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"}, @NFTA_DATA_VALUE={0xc6, 0x1, "9cacdf103d84a6cbb0faccc4c7f0728568b8b9dffe74ec86b605ecef7614a800793b7f5e197255b7b5988cdf06b4632c041d3c17363f9577bcb833c9d8673a73f4e785e397a03fa7aacf1ea938ec2ac26e18cf868c20dec5eb59eb27d54c2c13649221976535eba0f0c9d1d2ef3eff9f5fe0d36c6b979f5bbfcda84069f6507d850cade35b9fd20e38d9776a9d739296ca9b89e9d178bc44ec906d485cb8eed32848f10177d932bcd361d2629db31f62526d6868fc249cfc23ef2f686be2df54459a"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELTABLE={0x3c, 0x2, 0xa, 0x0, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x36c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x284, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}, {0x14}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'vlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x7c8, 0x8, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x3fc, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@tunnel={{0xb, 0x1, 'tunnel\x00'}, @void}]}, {0x394, 0x1, 0x0, 0x1, [@fib={{0x8, 0x1, 'fib\x00'}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}, @cmp={{0x8, 0x1, 'cmp\x00'}, @val={0x1e4, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_CMP_DATA={0x1d0, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xac, 0x1, "5584b4f032ff45d65276371dcb30aeb6f0e85498701e991680bf6a02054a2016ef8718877c543ed2b27185b73cd9ebdf9af7de2ad88b8c1bb061a8c1fa1cdd484affe8fe9aa4598c2c71f5d7bf790bca32ecd8639ecdd193356c7fcdad8d5b0ec7c7b604101586701d0b03f7549c07d2e0591be54796bd45c9394d066e48659a82cf315854c75535d8829e797da90d4fee1362a10704084a38154a328e7c2c9aa223cae659c8999f"}, @NFTA_DATA_VALUE={0x59, 0x1, "6c17e2634f7cd8869415d7a23f6148c5b1e0c03387a212ff07853326b5b03cf767e53b46f356eaed07565e336955fd8837d886e789d5c340280e643b09969cd733ffa19c9f799297010bb7a8f09fe3a91b30b4c2d5"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1a, 0x1, "7c81c55efa5f4f4fea4c5cb2ba21726a0cb30944db95"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}, @range={{0xa, 0x1, 'range\x00'}, @val={0x130, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RANGE_TO_DATA={0x124, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x9d, 0x1, "e046cbefc18b8ea5ac0956b1ef8f365a89c7e160720548035ca94132b158143f26cf7c2939e36e63644318b81b82a33eae62e25ef20647a3140c225acf81254d29b31456d02c0573ca54f2fbaa7c025227f35acd688a849f7549b2cb2356e2deaed99c51f2229a081f365c8a4466ee8cf6f7664528da3806675f6cea0ed1b01c27b1c49bcc9983ea6314bee970574ed138d8e0fb0dc847514a"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x3d, 0x1, "3775b13dbe258efb176e715be32265ee1a2f87a4c4c4c2e95b24254bbf0119129c120e49833bfd98d22824302e92bb19fdc3bf631ddbd4af74"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}}, @flow_offload={{0x11, 0x1, 'flow_offload\x00'}, @void}, @notrack={{0xc, 0x1, 'notrack\x00'}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", "", ""]}}]}, {0x54, 0x1, 0x0, 0x1, [@byteorder={{0xe, 0x1, 'byteorder\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xe2}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0xef}]}}, @numgen={{0xb, 0x1, 'numgen\x00'}, @void}]}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x3a4, 0x4, 0x0, 0x1, [{0xf0, 0x1, 0x0, 0x1, [@masq={{0x9, 0x1, 'masq\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x1c}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x21}]}}, @ct={{0x7, 0x1, 'ct\x00'}, @void}, @connlimit={{0xe, 0x1, 'connlimit\x00'}, @void}, @notrack={{0xc, 0x1, 'notrack\x00'}, @void}, @osf={{0x8, 0x1, 'osf\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8}, @NFTA_OSF_FLAGS={0x8}]}}, @tproxy={{0xb, 0x1, 'tproxy\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x17}]}}, @dup={{0x8, 0x1, 'dup\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}]}}, @bitwise={{0xc, 0x1, 'bitwise\x00'}, @void}, @exthdr={{0xb, 0x1, 'exthdr\x00'}, @void}]}, {0x13c, 0x1, 0x0, 0x1, [@fib={{0x8, 0x1, 'fib\x00'}, @void}, @exthdr={{0xb, 0x1, 'exthdr\x00'}, @void}, @lookup={{0xb, 0x1, 'lookup\x00'}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}}, @byteorder={{0xe, 0x1, 'byteorder\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}, @meta={{0x9, 0x1, 'meta\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}, @redir={{0xa, 0x1, 'redir\x00'}, @void}, @meta={{0x9, 0x1, 'meta\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x1f}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}, @meta={{0x9, 0x1, 'meta\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1e}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_META_DREG={0x8}]}}]}, {0x174, 