ? local_bh_enable+0x20/0x20 [ 910.759959][T22314] ? arch_stack_walk+0x78/0xe0 [ 910.764688][T22314] ? _raw_spin_lock_bh+0xa4/0x180 [ 910.769678][T22314] ? _local_bh_enable+0x30/0x30 [ 910.774496][T22314] ? memset+0x1f/0x40 [ 910.778457][T22314] ? selinux_socket_sendmsg+0x10b/0x320 [ 910.783973][T22314] ? lock_sock_nested+0x25a/0x320 [ 910.788968][T22314] ? import_iovec+0x171/0x340 [ 910.793614][T22314] ? tipc_recvmsg+0x17c0/0x17c0 [ 910.798433][T22314] tipc_sendmsg+0x51/0x70 [ 910.802734][T22314] ____sys_sendmsg+0x56f/0x860 [ 910.807472][T22314] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 910.812639][T22314] __sys_sendmmsg+0x338/0x680 [ 910.817287][T22314] ? __ia32_sys_sendmsg+0x90/0x90 [ 910.822283][T22314] ? __rcu_read_lock+0x50/0x50 [ 910.827014][T22314] ? __kasan_slab_free+0x1e2/0x220 [ 910.832096][T22314] ? __kasan_slab_free+0x168/0x220 [ 910.837187][T22314] ? slab_free_freelist_hook+0xd0/0x150 [ 910.842700][T22314] ? kmem_cache_free+0xac/0x5c0 [ 910.847517][T22314] ? do_sys_open+0x4a3/0x620 [ 910.852091][T22314] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 910.858135][T22314] ? do_sys_open+0x2fc/0x620 [ 910.862694][T22314] ? proc_fail_nth_write+0x166/0x200 [ 910.867944][T22314] ? _local_bh_enable+0x30/0x30 [ 910.872758][T22314] ? proc_fail_nth_read+0x1c0/0x1c0 [ 910.877921][T22314] ? proc_fail_nth_read+0x1c0/0x1c0 [ 910.883084][T22314] ? memset+0x1f/0x40 [ 910.887032][T22314] ? fsnotify+0x13a0/0x1460 [ 910.891500][T22314] ? __kernel_write+0x340/0x340 [ 910.896313][T22314] ? fsnotify+0x13a0/0x1460 [ 910.900784][T22314] ? security_file_permission+0x128/0x300 [ 910.906468][T22314] ? __sb_end_write+0xa4/0xf0 [ 910.911111][T22314] ? vfs_write+0x427/0x4f0 [ 910.915494][T22314] ? ksys_write+0x237/0x2a0 [ 910.919964][T22314] ? __ia32_sys_read+0x80/0x80 [ 910.924698][T22314] ? fput_many+0x42/0x1a0 [ 910.929004][T22314] __x64_sys_sendmmsg+0x9c/0xb0 [ 910.933836][T22314] do_syscall_64+0xcb/0x150 [ 910.938308][T22314] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 910.944171][T22314] RIP: 0033:0x45de59 [ 910.948032][T22314] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 910.967622][T22314] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 910.976008][T22314] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 910.983945][T22314] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 910.991902][T22314] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 910.999838][T22314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000026 [ 911.007776][T22314] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c [ 911.015719][T22314] [ 911.018015][T22314] Allocated by task 143: [ 911.022225][T22314] __kasan_kmalloc+0x117/0x1b0 [ 911.026955][T22314] kmem_cache_alloc+0x1d5/0x250 [ 911.031783][T22314] __alloc_skb+0x88/0x4d0 [ 911.036074][T22314] alloc_skb_with_frags+0xb1/0x580 [ 911.041150][T22314] sock_alloc_send_pskb+0x87e/0xcc0 [ 911.046448][T22314] unix_dgram_sendmsg+0x6c3/0x26b0 [ 911.051524][T22314] ____sys_sendmsg+0x56f/0x860 [ 911.056255][T22314] __sys_sendmsg+0x26a/0x350 [ 911.060808][T22314] do_syscall_64+0xcb/0x150 [ 911.065275][T22314] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 911.071128][T22314] [ 911.073422][T22314] Freed by task 195: [ 911.077280][T22314] __kasan_slab_free+0x168/0x220 [ 911.082180][T22314] slab_free_freelist_hook+0xd0/0x150 [ 911.087514][T22314] kmem_cache_free+0xac/0x5c0 [ 911.092161][T22314] skb_free_datagram+0x24/0xd0 [ 911.096986][T22314] unix_dgram_recvmsg+0xb0e/0xfe0 [ 911.101978][T22314] __sys_recvmsg+0x632/0xc00 [ 911.106532][T22314] do_syscall_64+0xcb/0x150 [ 911.111000][T22314] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 911.116853][T22314] [ 911.119154][T22314] The buggy address belongs to the object at ffff888176679280 [ 911.119154][T22314] which belongs to the cache skbuff_head_cache of size 240 [ 911.133708][T22314] The buggy address is located 0 bytes inside of [ 911.133708][T22314] 240-byte region [ffff888176679280, ffff888176679370) [ 911.146880][T22314] The buggy address belongs to the page: [ 911.152479][T22314] page:ffffea0005d99e40 refcount:1 mapcount:0 mapping:ffff8881daa92500 index:0x0 [ 911.161545][T22314] flags: 0x8000000000000200(slab) [ 911.166537][T22314] raw: 8000000000000200 dead000000000100 dead000000000122 ffff8881daa92500 [ 911.175086][T22314] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 911.183631][T22314] page dumped because: kasan: bad access detected [ 911.190007][T22314] [ 911.192321][T22314] Memory state around the buggy address: [ 911.197928][T22314] ffff888176679180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 911.205953][T22314] ffff888176679200: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 911.213978][T22314] >ffff888176679280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 911.222007][T22314] ^ [ 911.226039][T22314] ffff888176679300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 911.234068][T22314] ffff888176679380: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 911.242091][T22314] ================================================================== [ 911.266214][T22314] ================================================================== [ 911.274282][T22314] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 911.282567][T22314] [ 911.284863][T22314] CPU: 1 PID: 22314 Comm: syz-executor.3 Tainted: G B W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 911.296358][T22314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 911.306378][T22314] Call Trace: [ 911.309633][T22314] dump_stack+0x1b0/0x21e [ 911.313929][T22314] ? __perf_event_task_sched_in+0x4ed/0x550 [ 911.319784][T22314] ? show_regs_print_info+0x12/0x12 [ 911.324968][T22314] ? printk+0xc0/0x104 [ 911.329027][T22314] ? kmem_cache_free+0xac/0x5c0 [ 911.333859][T22314] ? kmem_cache_free+0xac/0x5c0 [ 911.338711][T22314] print_address_description+0x96/0x5d0 [ 911.344239][T22314] ? devkmsg_release+0x11c/0x11c [ 911.349153][T22314] ? _raw_spin_unlock_irq+0x5/0x20 [ 911.354241][T22314] ? finish_task_switch+0x235/0x4c0 [ 911.359403][T22314] ? kmem_cache_free+0xac/0x5c0 [ 911.364217][T22314] ? kmem_cache_free+0xac/0x5c0 [ 911.369029][T22314] kasan_report_invalid_free+0x54/0xc0 [ 911.374466][T22314] __kasan_slab_free+0x102/0x220 [ 911.379365][T22314] ? cmp_ex_search+0x6d/0x90 [ 911.383934][T22314] ? __start___ex_table+0x717c/0xa620 [ 911.389270][T22314] ? bsearch+0x9b/0xc0 [ 911.393426][T22314] ? search_extable+0xf0/0xf0 [ 911.398212][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 911.404152][T22314] ? __stop_notes+0xc/0xc [ 911.408445][T22314] ? search_extable+0xaf/0xf0 [ 911.413086][T22314] ? __rcu_read_lock+0x50/0x50 [ 911.417812][T22314] ? trim_init_extable+0x3e0/0x3e0 [ 911.422890][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 911.428837][T22314] ? __start___ex_table+0x717c/0xa620 [ 911.434171][T22314] ? __start___ex_table+0x717c/0xa620 [ 911.439505][T22314] ? kasan_report+0x27/0x50 [ 911.443972][T22314] ? ex_handler_refcount+0x130/0x170 [ 911.449218][T22314] ? ex_handler_fault+0xa0/0xa0 [ 911.454030][T22314] ? __start___ex_table+0x7184/0xa620 [ 911.459364][T22314] ? fixup_exception+0x92/0xd0 [ 911.464088][T22314] ? do_trap+0x148/0x340 [ 911.468294][T22314] ? notify_die+0x1e1/0x2a0 [ 911.472764][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 911.478708][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 911.484648][T22314] slab_free_freelist_hook+0xd0/0x150 [ 911.489983][T22314] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 911.495055][T22314] kmem_cache_free+0xac/0x5c0 [ 911.499693][T22314] ? kasan_report+0x27/0x50 [ 911.504159][T22314] tipc_mcast_xmit+0x10a8/0x16c0 [ 911.509061][T22314] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 911.515218][T22314] ? __check_object_size+0x2e5/0x3b0 [ 911.520467][T22314] ? __start___ex_table+0x2cc9/0xa620 [ 911.525801][T22314] tipc_send_group_bcast+0x9f8/0xd50 [ 911.531056][T22314] ? __tipc_sendmsg+0x2d30/0x2d30 [ 911.536044][T22314] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 911.541398][T22314] ? wait_woken+0x250/0x250 [ 911.545865][T22314] ? path_openat+0x2258/0x4270 [ 911.550604][T22314] ? do_filp_open+0x1f7/0x430 [ 911.555243][T22314] ? do_sys_open+0x343/0x620 [ 