0x1, 0x0, 0x1, [@ct={{0x7, 0x1, 'ct\x00'}, @void}, @flow_offload={{0x11, 0x1, 'flow_offload\x00'}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}, @limit={{0xa, 0x1, 'limit\x00'}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xa3ee}]}}, @nat={{0x8, 0x1, 'nat\x00'}, @void}, @immediate={{0xe, 0x1, 'immediate\x00'}, @void}, @bitwise={{0xc, 0x1, 'bitwise\x00'}, @val={0x98, 0x2, 0x0, 0x1, [@NFTA_BITWISE_MASK={0x8c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x85, 0x1, "cfd649f0ad67876a1fea87a393c12e6bdb796de369a8df3d0dc6130b41b1e6aad836b076b8059f0d9b856e4ec168a7336bc8a53ddea8d70bb5e8cc918d6494c011faa25b6707d45848e1c5643ce29db3caa0437a1c47ce9993d8ee9d06ed561e2c851196914c631ae243ae7b4a52ac172b3d7708e860f47af6789144855f40bed1"}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xf}]}}]}]}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}], {0x14}}, 0x40f0}, 0x1, 0x0, 0x0, 0x40085}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x10, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x187ca}, @TCA_FLOW_EMATCHES={0x4}]}}]}, 0x40}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 416.419382] nla_parse: 5 callbacks suppressed [ 416.419389] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 416.485754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=27629 comm=syz-executor.2 [ 416.514561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=27629 comm=syz-executor.2 [ 416.534119] ntfs: (device loop3): parse_options(): Unrecognized mount option audit. [ 416.542447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=27629 comm=syz-executor.2 [ 416.570455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=27629 comm=syz-executor.2 [ 416.590531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=27629 comm=syz-executor.2 [ 416.603330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=27629 comm=syz-executor.2 [ 416.622194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=27629 comm=syz-executor.2 [ 416.640711] ntfs: (device loop3): parse_options(): Unrecognized mount option . [ 416.650676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=27629 comm=syz-executor.2 [ 416.678751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=27629 comm=syz-executor.2 [ 416.700247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=27629 comm=syz-executor.2 [ 416.720597] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 23:15:35 executing program 4: write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)={0xa, {0x5, 0xff, 0x65}}, 0xa) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$vsock_stream(0x28, 0x1, 0x0) 23:15:35 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:15:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) getsockname$llc(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c65d336b003ea0400000000000092290a7ea290ab0e744600000000"], 0x194) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f00000003c0)=""/4096, &(0x7f0000000100)=0x1000) close(r2) r3 = dup3(0xffffffffffffffff, r1, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0xc041, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r4], 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x20020000) 23:15:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x4a8ac3, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000000000005000000020000000000000000000000020000008b080000000000000001000000000003000001000000000000000000000003000000f7ffffff050000003f0300"/90]) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f0000000500)}], 0x1, 0x8) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) read$fb(r1, &(0x7f0000000280)=""/77, 0x4d) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x2, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000300)={0xea, 0xa, 0x4, 0x17e020, 0x7ff, {0x77359400}, {0x2, 0x2, 0x5, 0x7, 0x4, 0x7f, "92546fdb"}, 0x7, 0x1, @fd=r1, 0x7fffffff, 0x0, r1}) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000380)={0x81, 0x0, 0x4, 0x4, 0x8, {0x77359400}, {0x2, 0x2, 0x8, 0x1, 0x4, 0x5, "6dd1c7a3"}, 0x2, 0x4, @userptr=0x1, 0x7ff, 0x0, r4}) clone(0x4030980, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 23:15:35 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffd}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r1) flock(r1, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x1f4) 23:15:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup(0xffffffffffffffff) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000180)='./bus\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x354, 0xf0ff7f, 0x0) getgroups(0x2, &(0x7f0000000040)=[0x0, 0x0]) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000b80)=ANY=[@ANYBLOB="1804000000000000", @ANYRES64=0x0, @ANYBLOB="050000000000000002000000000000000500000000000000040000000000000000040000000000080000000000000000050000000000000001000000000000000000000000000000040000000000000006000000000000000500000000010000ffffffff00800000ff010000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="dc5dffff000000000000000004000000000000000300000000000000070000000c1c00005449504376320000010000000000000002000000000000000700000000000000ffffffff00000000030000002000000006000000000000008000000000000000090000000000000003000000000000000800000000000000ff0f00000000000000000000e0ffffff470e00000040000004000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="020000000700000000000000050000000000000000000000000000000500000042470000245c2f2bc700000000000000000000000200000000000000080000000000000043650000000000003c020000030000000000000000000000f7ffffffffffffffa8f8ffffffffffffe818000000000000800000000000000003000000000000000700000000000000250e00000060000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0400000000020000000000000600000000000000080000000000000003000000fe0f00003a21400000000000010000000000000003000000000000008100000000000000000000000000000001000080ffff0000030000000000000009000000000000000500000000000000860100000000000000000000000000007900000000000000ff00000060960000feffffff0040000009000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="070000003f000000000000000300000000000000000000000000000007000000001000005449504376320000"], 0x418) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000380)=0x196, &(0x7f00000003c0)=0x4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="180000009717f6af7b408b301b54f2aabefe0a27fbb92dc62079ca829ae2755a3a6ab1dfc9fc4d0ff522255fc1ebdc888c86fed963beef9f8162a43cded15f09dbae55d64fe835014c100b61a42eefb7d99f5ae7a57bbf09e2b8", @ANYRES16=r5, @ANYBLOB="010000002902cd1524e2ca7f00000400048074ec03ff985db2407ade14efdca8734147e2839d26f07a7adbd8620abe650c0e5f57b551704c61c650acb40b00010046612017679467fb84b00307acd91e39d238df1821849520fcffba0ecfd6fa4d6257135430e5e32a0d3e18d9d4e034518b40f80d136b45f2cf3860d3850e53ff7144d5b4721370cf9020e45eaf3160d07326e84bd55ac24bdd941e53ce41576cefc386e791982a5ca09de70e292d266db4cca1b37f10a7bbc41d71b188a4cd811dd0b5aea65fb3056e3882402363006d20340581311e16ce8003f1b6405c387295"], 0x18}}, 0x0) 23:15:35 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:15:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) r2 = accept4$inet6(r1, 0x0, &(0x7f0000000000), 0x0) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f00000000c0)) close(r1) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x7fff, 0x0, 0x1, 0x1, 0x98}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c00029a00000000000000000014000100100001000900010067616374"], 0x34}}, 0x0) 23:15:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000340)=0x1000, 0x4) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40800) chdir(&(0x7f0000000000)='./file1\x00') write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf250400000008000279395aa9cf5897b852ec6728e281d874af2d941da0584abe7872ec0c00c53c2ae338e191530aaefa70ff8a6b91945f24d21af657573811c2279f3754292f5396f9ff2a1efa56257c64d7a0968eb09de3355302ee0000008000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x200008c1) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe) getpeername$ax25(r1, &(0x7f0000000100)={{0x3, @null}, [@default, @rose, @remote, @remote, @bcast, @rose, @rose, @null]}, &(0x7f0000000040)=0x48) r2 = open$dir(&(0x7f0000000380)='./file1\x00', 0x0, 0x1c2) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x31e) sendfile(r0, r2, 0x0, 0x1c500) 23:15:35 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) [ 416.983415] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 23:15:35 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) socket$packet(0x11, 0xa, 0x300) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0xc0506617, &(0x7f00000000c0)={{0x1, 0x0, @reserved="96a010b0078dc305dbdc4ac833e53c09a2f4d6494baad9d2ea3abbabbf518166"}, 0xda, 0x0, [], "22f37c574e37e85808f4375b44ddb6d3cc45adde911b705b278fca8e55edb12871513c0922da3690d9667539d4356bdeaa71c5359eadb27087ef84106c4aab7f4160c848cc4134482990e4c154475c1cbe74464f7ee219343a228411fc46fa8dff10a06c71b716b566c967ac68ea864848ac66c48c426192092427876421298cf4869658222053962fd7720d161f8cfcc7483c37894ae2a638777ace04f73d544ff3386a7267171a18517ab38470775c9246accb001ec3f33bbcdb787b1c808a2ee86decbcad3393a2b8c0196f176fa7ee4c5c2f4a135feab75b"}) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 