911.559797][T22314] ? do_syscall_64+0xcb/0x150 [ 911.564446][T22314] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 911.570479][T22314] ? new_inode+0x25/0x1d0 [ 911.574773][T22314] ? proc_pid_make_inode+0x23/0x1d0 [ 911.579935][T22314] ? proc_tid_base_lookup+0x185/0x1f0 [ 911.585291][T22314] ? path_openat+0x2258/0x4270 [ 911.590028][T22314] ? do_filp_open+0x1f7/0x430 [ 911.594671][T22314] __tipc_sendmsg+0x400/0x2d30 [ 911.599404][T22314] ? avc_has_perm+0xbd/0x260 [ 911.603958][T22314] ? memset+0x1f/0x40 [ 911.607937][T22314] ? unwind_next_frame+0x1c07/0x22b0 [ 911.613240][T22314] ? local_bh_enable+0x20/0x20 [ 911.617968][T22314] ? arch_stack_walk+0x78/0xe0 [ 911.622700][T22314] ? _raw_spin_lock_bh+0xa4/0x180 [ 911.627688][T22314] ? _local_bh_enable+0x30/0x30 [ 911.632503][T22314] ? memset+0x1f/0x40 [ 911.636452][T22314] ? selinux_socket_sendmsg+0x10b/0x320 [ 911.641978][T22314] ? lock_sock_nested+0x25a/0x320 [ 911.646982][T22314] ? import_iovec+0x171/0x340 [ 911.651629][T22314] ? tipc_recvmsg+0x17c0/0x17c0 [ 911.656485][T22314] tipc_sendmsg+0x51/0x70 [ 911.660785][T22314] ____sys_sendmsg+0x56f/0x860 [ 911.665514][T22314] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 911.670682][T22314] __sys_sendmmsg+0x338/0x680 [ 911.675382][T22314] ? __ia32_sys_sendmsg+0x90/0x90 [ 911.680370][T22314] ? __rcu_read_lock+0x50/0x50 [ 911.685093][T22314] ? __kasan_slab_free+0x1e2/0x220 [ 911.690168][T22314] ? __kasan_slab_free+0x168/0x220 [ 911.695242][T22314] ? slab_free_freelist_hook+0xd0/0x150 [ 911.700748][T22314] ? kmem_cache_free+0xac/0x5c0 [ 911.705600][T22314] ? do_sys_open+0x4a3/0x620 [ 911.710156][T22314] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 911.716185][T22314] ? do_sys_open+0x2fc/0x620 [ 911.720740][T22314] ? proc_fail_nth_write+0x166/0x200 [ 911.726096][T22314] ? _local_bh_enable+0x30/0x30 [ 911.730915][T22314] ? proc_fail_nth_read+0x1c0/0x1c0 [ 911.736103][T22314] ? proc_fail_nth_read+0x1c0/0x1c0 [ 911.741309][T22314] ? memset+0x1f/0x40 [ 911.745269][T22314] ? fsnotify+0x13a0/0x1460 [ 911.749745][T22314] ? __kernel_write+0x340/0x340 [ 911.754561][T22314] ? fsnotify+0x13a0/0x1460 [ 911.759036][T22314] ? security_file_permission+0x128/0x300 [ 911.764730][T22314] ? __sb_end_write+0xa4/0xf0 [ 911.769377][T22314] ? vfs_write+0x427/0x4f0 [ 911.773761][T22314] ? ksys_write+0x237/0x2a0 [ 911.778248][T22314] ? __ia32_sys_read+0x80/0x80 [ 911.782990][T22314] ? fput_many+0x42/0x1a0 [ 911.787286][T22314] __x64_sys_sendmmsg+0x9c/0xb0 [ 911.792101][T22314] do_syscall_64+0xcb/0x150 [ 911.796570][T22314] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 911.802548][T22314] RIP: 0033:0x45de59 [ 911.806542][T22314] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 911.826135][T22314] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 911.834517][T22314] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 911.842486][T22314] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 911.850423][T22314] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 911.858360][T22314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000026 [ 911.866297][T22314] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c [ 911.874243][T22314] [ 911.876539][T22314] Allocated by task 22314: [ 911.881044][T22314] __kasan_kmalloc+0x117/0x1b0 [ 911.885859][T22314] kmem_cache_alloc+0x1d5/0x250 [ 911.890674][T22314] __netdev_alloc_skb+0x1d8/0x710 [ 911.895658][T22314] __ieee80211_beacon_get+0x628/0x11b0 [ 911.901078][T22314] ieee80211_beacon_get_tim+0xb7/0x500 [ 911.906631][T22314] mac80211_hwsim_beacon_tx+0xd4/0x570 [ 911.912065][T22314] __iterate_interfaces+0x1fc/0x390 [ 911.917228][T22314] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 911.924123][T22314] mac80211_hwsim_beacon+0xa1/0x180 [ 911.929283][T22314] __run_hrtimer+0x405/0x7a0 [ 911.933843][T22314] hrtimer_run_softirq+0x320/0x450 [ 911.938917][T22314] __do_softirq+0x22e/0x569 [ 911.943379][T22314] [ 911.945667][T22314] Freed by task 22314: [ 911.949706][T22314] __kasan_slab_free+0x168/0x220 [ 911.954606][T22314] slab_free_freelist_hook+0xd0/0x150 [ 911.959938][T22314] kmem_cache_free+0xac/0x5c0 [ 911.964576][T22314] mac80211_hwsim_beacon_tx+0x35e/0x570 [ 911.970085][T22314] __iterate_interfaces+0x1fc/0x390 [ 911.975251][T22314] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 911.982146][T22314] mac80211_hwsim_beacon+0xa1/0x180 [ 911.987306][T22314] __run_hrtimer+0x405/0x7a0 [ 911.991855][T22314] hrtimer_run_softirq+0x320/0x450 [ 911.996927][T22314] __do_softirq+0x22e/0x569 [ 912.001397][T22314] [ 912.003690][T22314] The buggy address belongs to the object at ffff8881766793c0 [ 912.003690][T22314] which belongs to the cache skbuff_head_cache of size 240 [ 912.018235][T22314] The buggy address is located 0 bytes inside of [ 912.018235][T22314] 240-byte region [ffff8881766793c0, ffff8881766794b0) [ 912.031302][T22314] The buggy address belongs to the page: [ 912.036896][T22314] page:ffffea0005d99e40 refcount:1 mapcount:0 mapping:ffff8881daa92500 index:0x0 [ 912.045962][T22314] flags: 0x8000000000000200(slab) [ 912.050954][T22314] raw: 8000000000000200 dead000000000100 dead000000000122 ffff8881daa92500 [ 912.059501][T22314] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 912.068043][T22314] page dumped because: kasan: bad access detected [ 912.074430][T22314] [ 912.076742][T22314] Memory state around the buggy address: [ 912.082345][T22314] ffff888176679280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 912.090375][T22314] ffff888176679300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 912.098397][T22314] >ffff888176679380: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 912.106419][T22314] ^ [ 912.112532][T22314] ffff888176679400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 912.120555][T22314] ffff888176679480: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 912.128577][T22314] ================================================================== [ 912.137906][T22314] ================================================================== [ 912.145966][T22314] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 912.154264][T22314] [ 912.156585][T22314] CPU: 1 PID: 22314 Comm: syz-executor.3 Tainted: G B W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 912.168225][T22314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 912.178246][T22314] Call Trace: [ 912.181501][T22314] dump_stack+0x1b0/0x21e [ 912.185811][T22314] ? show_regs_print_info+0x12/0x12 [ 912.190974][T22314] ? printk+0xc0/0x104 [ 912.195026][T22314] ? kmem_cache_free+0xac/0x5c0 [ 912.199842][T22314] ? kmem_cache_free+0xac/0x5c0 [ 912.204763][T22314] print_address_description+0x96/0x5d0 [ 912.210287][T22314] ? devkmsg_release+0x11c/0x11c [ 912.215191][T22314] ? kmem_cache_free+0xac/0x5c0 [ 912.220018][T22314] ? ___preempt_schedule+0x16/0x20 [ 912.225104][T22314] ? kmem_cache_free+0xac/0x5c0 [ 912.230030][T22314] ? kmem_cache_free+0xac/0x5c0 [ 912.234929][T22314] kasan_report_invalid_free+0x54/0xc0 [ 912.240437][T22314] __kasan_slab_free+0x102/0x220 [ 912.245342][T22314] ? cmp_ex_search+0x6d/0x90 [ 912.249902][T22314] ? __start___ex_table+0x717c/0xa620 [ 912.255340][T22314] ? bsearch+0x9b/0xc0 [ 912.259375][T22314] ? search_extable+0xf0/0xf0 [ 912.264018][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 912.269960][T22314] ? __stop_notes+0xc/0xc [ 912.274254][T22314] ? search_extable+0xaf/0xf0 [ 912.278898][T22314] ? __rcu_read_lock+0x50/0x50 [ 912.283634][T22314] ? trim_init_extable+0x3e0/0x3e0 [ 912.288708][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 912.294666][T22314] ? __start___ex_table+0x717c/0xa620 [ 912.300001][T22314] ? __start___ex_table+0x717c/0xa620 [ 912.305335][T22314] ? kasan_report+0x27/0x50 [ 912.309814][T22314] ? ex_handler_refcount+0x130/0x170 [ 912.315083][T22314] ? ex_handler_fault+0xa0/0xa0 [ 912.319899][T22314] ? __start___ex_table+0x7184/0xa620 [ 912.325322][T22314] ? fixup_exception+0x92/0xd0 [ 912.330053][T22314] ? do_trap+0x148/0x340 [ 912.334260][T22314] ? notify_die+0x1e1/0x2a0 [ 912.338727][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 912.344669][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 912.350617][T22314] slab_free_freelist_hook+0xd0/0x150 [ 