23:15:35 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/80) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ceph(&(0x7f00000002c0)='ceph\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x1101020, &(0x7f0000001700)='^-(,%\x00') [ 417.038699] tc_dump_action: action bad kind 23:15:35 executing program 4: perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6100}, [@IFLA_LINKMODE={0x5, 0x11, 0x1f}]}, 0x28}}, 0x0) bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f00000002c0)={0x1d, 0xe, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@map={0x18, 0xa, 0x1, 0x0, r0}, @func, @map_val={0x18, 0xf, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}, @exit, @jmp={0x5, 0x0, 0xd475ab1c6ca01cab, 0x3, 0x7, 0x0, 0xffffffffffffffff}, @ldst={0x1, 0x0, 0x3, 0x0, 0x5, 0x80, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x0, 0x6, 0x3, 0xffffffffffffffe0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000100)='GPL\x00', 0xd2f7, 0x54, &(0x7f0000000200)=""/84, 0x41100, 0x7, [], r1, 0x1b, r0, 0x8, &(0x7f0000000140)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0xb, 0x496c, 0x4}, 0x10, 0xffffffffffffffff}, 0x78) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000540)) sendfile(r2, r0, 0x0, 0x20000000000000d8) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}}, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000400)={0x6, 0x8}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x2e7, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="0921202e2f66dd1f908b967bde696c653020f014d336b003ea0400000000000092290a"], 0x194) close(r3) getpeername$netrom(r0, &(0x7f0000000580)={{}, [@rose, @null, @default, @netrom, @null, @null, @bcast, @default]}, &(0x7f0000000340)=0x48) 23:15:35 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:15:35 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:15:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000003200250200000000000000f6000000000c0002000000000000006b80f149aa1a8c9003001841033159cfe171e566e533fb7c9621295e63885a045fe403c736b756c795e88227c33d6e613af791ee1e3182bdfe86d3df7d60e124af96c7cd000500ecba72c73cfde20b77813b76d29c4e26c534303ece34405c8b186ae83af10ca0bbefb20207ea8e88bd63d17111ada21f6a815d6b041edc8baa7ecfcbf47715b7af971d00"/182], 0x34}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000000)={&(0x7f0000000040)=[0xffffffff, 0x1], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x6) r2 = dup3(r0, r1, 0x80000) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0x3f, 0x1f, 0x7, 0x1, 0x0, 0x7fffffff, 0x4000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1, 0x2}, 0x80, 0x9, 0x1, 0x2, 0x0, 0x1, 0x898c}, r1, 0x5, r2, 0x1) 23:15:36 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1402, 0x400, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x8055) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) 23:15:36 executing program 0: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x4000, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0xe4, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x2f}}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "85a02d6868"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "db79d07883dd060594491bfa20"}, @NL80211_KEY_SEQ={0x13, 0x4, "5a9cb39415397f027ec6b31d1b7e4e"}]}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "13b6dd3a9880be97b1"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "123d0ad73c"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e546859ce6"}]}, 0xe4}, 0x1, 0x0, 0x0, 0x11}, 0x40004) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374"], 0x34}}, 0x0) 23:15:36 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x3) sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="d86f01721d5db884"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x40, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x80000001, 0x5, 0x0, 0xff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x4000, 0x40240}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='rdma.current\x00', 0x275a, 0x0) close(0xffffffffffffffff) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0) 23:15:36 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:15:36 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x33) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000001000014d14f2cb97ab75470eb0d9d046", @ANYRES32=0x0, @ANYBLOB="bb0e0000000000003000128009000100766c616e000000002000028006000100000000000c000200160000000e0000000600050088a8000008000500", @ANYRES32=r2, @ANYBLOB="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"], 