912.355951][T22314] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 912.361025][T22314] kmem_cache_free+0xac/0x5c0 [ 912.365680][T22314] ? kasan_report+0x27/0x50 [ 912.370148][T22314] tipc_mcast_xmit+0x10a8/0x16c0 [ 912.375145][T22314] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 912.381264][T22314] ? __check_object_size+0x2e5/0x3b0 [ 912.386514][T22314] ? __start___ex_table+0x2cc9/0xa620 [ 912.391961][T22314] tipc_send_group_bcast+0x9f8/0xd50 [ 912.397218][T22314] ? __tipc_sendmsg+0x2d30/0x2d30 [ 912.402204][T22314] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 912.407543][T22314] ? wait_woken+0x250/0x250 [ 912.412021][T22314] ? path_openat+0x2258/0x4270 [ 912.416747][T22314] ? do_filp_open+0x1f7/0x430 [ 912.421387][T22314] ? do_sys_open+0x343/0x620 [ 912.425942][T22314] ? do_syscall_64+0xcb/0x150 [ 912.430585][T22314] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 912.436613][T22314] ? new_inode+0x25/0x1d0 [ 912.440906][T22314] ? proc_pid_make_inode+0x23/0x1d0 [ 912.446073][T22314] ? proc_tid_base_lookup+0x185/0x1f0 [ 912.451409][T22314] ? path_openat+0x2258/0x4270 [ 912.456153][T22314] ? do_filp_open+0x1f7/0x430 [ 912.460797][T22314] __tipc_sendmsg+0x400/0x2d30 [ 912.465540][T22314] ? avc_has_perm+0xbd/0x260 [ 912.470096][T22314] ? memset+0x1f/0x40 [ 912.474044][T22314] ? unwind_next_frame+0x1c07/0x22b0 [ 912.479294][T22314] ? local_bh_enable+0x20/0x20 [ 912.484036][T22314] ? arch_stack_walk+0x78/0xe0 [ 912.488771][T22314] ? _raw_spin_lock_bh+0xa4/0x180 [ 912.493763][T22314] ? _local_bh_enable+0x30/0x30 [ 912.498580][T22314] ? memset+0x1f/0x40 [ 912.502526][T22314] ? selinux_socket_sendmsg+0x10b/0x320 [ 912.508037][T22314] ? lock_sock_nested+0x25a/0x320 [ 912.513068][T22314] ? import_iovec+0x171/0x340 [ 912.517710][T22314] ? tipc_recvmsg+0x17c0/0x17c0 [ 912.522529][T22314] tipc_sendmsg+0x51/0x70 [ 912.526825][T22314] ____sys_sendmsg+0x56f/0x860 [ 912.531561][T22314] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 912.536726][T22314] __sys_sendmmsg+0x338/0x680 [ 912.541367][T22314] ? __ia32_sys_sendmsg+0x90/0x90 [ 912.546377][T22314] ? __rcu_read_lock+0x50/0x50 [ 912.551105][T22314] ? __kasan_slab_free+0x1e2/0x220 [ 912.556181][T22314] ? __kasan_slab_free+0x168/0x220 [ 912.561256][T22314] ? slab_free_freelist_hook+0xd0/0x150 [ 912.566782][T22314] ? kmem_cache_free+0xac/0x5c0 [ 912.571595][T22314] ? do_sys_open+0x4a3/0x620 [ 912.576148][T22314] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 912.582180][T22314] ? do_sys_open+0x2fc/0x620 [ 912.586743][T22314] ? proc_fail_nth_write+0x166/0x200 [ 912.591990][T22314] ? _local_bh_enable+0x30/0x30 [ 912.596802][T22314] ? proc_fail_nth_read+0x1c0/0x1c0 [ 912.601964][T22314] ? proc_fail_nth_read+0x1c0/0x1c0 [ 912.607125][T22314] ? memset+0x1f/0x40 [ 912.611077][T22314] ? fsnotify+0x13a0/0x1460 [ 912.615544][T22314] ? __kernel_write+0x340/0x340 [ 912.620358][T22314] ? fsnotify+0x13a0/0x1460 [ 912.624831][T22314] ? security_file_permission+0x128/0x300 [ 912.630514][T22314] ? __sb_end_write+0xa4/0xf0 [ 912.635173][T22314] ? vfs_write+0x427/0x4f0 [ 912.639563][T22314] ? ksys_write+0x237/0x2a0 [ 912.644034][T22314] ? __ia32_sys_read+0x80/0x80 [ 912.648763][T22314] ? fput_many+0x42/0x1a0 [ 912.653058][T22314] __x64_sys_sendmmsg+0x9c/0xb0 [ 912.657882][T22314] do_syscall_64+0xcb/0x150 [ 912.662355][T22314] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 912.668208][T22314] RIP: 0033:0x45de59 [ 912.672069][T22314] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 912.691637][T22314] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 912.700010][T22314] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 912.707948][T22314] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 912.715884][T22314] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 912.723822][T22314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000026 [ 912.731759][T22314] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c [ 912.739696][T22314] [ 912.742013][T22314] Allocated by task 22314: [ 912.746390][T22314] __kasan_kmalloc+0x117/0x1b0 [ 912.751117][T22314] kmem_cache_alloc+0x1d5/0x250 [ 912.755931][T22314] __netdev_alloc_skb+0x1d8/0x710 [ 912.760921][T22314] __ieee80211_beacon_get+0x628/0x11b0 [ 912.766340][T22314] ieee80211_beacon_get_tim+0xb7/0x500 [ 912.771760][T22314] mac80211_hwsim_beacon_tx+0xd4/0x570 [ 912.777192][T22314] __iterate_interfaces+0x1fc/0x390 [ 912.782353][T22314] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 912.789249][T22314] mac80211_hwsim_beacon+0xa1/0x180 [ 912.794408][T22314] __run_hrtimer+0x405/0x7a0 [ 912.798972][T22314] hrtimer_run_softirq+0x320/0x450 [ 912.804168][T22314] __do_softirq+0x22e/0x569 [ 912.808639][T22314] [ 912.810937][T22314] Freed by task 22314: [ 912.814975][T22314] __kasan_slab_free+0x168/0x220 [ 912.819876][T22314] slab_free_freelist_hook+0xd0/0x150 [ 912.825242][T22314] kmem_cache_free+0xac/0x5c0 [ 912.829881][T22314] mac80211_hwsim_beacon_tx+0x35e/0x570 [ 912.835396][T22314] __iterate_interfaces+0x1fc/0x390 [ 912.840557][T22314] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 912.847453][T22314] mac80211_hwsim_beacon+0xa1/0x180 [ 912.852612][T22314] __run_hrtimer+0x405/0x7a0 [ 912.857163][T22314] hrtimer_run_softirq+0x320/0x450 [ 912.862238][T22314] __do_softirq+0x22e/0x569 [ 912.866699][T22314] [ 912.868993][T22314] The buggy address belongs to the object at ffff8881d8969000 [ 912.868993][T22314] which belongs to the cache skbuff_head_cache of size 240 [ 912.883526][T22314] The buggy address is located 0 bytes inside of [ 912.883526][T22314] 240-byte region [ffff8881d8969000, ffff8881d89690f0) [ 912.896579][T22314] The buggy address belongs to the page: [ 912.902191][T22314] page:ffffea0007625a40 refcount:1 mapcount:0 mapping:ffff8881daa92500 index:0xffff8881d89693c0 [ 912.912556][T22314] flags: 0x8000000000000200(slab) [ 912.917541][T22314] raw: 8000000000000200 ffffea0005d70cc8 ffffea0001749548 ffff8881daa92500 [ 912.926088][T22314] raw: ffff8881d89693c0 00000000000c0003 00000001ffffffff 0000000000000000 [ 912.934676][T22314] page dumped because: kasan: bad access detected [ 912.941077][T22314] [ 912.943443][T22314] Memory state around the buggy address: [ 912.949037][T22314] ffff8881d8968f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 912.957182][T22314] ffff8881d8968f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 912.965204][T22314] >ffff8881d8969000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 912.973224][T22314] ^ [ 912.977254][T22314] ffff8881d8969080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 912.985279][T22314] ffff8881d8969100: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 912.993309][T22314] ================================================================== [ 913.002294][T22314] ================================================================== [ 913.010360][T22314] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 913.018664][T22314] [ 913.020987][T22314] CPU: 1 PID: 22314 Comm: syz-executor.3 Tainted: G B W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 913.032607][T22314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 913.042645][T22314] Call Trace: [ 913.045901][T22314] dump_stack+0x1b0/0x21e [ 913.050196][T22314] ? show_regs_print_info+0x12/0x12 [ 913.055357][T22314] ? printk+0xc0/0x104 [ 913.059391][T22314] ? kmem_cache_free+0xac/0x5c0 [ 913.064208][T22314] ? kmem_cache_free+0xac/0x5c0 [ 913.069037][T22314] print_address_description+0x96/0x5d0 [ 913.074555][T22314] ? devkmsg_release+0x11c/0x11c [ 913.079478][T22314] ? kmem_cache_free+0xac/0x5c0 [ 913.084293][T22314] ? ___preempt_schedule+0x16/0x20 [ 913.089366][T22314] ? kmem_cache_free+0xac/0x5c0 [ 913.094188][T22314] ? kmem_cache_free+0xac/0x5c0 [ 913.099000][T22314] kasan_report_invalid_free+0x54/0xc0 [ 913.104520][T22314] __kasan_slab_free+0x102/0x220 [ 913.109418][T22314] ? cmp_ex_search+0x6d/0x90 [ 913.114016][T22314] ? __start___ex_table+0x717c/0xa620 [ 913.119353][T22314] ? bsearch+0x9b/0xc0 [ 913.123387][T22314] ? search_extable+0xf0/0xf0 [ 913.128042][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 913.133982][T22314] ? __stop_notes+0xc/0xc [ 913.138275][T22314] ? search_extable+0xaf/0xf0 [ 913.142914][T22314] ? __rcu_read_lock+0x50/0x50 [ 913.147640][T22314] ? trim_init_extable+0x3e0/0x3e0 [ 913.152713][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 913.158652][T22314] ? __start___ex_table+0x717c/0xa620 [ 913.164004][T22314] ? __start___ex_table+0x717c/0xa620 [ 913.169340][T22314] ? kasan_report+0x27/0x50 [ 913.173823][T22314] ? ex_handler_refcount+0x130/0x170 [ 913.179071][T22314] ? ex_handler_fault+0xa0/0xa0 [ 913.183883][T22314] ? __start___ex_table+0x7184/0xa620 [ 913.189215][T22314] ? fixup_exception+0x92/0xd0 [ 913.193943][T22314] ? do_trap+0x148/0x340 [ 913.198148][T22314] ? notify_die+0x1e1/0x2a0 [ 913.202615][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 913.208605][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 913.214547][T22314] slab_free_freelist_hook+0xd0/0x150 [ 913.219927][T22314] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 913.225001][T22314] kmem_cache_free+0xac/0x5c0 [ 913.229640][T22314] ? kasan_report+0x27/0x50 [ 913.234105][T22314] tipc_mcast_xmit+0x10a8/0x16c0 [ 913.239008][T22314] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 913.245124][T22314] ? __check_object_size+0x2e5/0x3b0 [ 913.250375][T22314] ? __start___ex_table+0x2cc9/0xa620 [ 913.255720][T22314] tipc_send_group_bcast+0x9f8/0xd50 [ 913.260968][T22314] ? __tipc_sendmsg+0x2d30/0x2d30 [ 913.265952][T22314] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 913.271293][T22314] ? wait_woken+0x250/0x250 [ 913.275885][T22314] ? path_openat+0x2258/0x4270 [ 913.280609][T22314] ? do_filp_open+0x1f7/0x430 [ 913.285246][T22314] ? do_sys_open+0x343/0x620 [ 913.289805][T22314] ? do_syscall_64+0xcb/0x150 [ 913.294445][T22314] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 913.300473][T22314] ? new_inode+0x25/0x1d0 [ 913.304767][T22314] ? proc_pid_make_inode+0x23/0x1d0 [ 913.309928][T22314] ? proc_tid_base_lookup+0x185/0x1f0 [ 913.315295][T22314] ? path_openat+0x2258/0x4270 [ 913.320021][T22314] ? do_filp_open+0x1f7/0x430 [ 913.324771][T22314] __tipc_sendmsg+0x400/0x2d30 [ 913.329501][T22314] ? avc_has_perm+0xbd/0x260 [ 913.334055][T22314] ? memset+0x1f/0x40 [ 913.338004][T22314] ? unwind_next_frame+0x1c07/0x22b0 [ 913.343252][T22314] ? local_bh_enable+0x20/0x20 [ 913.347995][T22314] ? arch_stack_walk+0x78/0xe0 [ 913.352722][T22314] ? _raw_spin_lock_bh+0xa4/0x180 [ 913.357721][T22314] ? _local_bh_enable+0x30/0x30 [ 913.362533][T22314] ? memset+0x1f/0x40 [ 913.366474][T22314] ? selinux_socket_sendmsg+0x10b/0x320 [ 913.371986][T22314] ? lock_sock_nested+0x25a/0x320 [ 913.376977][T22314] ? import_iovec+0x171/0x340 [ 913.381617][T22314] ? tipc_recvmsg+0x17c0/0x17c0 [ 913.386428][T22314] tipc_sendmsg+0x51/0x70 [ 913.390738][T22314] ____sys_sendmsg+0x56f/0x860 [ 913.395470][T22314] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 913.400633][T22314] __sys_sendmmsg+0x338/0x680 [ 913.405273][T22314] ? __ia32_sys_sendmsg+0x90/0x90 [ 913.410267][T22314] ? __rcu_read_lock+0x50/0x50 [ 913.415103][T22314] ? __kasan_slab_free+0x1e2/0x220 [ 913.420188][T22314] ? __kasan_slab_free+0x168/0x220 [ 913.425266][T22314] ? slab_free_freelist_hook+0xd0/0x150 [ 913.430789][T22314] ? kmem_cache_free+0xac/0x5c0 [ 913.435603][T22314] ? do_sys_open+0x4a3/0x620 [ 913.440158][T22314] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 913.446185][T22314] ? do_sys_open+0x2fc/0x620 [ 913.450741][T22314] ? proc_fail_nth_write+0x166/0x200 [ 913.455990][T22314] ? _local_bh_enable+0x30/0x30 [ 913.460805][T22314] ? proc_fail_nth_read+0x1c0/0x1c0 [ 913.465966][T22314] ? proc_fail_nth_read+0x1c0/0x1c0 [ 913.471127][T22314] ? memset+0x1f/0x40 [ 913.475073][T22314] ? fsnotify+0x13a0/0x1460 [ 913.479551][T22314] ? __kernel_write+0x340/0x340 [ 913.484362][T22314] ? fsnotify+0x13a0/0x1460 [ 913.488833][T22314] ? security_file_permission+0x128/0x300 [ 913.494513][T22314] ? __sb_end_write+0xa4/0xf0 [ 913.499152][T22314] ? vfs_write+0x427/0x4f0 [ 913.503532][T22314] ? ksys_write+0x237/0x2a0 [ 913.508002][T22314] ? __ia32_sys_read+0x80/0x80 [ 913.512730][T22314] ? fput_many+0x42/0x1a0 [ 913.517029][T22314] __x64_sys_sendmmsg+0x9c/0xb0 [ 913.521844][T22314] do_syscall_64+0xcb/0x150 [ 913.526311][T22314] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 913.532178][T22314] RIP: 0033:0x45de59 [ 913.536035][T22314] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 913.555601][T22314] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 913.563974][T22314] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 913.572014][T22314] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 913.579948][T22314] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 913.587884][T22314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000026 [ 913.595819][T22314] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c [ 913.603754][T22314] [ 913.606049][T22314] Allocated by task 22314: [ 913.610429][T22314] __kasan_kmalloc+0x117/0x1b0 [ 913.615155][T22314] kmem_cache_alloc+0x1d5/0x250 [ 913.619969][T22314] __netdev_alloc_skb+0x1d8/0x710 [ 913.624958][T22314] __ieee80211_beacon_get+0x628/0x11b0 [ 913.630381][T22314] ieee80211_beacon_get_tim+0xb7/0x500 [ 913.635914][T22314] mac80211_hwsim_beacon_tx+0xd4/0x570 [ 913.641341][T22314] __iterate_interfaces+0x1fc/0x390 [ 913.646501][T22314] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 913.653398][T22314] mac80211_hwsim_beacon+0xa1/0x180 [ 913.658557][T22314] __run_hrtimer+0x405/0x7a0 [ 913.663107][T22314] hrtimer_run_softirq+0x320/0x450 [ 913.668198][T22314] __do_softirq+0x22e/0x569 [ 913.672700][T22314] [ 913.674994][T22314] Freed by task 22314: [ 913.679032][T22314] __kasan_slab_free+0x168/0x220 [ 913.683933][T22314] slab_free_freelist_hook+0xd0/0x150 [ 913.689295][T22314] kmem_cache_free+0xac/0x5c0 [ 913.693934][T22314] mac80211_hwsim_beacon_tx+0x35e/0x570 [ 913.699442][T22314] __iterate_interfaces+0x1fc/0x390 [ 913.704606][T22314] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 913.711504][T22314] mac80211_hwsim_beacon+0xa1/0x180 [ 913.716664][T22314] __run_hrtimer+0x405/0x7a0 [ 913.721269][T22314] hrtimer_run_softirq+0x320/0x450 [ 913.726376][T22314] __do_softirq+0x22e/0x569 [ 913.730838][T22314] [ 913.733133][T22314] The buggy address belongs to the object at ffff888199633780 [ 913.733133][T22314] which belongs to the cache skbuff_head_cache of size 240 [ 913.747679][T22314] The buggy address is located 0 bytes inside of [ 913.747679][T22314] 240-byte region [ffff888199633780, ffff888199633870) [ 913.760737][T22314] The buggy address belongs to the page: [ 913.766334][T22314] page:ffffea0006658cc0 refcount:1 mapcount:0 mapping:ffff8881daa92500 index:0xffff888199633000 [ 913.776702][T22314] flags: 0x8000000000000200(slab) [ 913.781694][T22314] raw: 8000000000000200 ffffea000729db88 ffffea0005d70cc8 ffff8881daa92500 [ 913.790329][T22314] raw: ffff888199633000 00000000000c0007 00000001ffffffff 0000000000000000 [ 913.798879][T22314] page dumped because: kasan: bad access detected [ 913.805280][T22314] [ 913.807579][T22314] Memory state around the buggy address: [ 913.813231][T22314] ffff888199633680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 913.821314][T22314] ffff888199633700: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 913.829350][T22314] >ffff888199633780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 913.837374][T22314] ^ [ 913.841406][T22314] ffff888199633800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 913.849433][T22314] ffff888199633880: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 913.857456][T22314] ================================================================== [ 913.866523][T22314] ================================================================== [ 913.874589][T22314] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 913.882890][T22314] [ 913.885214][T22314] CPU: 1 PID: 22314 Comm: syz-executor.3 Tainted: G B W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 913.896721][T22314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 913.906740][T22314] Call Trace: [ 913.909997][T22314] dump_stack+0x1b0/0x21e [ 913.914290][T22314] ? show_regs_print_info+0x12/0x12 [ 913.919450][T22314] ? printk+0xc0/0x104 [ 913.923484][T22314] ? kmem_cache_free+0xac/0x5c0 [ 913.928298][T22314] ? kmem_cache_free+0xac/0x5c0 [ 913.933130][T22314] print_address_description+0x96/0x5d0 [ 913.938638][T22314] ? devkmsg_release+0x11c/0x11c [ 913.943538][T22314] ? kmem_cache_free+0xac/0x5c0 [ 913.948351][T22314] ? ___preempt_schedule+0x16/0x20 [ 913.953425][T22314] ? kmem_cache_free+0xac/0x5c0 [ 913.958237][T22314] ? kmem_cache_free+0xac/0x5c0 [ 913.963049][T22314] kasan_report_invalid_free+0x54/0xc0 [ 913.968470][T22314] __kasan_slab_free+0x102/0x220 [ 913.973367][T22314] ? cmp_ex_search+0x6d/0x90 [ 913.977933][T22314] ? __start___ex_table+0x717c/0xa620 [ 913.983269][T22314] ? bsearch+0x9b/0xc0 [ 913.987303][T22314] ? search_extable+0xf0/0xf0 [ 913.991943][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 913.997898][T22314] ? __stop_notes+0xc/0xc [ 914.002190][T22314] ? search_extable+0xaf/0xf0 [ 914.006837][T22314] ? __rcu_read_lock+0x50/0x50 [ 914.011568][T22314] ? trim_init_extable+0x3e0/0x3e0 [ 914.016640][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 914.022581][T22314] ? __start___ex_table+0x717c/0xa620 [ 914.027917][T22314] ? __start___ex_table+0x717c/0xa620 [ 914.033271][T22314] ? kasan_report+0x27/0x50 [ 914.037738][T22314] ? ex_handler_refcount+0x130/0x170 [ 914.042989][T22314] ? ex_handler_fault+0xa0/0xa0 [ 914.047803][T22314] ? __start___ex_table+0x7184/0xa620 [ 914.053137][T22314] ? fixup_exception+0x92/0xd0 [ 914.057968][T22314] ? do_trap+0x148/0x340 [ 914.062173][T22314] ? notify_die+0x1e1/0x2a0 [ 914.066649][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 914.072594][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 914.078554][T22314] slab_free_freelist_hook+0xd0/0x150 [ 914.083889][T22314] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 914.088966][T22314] kmem_cache_free+0xac/0x5c0 [ 914.093606][T22314] ? kasan_report+0x27/0x50 [ 914.098071][T22314] tipc_mcast_xmit+0x10a8/0x16c0 [ 914.102979][T22314] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 914.109096][T22314] ? __check_object_size+0x2e5/0x3b0 [ 914.114345][T22314] ? __start___ex_table+0x2cc9/0xa620 [ 914.119681][T22314] tipc_send_group_bcast+0x9f8/0xd50 [ 914.124931][T22314] ? __tipc_sendmsg+0x2d30/0x2d30 [ 914.129918][T22314] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 914.135250][T22314] ? wait_woken+0x250/0x250 [ 914.139713][T22314] ? path_openat+0x2258/0x4270 [ 914.144455][T22314] ? do_filp_open+0x1f7/0x430 [ 914.149094][T22314] ? do_sys_open+0x343/0x620 [ 914.153646][T22314] ? do_syscall_64+0xcb/0x150 [ 914.158284][T22314] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 914.164326][T22314] ? new_inode+0x25/0x1d0 [ 914.168629][T22314] ? proc_pid_make_inode+0x23/0x1d0 [ 914.173787][T22314] ? proc_tid_base_lookup+0x185/0x1f0 [ 914.179118][T22314] ? path_openat+0x2258/0x4270 [ 914.183842][T22314] ? do_filp_open+0x1f7/0x430 [ 914.188483][T22314] __tipc_sendmsg+0x400/0x2d30 [ 914.193211][T22314] ? avc_has_perm+0xbd/0x260 [ 914.197767][T22314] ? memset+0x1f/0x40 [ 914.201712][T22314] ? unwind_next_frame+0x1c07/0x22b0 [ 914.206979][T22314] ? local_bh_enable+0x20/0x20 [ 914.211706][T22314] ? arch_stack_walk+0x78/0xe0 [ 914.216432][T22314] ? _raw_spin_lock_bh+0xa4/0x180 [ 914.221424][T22314] ? _local_bh_enable+0x30/0x30 [ 914.226236][T22314] ? memset+0x1f/0x40 [ 914.230185][T22314] ? selinux_socket_sendmsg+0x10b/0x320 [ 914.235692][T22314] ? lock_sock_nested+0x25a/0x320 [ 914.240684][T22314] ? import_iovec+0x171/0x340 [ 914.245326][T22314] ? tipc_recvmsg+0x17c0/0x17c0 [ 914.250140][T22314] tipc_sendmsg+0x51/0x70 [ 914.254435][T22314] ____sys_sendmsg+0x56f/0x860 [ 914.259162][T22314] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 914.264325][T22314] __sys_sendmmsg+0x338/0x680 [ 914.268976][T22314] ? __ia32_sys_sendmsg+0x90/0x90 [ 914.273968][T22314] ? __rcu_read_lock+0x50/0x50 [ 914.278714][T22314] ? __kasan_slab_free+0x1e2/0x220 [ 914.283789][T22314] ? __kasan_slab_free+0x168/0x220 [ 914.288865][T22314] ? slab_free_freelist_hook+0xd0/0x150 [ 914.294378][T22314] ? kmem_cache_free+0xac/0x5c0 [ 914.299321][T22314] ? do_sys_open+0x4a3/0x620 [ 914.303876][T22314] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 914.310068][T22314] ? do_sys_open+0x2fc/0x620 [ 914.314622][T22314] ? proc_fail_nth_write+0x166/0x200 [ 914.319869][T22314] ? _local_bh_enable+0x30/0x30 [ 914.324681][T22314] ? proc_fail_nth_read+0x1c0/0x1c0 [ 914.329845][T22314] ? proc_fail_nth_read+0x1c0/0x1c0 [ 914.335004][T22314] ? memset+0x1f/0x40 [ 914.338949][T22314] ? fsnotify+0x13a0/0x1460 [ 914.343412][T22314] ? __kernel_write+0x340/0x340 [ 914.348237][T22314] ? fsnotify+0x13a0/0x1460 [ 914.352702][T22314] ? security_file_permission+0x128/0x300 [ 914.358400][T22314] ? __sb_end_write+0xa4/0xf0 [ 914.363074][T22314] ? vfs_write+0x427/0x4f0 [ 914.367455][T22314] ? ksys_write+0x237/0x2a0 [ 914.371924][T22314] ? __ia32_sys_read+0x80/0x80 [ 914.376659][T22314] ? fput_many+0x42/0x1a0 [ 914.380954][T22314] __x64_sys_sendmmsg+0x9c/0xb0 [ 914.385767][T22314] do_syscall_64+0xcb/0x150 [ 914.390232][T22314] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 914.396089][T22314] RIP: 0033:0x45de59 [ 914.399948][T22314] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 914.419517][T22314] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 914.427892][T22314] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 914.435829][T22314] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 914.443765][T22314] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 914.451703][T22314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000026 [ 914.459651][T22314] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c [ 914.467605][T22314] [ 914.469900][T22314] Allocated by task 22314: [ 914.474283][T22314] __kasan_kmalloc+0x117/0x1b0 [ 914.479010][T22314] kmem_cache_alloc+0x1d5/0x250 [ 914.483823][T22314] __netdev_alloc_skb+0x1d8/0x710 [ 914.488811][T22314] __ieee80211_beacon_get+0x628/0x11b0 [ 914.494231][T22314] ieee80211_beacon_get_tim+0xb7/0x500 [ 914.499654][T22314] mac80211_hwsim_beacon_tx+0xd4/0x570 [ 914.505110][T22314] __iterate_interfaces+0x1fc/0x390 [ 914.510271][T22314] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 914.517169][T22314] mac80211_hwsim_beacon+0xa1/0x180 [ 914.522328][T22314] __run_hrtimer+0x405/0x7a0 [ 914.526882][T22314] hrtimer_run_softirq+0x320/0x450 [ 914.531965][T22314] __do_softirq+0x22e/0x569 [ 914.536428][T22314] [ 914.538723][T22314] Freed by task 22314: [ 914.542755][T22314] __kasan_slab_free+0x168/0x220 [ 914.547686][T22314] slab_free_freelist_hook+0xd0/0x150 [ 914.553021][T22314] kmem_cache_free+0xac/0x5c0 [ 914.557680][T22314] mac80211_hwsim_beacon_tx+0x35e/0x570 [ 914.563189][T22314] __iterate_interfaces+0x1fc/0x390 [ 914.568355][T22314] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 914.575251][T22314] mac80211_hwsim_beacon+0xa1/0x180 [ 914.580422][T22314] __run_hrtimer+0x405/0x7a0 [ 914.584974][T22314] hrtimer_run_softirq+0x320/0x450 [ 914.590048][T22314] __do_softirq+0x22e/0x569 [ 914.594510][T22314] [ 914.596804][T22314] The buggy address belongs to the object at ffff8881996338c0 [ 914.596804][T22314] which belongs to the cache skbuff_head_cache of size 240 [ 914.611346][T22314] The buggy address is located 0 bytes inside of [ 914.611346][T22314] 240-byte region [ffff8881996338c0, ffff8881996339b0) [ 914.624402][T22314] The buggy address belongs to the page: [ 914.630008][T22314] page:ffffea0006658cc0 refcount:1 mapcount:0 mapping:ffff8881daa92500 index:0xffff888199633000 [ 914.640376][T22314] flags: 0x8000000000000200(slab) [ 914.645363][T22314] raw: 8000000000000200 ffffea000729db88 ffffea0005d70cc8 ffff8881daa92500 [ 914.653922][T22314] raw: ffff888199633000 00000000000c0007 00000001ffffffff 0000000000000000 [ 914.662478][T22314] page dumped because: kasan: bad access detected [ 914.668852][T22314] [ 914.671146][T22314] Memory state around the buggy address: [ 914.676740][T22314] ffff888199633780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 914.684762][T22314] ffff888199633800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 914.692784][T22314] >ffff888199633880: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 914.700808][T22314] ^ [ 914.706941][T22314] ffff888199633900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 914.714987][T22314] ffff888199633980: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 914.723018][T22314] ================================================================== [ 914.732220][T22314] ================================================================== [ 914.740282][T22314] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 914.748572][T22314] [ 914.750890][T22314] CPU: 1 PID: 22314 Comm: syz-executor.3 Tainted: G B W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 914.762393][T22314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 914.772419][T22314] Call Trace: [ 914.775684][T22314] dump_stack+0x1b0/0x21e [ 914.779981][T22314] ? show_regs_print_info+0x12/0x12 [ 914.785148][T22314] ? printk+0xc0/0x104 [ 914.789183][T22314] ? kmem_cache_free+0xac/0x5c0 [ 914.794000][T22314] ? kmem_cache_free+0xac/0x5c0 [ 914.798818][T22314] print_address_description+0x96/0x5d0 [ 914.804360][T22314] ? devkmsg_release+0x11c/0x11c [ 914.809279][T22314] ? kmem_cache_free+0xac/0x5c0 [ 914.814099][T22314] ? ___preempt_schedule+0x16/0x20 [ 914.819181][T22314] ? kmem_cache_free+0xac/0x5c0 [ 914.823999][T22314] ? kmem_cache_free+0xac/0x5c0 [ 914.828816][T22314] kasan_report_invalid_free+0x54/0xc0 [ 914.834240][T22314] __kasan_slab_free+0x102/0x220 [ 914.839145][T22314] ? cmp_ex_search+0x6d/0x90 [ 914.843705][T22314] ? __start___ex_table+0x717c/0xa620 [ 914.849044][T22314] ? bsearch+0x9b/0xc0 [ 914.853103][T22314] ? search_extable+0xf0/0xf0 [ 914.857747][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 914.863689][T22314] ? __stop_notes+0xc/0xc [ 914.867985][T22314] ? search_extable+0xaf/0xf0 [ 914.872631][T22314] ? __rcu_read_lock+0x50/0x50 [ 914.877359][T22314] ? trim_init_extable+0x3e0/0x3e0 [ 914.882544][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 914.888486][T22314] ? __start___ex_table+0x717c/0xa620 [ 914.893822][T22314] ? __start___ex_table+0x717c/0xa620 [ 914.899159][T22314] ? kasan_report+0x27/0x50 [ 914.903640][T22314] ? ex_handler_refcount+0x130/0x170 [ 914.908891][T22314] ? ex_handler_fault+0xa0/0xa0 [ 914.913707][T22314] ? __start___ex_table+0x7184/0xa620 [ 914.919044][T22314] ? fixup_exception+0x92/0xd0 [ 914.923775][T22314] ? do_trap+0x148/0x340 [ 914.928000][T22314] ? notify_die+0x1e1/0x2a0 [ 914.932467][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 914.938413][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 914.944358][T22314] slab_free_freelist_hook+0xd0/0x150 [ 914.949698][T22314] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 914.954774][T22314] kmem_cache_free+0xac/0x5c0 [ 914.959417][T22314] ? kasan_report+0x27/0x50 [ 914.963888][T22314] tipc_mcast_xmit+0x10a8/0x16c0 [ 914.968793][T22314] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 914.974920][T22314] ? __check_object_size+0x2e5/0x3b0 [ 914.980185][T22314] ? __start___ex_table+0x2cc9/0xa620 [ 914.985520][T22314] tipc_send_group_bcast+0x9f8/0xd50 [ 914.990774][T22314] ? __tipc_sendmsg+0x2d30/0x2d30 [ 914.995761][T22314] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 915.001102][T22314] ? wait_woken+0x250/0x250 [ 915.005570][T22314] ? path_openat+0x2258/0x4270 [ 915.010296][T22314] ? do_filp_open+0x1f7/0x430 [ 915.014940][T22314] ? do_sys_open+0x343/0x620 [ 915.019496][T22314] ? do_syscall_64+0xcb/0x150 [ 915.024150][T22314] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 915.030190][T22314] ? new_inode+0x25/0x1d0 [ 915.034484][T22314] ? proc_pid_make_inode+0x23/0x1d0 [ 915.039666][T22314] ? proc_tid_base_lookup+0x185/0x1f0 [ 915.045003][T22314] ? path_openat+0x2258/0x4270 [ 915.049731][T22314] ? do_filp_open+0x1f7/0x430 [ 915.054374][T22314] __tipc_sendmsg+0x400/0x2d30 [ 915.059126][T22314] ? avc_has_perm+0xbd/0x260 [ 915.063685][T22314] ? memset+0x1f/0x40 [ 915.067633][T22314] ? unwind_next_frame+0x1c07/0x22b0 [ 915.072882][T22314] ? local_bh_enable+0x20/0x20 [ 915.077716][T22314] ? arch_stack_walk+0x78/0xe0 [ 915.082445][T22314] ? _raw_spin_lock_bh+0xa4/0x180 [ 915.087433][T22314] ? _local_bh_enable+0x30/0x30 [ 915.092245][T22314] ? memset+0x1f/0x40 [ 915.096191][T22314] ? selinux_socket_sendmsg+0x10b/0x320 [ 915.101704][T22314] ? lock_sock_nested+0x25a/0x320 [ 915.106695][T22314] ? import_iovec+0x171/0x340 [ 915.111339][T22314] ? tipc_recvmsg+0x17c0/0x17c0 [ 915.116161][T22314] tipc_sendmsg+0x51/0x70 [ 915.120459][T22314] ____sys_sendmsg+0x56f/0x860 [ 915.125191][T22314] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 915.130356][T22314] __sys_sendmmsg+0x338/0x680 [ 915.134999][T22314] ? __ia32_sys_sendmsg+0x90/0x90 [ 915.139990][T22314] ? __rcu_read_lock+0x50/0x50 [ 915.144726][T22314] ? __kasan_slab_free+0x1e2/0x220 [ 915.149801][T22314] ? __kasan_slab_free+0x168/0x220 [ 915.154877][T22314] ? slab_free_freelist_hook+0xd0/0x150 [ 915.160385][T22314] ? kmem_cache_free+0xac/0x5c0 [ 915.165200][T22314] ? do_sys_open+0x4a3/0x620 [ 915.169756][T22314] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 915.175788][T22314] ? do_sys_open+0x2fc/0x620 [ 915.180351][T22314] ? proc_fail_nth_write+0x166/0x200 [ 915.185599][T22314] ? _local_bh_enable+0x30/0x30 [ 915.190415][T22314] ? proc_fail_nth_read+0x1c0/0x1c0 [ 915.195576][T22314] ? proc_fail_nth_read+0x1c0/0x1c0 [ 915.200749][T22314] ? memset+0x1f/0x40 [ 915.204730][T22314] ? fsnotify+0x13a0/0x1460 [ 915.209198][T22314] ? __kernel_write+0x340/0x340 [ 915.214012][T22314] ? fsnotify+0x13a0/0x1460 [ 915.218484][T22314] ? security_file_permission+0x128/0x300 [ 915.224169][T22314] ? __sb_end_write+0xa4/0xf0 [ 915.228812][T22314] ? vfs_write+0x427/0x4f0 [ 915.233199][T22314] ? ksys_write+0x237/0x2a0 [ 915.237692][T22314] ? __ia32_sys_read+0x80/0x80 [ 915.242431][T22314] ? fput_many+0x42/0x1a0 [ 915.246748][T22314] __x64_sys_sendmmsg+0x9c/0xb0 [ 915.251583][T22314] do_syscall_64+0xcb/0x150 [ 915.256052][T22314] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 915.261912][T22314] RIP: 0033:0x45de59 [ 915.265776][T22314] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 915.285606][T22314] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 915.293981][T22314] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 915.301932][T22314] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 915.309870][T22314] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 915.317809][T22314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000026 [ 915.325746][T22314] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c [ 915.333685][T22314] [ 915.335984][T22314] Allocated by task 22314: [ 915.340365][T22314] __kasan_kmalloc+0x117/0x1b0 [ 915.345093][T22314] kmem_cache_alloc+0x1d5/0x250 [ 915.349908][T22314] __netdev_alloc_skb+0x1d8/0x710 [ 915.354898][T22314] __ieee80211_beacon_get+0x628/0x11b0 [ 915.360323][T22314] ieee80211_beacon_get_tim+0xb7/0x500 [ 915.365747][T22314] mac80211_hwsim_beacon_tx+0xd4/0x570 [ 915.371169][T22314] __iterate_interfaces+0x1fc/0x390 [ 915.376334][T22314] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 915.383232][T22314] mac80211_hwsim_beacon+0xa1/0x180 [ 915.388395][T22314] __run_hrtimer+0x405/0x7a0 [ 915.392951][T22314] hrtimer_run_softirq+0x320/0x450 [ 915.398027][T22314] __do_softirq+0x22e/0x569 [ 915.402490][T22314] [ 915.404785][T22314] Freed by task 22314: [ 915.408822][T22314] __kasan_slab_free+0x168/0x220 [ 915.413726][T22314] slab_free_freelist_hook+0xd0/0x150 [ 915.419065][T22314] kmem_cache_free+0xac/0x5c0 [ 915.423708][T22314] mac80211_hwsim_beacon_tx+0x35e/0x570 [ 915.429218][T22314] __iterate_interfaces+0x1fc/0x390 [ 915.434383][T22314] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 915.441280][T22314] mac80211_hwsim_beacon+0xa1/0x180 [ 915.446447][T22314] __run_hrtimer+0x405/0x7a0 [ 915.451001][T22314] hrtimer_run_softirq+0x320/0x450 [ 915.456076][T22314] __do_softirq+0x22e/0x569 [ 915.460541][T22314] [ 915.462841][T22314] The buggy address belongs to the object at ffff888199633a00 [ 915.462841][T22314] which belongs to the cache skbuff_head_cache of size 240 [ 915.477378][T22314] The buggy address is located 0 bytes inside of [ 915.477378][T22314] 240-byte region [ffff888199633a00, ffff888199633af0) [ 915.490434][T22314] The buggy address belongs to the page: [ 915.496030][T22314] page:ffffea0006658cc0 refcount:1 mapcount:0 mapping:ffff8881daa92500 index:0xffff888199633000 [ 915.506400][T22314] flags: 0x8000000000000200(slab) [ 915.511410][T22314] raw: 8000000000000200 ffffea000729db88 ffffea0005d70cc8 ffff8881daa92500 [ 915.519974][T22314] raw: ffff888199633000 00000000000c0007 00000001ffffffff 0000000000000000 [ 915.528529][T22314] page dumped because: kasan: bad access detected [ 915.534902][T22314] [ 915.537196][T22314] Memory state around the buggy address: [ 915.542793][T22314] ffff888199633900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 915.550830][T22314] ffff888199633980: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 915.558877][T22314] >ffff888199633a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 915.566908][T22314] ^ [ 915.570956][T22314] ffff888199633a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 915.579019][T22314] ffff888199633b00: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 915.587050][T22314] ================================================================== [ 915.596552][T22314] ================================================================== [ 915.604619][T22314] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 915.612920][T22314] [ 915.615235][T22314] CPU: 0 PID: 22314 Comm: syz-executor.3 Tainted: G B W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 915.626764][T22314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 915.636807][T22314] Call Trace: [ 915.640085][T22314] dump_stack+0x1b0/0x21e [ 915.644399][T22314] ? show_regs_print_info+0x12/0x12 [ 915.649578][T22314] ? printk+0xc0/0x104 [ 915.653617][T22314] ? kmem_cache_free+0xac/0x5c0 [ 915.658434][T22314] ? kmem_cache_free+0xac/0x5c0 [ 915.663251][T22314] print_address_description+0x96/0x5d0 [ 915.668769][T22314] ? devkmsg_release+0x11c/0x11c [ 915.673675][T22314] ? kmem_cache_free+0xac/0x5c0 [ 915.678494][T22314] ? ___preempt_schedule+0x16/0x20 [ 915.683572][T22314] ? kmem_cache_free+0xac/0x5c0 [ 915.688389][T22314] ? kmem_cache_free+0xac/0x5c0 [ 915.693206][T22314] kasan_report_invalid_free+0x54/0xc0 [ 915.698633][T22314] __kasan_slab_free+0x102/0x220 [ 915.703545][T22314] ? cmp_ex_search+0x6d/0x90 [ 915.708103][T22314] ? __start___ex_table+0x717c/0xa620 [ 915.713440][T22314] ? bsearch+0x9b/0xc0 [ 915.717474][T22314] ? search_extable+0xf0/0xf0 [ 915.722118][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 915.728065][T22314] ? __stop_notes+0xc/0xc [ 915.732366][T22314] ? search_extable+0xaf/0xf0 [ 915.737011][T22314] ? __rcu_read_lock+0x50/0x50 [ 915.741739][T22314] ? trim_init_extable+0x3e0/0x3e0 [ 915.746842][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 915.752787][T22314] ? __start___ex_table+0x717c/0xa620 [ 915.758137][T22314] ? __start___ex_table+0x717c/0xa620 [ 915.763477][T22314] ? kasan_report+0x27/0x50 [ 915.767950][T22314] ? ex_handler_refcount+0x130/0x170 [ 915.773204][T22314] ? ex_handler_fault+0xa0/0xa0 [ 915.778038][T22314] ? __start___ex_table+0x7184/0xa620 [ 915.783381][T22314] ? fixup_exception+0x92/0xd0 [ 915.788114][T22314] ? do_trap+0x148/0x340 [ 915.792326][T22314] ? notify_die+0x1e1/0x2a0 [ 915.796815][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 915.802775][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 915.808751][T22314] slab_free_freelist_hook+0xd0/0x150 [ 915.814113][T22314] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 915.819190][T22314] kmem_cache_free+0xac/0x5c0 [ 915.823838][T22314] ? kasan_report+0x27/0x50 [ 915.828314][T22314] tipc_mcast_xmit+0x10a8/0x16c0 [ 915.833225][T22314] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 915.839345][T22314] ? __check_object_size+0x2e5/0x3b0 [ 915.844615][T22314] ? __start___ex_table+0x2cc9/0xa620 [ 915.849956][T22314] tipc_send_group_bcast+0x9f8/0xd50 [ 915.855224][T22314] ? __tipc_sendmsg+0x2d30/0x2d30 [ 915.860229][T22314] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 915.865570][T22314] ? wait_woken+0x250/0x250 [ 915.870039][T22314] ? path_openat+0x2258/0x4270 [ 915.874770][T22314] ? do_filp_open+0x1f7/0x430 [ 915.879417][T22314] ? do_sys_open+0x343/0x620 [ 915.883974][T22314] ? do_syscall_64+0xcb/0x150 [ 915.888616][T22314] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 915.894649][T22314] ? new_inode+0x25/0x1d0 [ 915.898945][T22314] ? proc_pid_make_inode+0x23/0x1d0 [ 915.904108][T22314] ? proc_tid_base_lookup+0x185/0x1f0 [ 915.909446][T22314] ? path_openat+0x2258/0x4270 [ 915.914172][T22314] ? do_filp_open+0x1f7/0x430 [ 915.918836][T22314] __tipc_sendmsg+0x400/0x2d30 [ 915.923565][T22314] ? avc_has_perm+0xbd/0x260 [ 915.928122][T22314] ? memset+0x1f/0x40 [ 915.932071][T22314] ? unwind_next_frame+0x1c07/0x22b0 [ 915.937319][T22314] ? local_bh_enable+0x20/0x20 [ 915.942050][T22314] ? arch_stack_walk+0x78/0xe0 [ 915.946780][T22314] ? _raw_spin_lock_bh+0xa4/0x180 [ 915.951769][T22314] ? _local_bh_enable+0x30/0x30 [ 915.956584][T22314] ? memset+0x1f/0x40 [ 915.960534][T22314] ? selinux_socket_sendmsg+0x10b/0x320 [ 915.966065][T22314] ? lock_sock_nested+0x25a/0x320 [ 915.971057][T22314] ? import_iovec+0x171/0x340 [ 915.975699][T22314] ? tipc_recvmsg+0x17c0/0x17c0 [ 915.980517][T22314] tipc_sendmsg+0x51/0x70 [ 915.984818][T22314] ____sys_sendmsg+0x56f/0x860 [ 915.989551][T22314] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 915.994716][T22314] __sys_sendmmsg+0x338/0x680 [ 915.999361][T22314] ? __ia32_sys_sendmsg+0x90/0x90 [ 916.004350][T22314] ? __rcu_read_lock+0x50/0x50 [ 916.009085][T22314] ? __kasan_slab_free+0x1e2/0x220 [ 916.014160][T22314] ? __kasan_slab_free+0x168/0x220 [ 916.019238][T22314] ? slab_free_freelist_hook+0xd0/0x150 [ 916.024749][T22314] ? kmem_cache_free+0xac/0x5c0 [ 916.029565][T22314] ? do_sys_open+0x4a3/0x620 [ 916.034120][T22314] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 916.040152][T22314] ? do_sys_open+0x2fc/0x620 [ 916.044884][T22314] ? proc_fail_nth_write+0x166/0x200 [ 916.050135][T22314] ? _local_bh_enable+0x30/0x30 [ 916.054949][T22314] ? proc_fail_nth_read+0x1c0/0x1c0 [ 916.060113][T22314] ? proc_fail_nth_read+0x1c0/0x1c0 [ 916.065279][T22314] ? memset+0x1f/0x40 [ 916.069229][T22314] ? fsnotify+0x13a0/0x1460 [ 916.073699][T22314] ? __kernel_write+0x340/0x340 [ 916.078516][T22314] ? fsnotify+0x13a0/0x1460 [ 916.083010][T22314] ? security_file_permission+0x128/0x300 [ 916.088694][T22314] ? __sb_end_write+0xa4/0xf0 [ 916.093340][T22314] ? vfs_write+0x427/0x4f0 [ 916.097726][T22314] ? ksys_write+0x237/0x2a0 [ 916.102196][T22314] ? __ia32_sys_read+0x80/0x80 [ 916.106936][T22314] ? fput_many+0x42/0x1a0 [ 916.111232][T22314] __x64_sys_sendmmsg+0x9c/0xb0 [ 916.116050][T22314] do_syscall_64+0xcb/0x150 [ 916.120530][T22314] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 916.126410][T22314] RIP: 0033:0x45de59 [ 916.130280][T22314] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 916.149859][T22314] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 916.158241][T22314] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 916.166192][T22314] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 916.174135][T22314] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 916.182074][T22314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000026 [ 916.190012][T22314] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c [ 916.197951][T22314] [ 916.200250][T22314] Allocated by task 22314: [ 916.204635][T22314] __kasan_kmalloc+0x117/0x1b0 [ 916.209363][T22314] kmem_cache_alloc+0x1d5/0x250 [ 916.214186][T22314] __netdev_alloc_skb+0x1d8/0x710 [ 916.219176][T22314] __ieee80211_beacon_get+0x628/0x11b0 [ 916.224599][T22314] ieee80211_beacon_get_tim+0xb7/0x500 [ 916.230022][T22314] mac80211_hwsim_beacon_tx+0xd4/0x570 [ 916.235445][T22314] __iterate_interfaces+0x1fc/0x390 [ 916.240619][T22314] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 916.247519][T22314] mac80211_hwsim_beacon+0xa1/0x180 [ 916.252692][T22314] __run_hrtimer+0x405/0x7a0 [ 916.257250][T22314] hrtimer_run_softirq+0x320/0x450 [ 916.262336][T22314] __do_softirq+0x22e/0x569 [ 916.266820][T22314] [ 916.269118][T22314] Freed by task 22314: [ 916.273179][T22314] __kasan_slab_free+0x168/0x220 [ 916.278094][T22314] slab_free_freelist_hook+0xd0/0x150 [ 916.283429][T22314] kmem_cache_free+0xac/0x5c0 [ 916.288070][T22314] mac80211_hwsim_beacon_tx+0x35e/0x570 [ 916.293668][T22314] __iterate_interfaces+0x1fc/0x390 [ 916.298843][T22314] ieee80211_iterate_active_interfaces_atomic+0x2e/0x40 [ 916.305742][T22314] mac80211_hwsim_beacon+0xa1/0x180 [ 916.310904][T22314] __run_hrtimer+0x405/0x7a0 [ 916.315458][T22314] hrtimer_run_softirq+0x320/0x450 [ 916.320533][T22314] __do_softirq+0x22e/0x569 [ 916.325004][T22314] [ 916.327304][T22314] The buggy address belongs to the object at ffff888175c33a00 [ 916.327304][T22314] which belongs to the cache skbuff_head_cache of size 240 [ 916.341840][T22314] The buggy address is located 0 bytes inside of [ 916.341840][T22314] 240-byte region [ffff888175c33a00, ffff888175c33af0) [ 916.355006][T22314] The buggy address belongs to the page: [ 916.360605][T22314] page:ffffea0005d70cc0 refcount:1 mapcount:0 mapping:ffff8881daa92500 index:0xffff888175c33140 [ 916.370976][T22314] flags: 0x8000000000000200(slab) [ 916.375969][T22314] raw: 8000000000000200 ffffea0006658cc8 ffffea0007625a48 ffff8881daa92500 [ 916.384520][T22314] raw: ffff888175c33140 00000000000c0008 00000001ffffffff 0000000000000000 [ 916.393065][T22314] page dumped because: kasan: bad access detected [ 916.399453][T22314] [ 916.401755][T22314] Memory state around the buggy address: [ 916.407365][T22314] ffff888175c33900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 916.415391][T22314] ffff888175c33980: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 916.423418][T22314] >ffff888175c33a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 916.431443][T22314] ^ [ 916.435479][T22314] ffff888175c33a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 916.443514][T22314] ffff888175c33b00: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 916.451571][T22314] ================================================================== [ 916.469980][T22314] ================================================================== [ 916.478052][T22314] BUG: KASAN: double-free or invalid-free in kmem_cache_free+0xac/0x5c0 [ 916.486347][T22314] [ 916.488649][T22314] CPU: 0 PID: 22314 Comm: syz-executor.3 Tainted: G B W 5.4.72-syzkaller-00299-gb34934d40c49 #0 [ 916.500145][T22314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 916.510163][T22314] Call Trace: [ 916.513420][T22314] dump_stack+0x1b0/0x21e [ 916.517712][T22314] ? show_regs_print_info+0x12/0x12 [ 916.522872][T22314] ? printk+0xc0/0x104 [ 916.526909][T22314] ? kmem_cache_free+0xac/0x5c0 [ 916.531721][T22314] ? kmem_cache_free+0xac/0x5c0 [ 916.536535][T22314] print_address_description+0x96/0x5d0 [ 916.542048][T22314] ? devkmsg_release+0x11c/0x11c [ 916.546954][T22314] ? kmem_cache_free+0xac/0x5c0 [ 916.551774][T22314] ? ___preempt_schedule+0x16/0x20 [ 916.556856][T22314] ? kmem_cache_free+0xac/0x5c0 [ 916.561672][T22314] ? kmem_cache_free+0xac/0x5c0 [ 916.566487][T22314] kasan_report_invalid_free+0x54/0xc0 [ 916.571909][T22314] __kasan_slab_free+0x102/0x220 [ 916.576826][T22314] ? cmp_ex_search+0x6d/0x90 [ 916.581386][T22314] ? __start___ex_table+0x717c/0xa620 [ 916.586728][T22314] ? bsearch+0x9b/0xc0 [ 916.590934][T22314] ? search_extable+0xf0/0xf0 [ 916.595573][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 916.601516][T22314] ? __stop_notes+0xc/0xc [ 916.605810][T22314] ? search_extable+0xaf/0xf0 [ 916.610451][T22314] ? __rcu_read_lock+0x50/0x50 [ 916.615212][T22314] ? trim_init_extable+0x3e0/0x3e0 [ 916.620287][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 916.626229][T22314] ? __start___ex_table+0x717c/0xa620 [ 916.631650][T22314] ? __start___ex_table+0x717c/0xa620 [ 916.636984][T22314] ? kasan_report+0x27/0x50 [ 916.641450][T22314] ? ex_handler_refcount+0x130/0x170 [ 916.646695][T22314] ? ex_handler_fault+0xa0/0xa0 [ 916.651513][T22314] ? __start___ex_table+0x7184/0xa620 [ 916.656853][T22314] ? fixup_exception+0x92/0xd0 [ 916.661585][T22314] ? do_trap+0x148/0x340 [ 916.665788][T22314] ? notify_die+0x1e1/0x2a0 [ 916.670252][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 916.676192][T22314] ? csum_partial_copy_generic+0x1fd1/0x3f00 [ 916.682136][T22314] slab_free_freelist_hook+0xd0/0x150 [ 916.687471][T22314] ? tipc_mcast_xmit+0x10a8/0x16c0 [ 916.692543][T22314] kmem_cache_free+0xac/0x5c0 [ 916.697185][T22314] ? kasan_report+0x27/0x50 [ 916.701650][T22314] tipc_mcast_xmit+0x10a8/0x16c0 [ 916.706551][T22314] ? tipc_bcast_dec_bearer_dst_cnt+0x240/0x240 [ 916.712667][T22314] ? __check_object_size+0x2e5/0x3b0 [ 916.717922][T22314] ? __start___ex_table+0x2cc9/0xa620 [ 916.723256][T22314] tipc_send_group_bcast+0x9f8/0xd50 [ 916.728504][T22314] ? __tipc_sendmsg+0x2d30/0x2d30 [ 916.733489][T22314] ? avc_has_perm_noaudit+0x2fc/0x3f0 [ 916.738840][T22314] ? wait_woken+0x250/0x250 [ 916.743304][T22314] ? path_openat+0x2258/0x4270 [ 916.748029][T22314] ? do_filp_open+0x1f7/0x430 [ 916.752670][T22314] ? do_sys_open+0x343/0x620 [ 916.757224][T22314] ? do_syscall_64+0xcb/0x150 [ 916.761865][T22314] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 916.767894][T22314] ? new_inode+0x25/0x1d0 [ 916.772197][T22314] ? proc_pid_make_inode+0x23/0x1d0 [ 916.777358][T22314] ? proc_tid_base_lookup+0x185/0x1f0 [ 916.782693][T22314] ? path_openat+0x2258/0x4270 [ 916.787420][T22314] ? do_filp_open+0x1f7/0x430 [ 916.792062][T22314] __tipc_sendmsg+0x400/0x2d30 [ 916.796788][T22314] ? avc_has_perm+0xbd/0x260 [ 916.801355][T22314] ? memset+0x1f/0x40 [ 916.805300][T22314] ? unwind_next_frame+0x1c07/0x22b0 [ 916.810546][T22314] ? local_bh_enable+0x20/0x20 [ 916.815272][T22314] ? arch_stack_walk+0x78/0xe0 [ 916.819997][T22314] ? _raw_spin_lock_bh+0xa4/0x180 [ 916.824983][T22314] ? _local_bh_enable+0x30/0x30 [ 916.829807][T22314] ? memset+0x1f/0x40 [ 916.833749][T22314] ? selinux_socket_sendmsg+0x10b/0x320 [ 916.839256][T22314] ? lock_sock_nested+0x25a/0x320 [ 916.844246][T22314] ? import_iovec+0x171/0x340 [ 916.848888][T22314] ? tipc_recvmsg+0x17c0/0x17c0 [ 916.853704][T22314] tipc_sendmsg+0x51/0x70 [ 916.858000][T22314] ____sys_sendmsg+0x56f/0x860 [ 916.862755][T22314] ? __sys_sendmsg_sock+0x2a0/0x2a0 [ 916.867919][T22314] __sys_sendmmsg+0x338/0x680 [ 916.872562][T22314] ? __ia32_sys_sendmsg+0x90/0x90 [ 916.877548][T22314] ? __rcu_read_lock+0x50/0x50 [ 916.882273][T22314] ? __kasan_slab_free+0x1e2/0x220 [ 916.887346][T22314] ? __kasan_slab_free+0x168/0x220 [ 916.892419][T22314] ? slab_free_freelist_hook+0xd0/0x150 [ 916.897928][T22314] ? kmem_cache_free+0xac/0x5c0 [ 916.902746][T22314] ? do_sys_open+0x4a3/0x620 [ 916.907299][T22314] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 916.913341][T22314] ? do_sys_open+0x2fc/0x620 [ 916.917894][T22314] ? proc_fail_nth_write+0x166/0x200 [ 916.923143][T22314] ? _local_bh_enable+0x30/0x30 [ 916.927956][T22314] ? proc_fail_nth_read+0x1c0/0x1c0 [ 916.933116][T22314] ? proc_fail_nth_read+0x1c0/0x1c0 [ 916.938276][T22314] ? memset+0x1f/0x40 [ 916.942223][T22314] ? fsnotify+0x13a0/0x1460 [ 916.946693][T22314] ? __kernel_write+0x340/0x340 [ 916.951507][T22314] ? fsnotify+0x13a0/0x1460 [ 916.955980][T22314] ? security_file_permission+0x128/0x300 [ 916.961664][T22314] ? __sb_end_write+0xa4/0xf0 [ 916.966304][T22314] ? vfs_write+0x427/0x4f0 [ 916.970685][T22314] ? ksys_write+0x237/0x2a0 [ 916.975150][T22314] ? __ia32_sys_read+0x80/0x80 [ 916.979889][T22314] ? fput_many+0x42/0x1a0 [ 916.984184][T22314] __x64_sys_sendmmsg+0x9c/0xb0 [ 916.989000][T22314] do_syscall_64+0xcb/0x150 [ 916.993466][T22314] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 916.999333][T22314] RIP: 0033:0x45de59 [ 917.003200][T22314] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 917.022766][T22314] RSP: 002b:00007f716e7f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 917.031153][T22314] RAX: ffffffffffffffda RBX: 0000000000027f00 RCX: 000000000045de59 [ 917.039200][T22314] RDX: 0000000000000092 RSI: 00000000200030c0 RDI: 0000000000000005 [ 917.047142][T22314] RBP: 00007f716e7f8ca0 R08: 0000000000000000 R09: 0000000000000000 [ 917.055076][T22314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000026 [ 917.063013][T22314] R13: 00007fff116f23ef R14: 00007f716e7f99c0 R15: 000000000118bf2c [ 917.070981][T22314] [ 917.073277][T22314] Allocated by task 22314: [ 917.077670][T22314] __kasan_kmalloc+0x117/0x1b0 [ 917.082396][T22314] kmem_cache_alloc+0x1d5/0x250 [ 917.087220][T22314] __netdev_alloc_skb+0x1d8/0x710