0x60}}, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="0600202e2f66696c6530a0f014d3366009ea0400000000000092290a7ea290ab0e74468d7a5d1b366732a82ba7e8697f23b20bf722542d87cfb8c2fb775cac937f13e41ae061c1cba45b36d3e5bc1ce99692036768c66f9b9a978bd714db6e54b6d44aa85ba014b1f0dd0b321a25c987a4785429e381c225fbbcea01a789eeba453387ffffd6c1117085fa0ee8df71b00c0611284f6ba24592a576a3e4cd5230e649782c"], 0x194) close(r4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) 23:15:36 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) [ 417.565248] IPv6: ADDRCONF(NETDEV_UP): vlan2: link is not ready [ 417.655596] IPv6: ADDRCONF(NETDEV_UP): vlan2: link is not ready 23:15:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800d6b010069703667726574617000000014000000080001000000000000000000", @ANYRES32=r4, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x45}, 0x0) 23:15:36 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000040)={0x2, 0x2, "bb78984f15f231d9736c5b123e6f37263ef234e749f0baf9", {0x81, 0x5}, 0xffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374"], 0x34}}, 0x0) 23:15:36 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 23:15:36 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x10) getpeername(0xffffffffffffffff, &(0x7f0000000280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000300)=0x80) ftruncate(r1, 0x2007fff) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x9a) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX=r1], 0x4}, 0x1, 0x0, 0x0, 0x20008040}, 0x40000b0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) open(0x0, 0x0, 0x140) socket$nl_xfrm(0x10, 0x3, 0x6) set_tid_address(0x0) r2 = dup(r0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) sendto$inet6(r3, 0x0, 0x0, 0x8010, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10) sendfile(r0, r4, 0x0, 0x8000fffffffe) connect$unix(r2, &(0x7f0000000400)=@abs, 0x6e) 23:15:36 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 23:15:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000020000000000000000000000000c0002000000000000000000140001006a5cc8147c8c52c06761637400000000"], 0x34}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) [ 417.997418] audit: type=1804 audit(1598742936.678:235): pid=27764 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir866703277/syzkaller.wkWSq8/862/bus" dev="sda1" ino=17028 res=1 [ 418.034016] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 23:15:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374"], 0x34}}, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r2) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="f7d286108d56cb355cc77ceb26c0a6a4", 0x10) 23:15:36 executing program 1: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x10, 0x0, 0x21, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f00000000c0)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010101}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) accept(r0, 0x0, &(0x7f0000000080)) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000180)=""/157) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000480)="4fb418e4dff820f983e36c44d3e2443838b402988a63d0defebc790902c359691ad8d5be8901fe8ff6714d6c6d6fcce838e5f4b16f870e9f14c84147bc5cd4a780da600453645f0badf296a2cf62f2659500366b26582d36efac9339b08d202491a4c981ce90ecb2ad2d3e2ed58db9ba26be639c49a833ae", 0x78) close(0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_RESET(r1, 0x4141, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0xffffffff) getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000003c0)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000440)=0x28) 23:15:36 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x181000) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000040)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x14400, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000140)={&(0x7f00000000c0)=[0x8], &(0x7f0000000100)=[0x0, 0x0], 0x1, 0x4, 0xeeeeeeee}) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[0x3, 0x80000000, 0x0]}) syz_mount_image$minix(&(0x7f0000000200)='minix\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x4, &(0x7f0000000540)=[{&(0x7f0000000280)="d43a76db74e05a4e514b399da966fb6be0715f4a852b108f96e33e2d37bdbaae85915cf1bf4a76534328fd087a77c7f81f9111aa442da138966ceaf4581f044f7acf5f5ce5c4839e369be4ad6947fde6005010a39cda27d009cdcd5a36205e7b7df2099ac38fcce4a7cdd54e5d0926a8ad30aad53e7b09252ca35e10c1b00e3c17827a4cadce3ae4b0e18fb00cb8cf4638f3801ce31097a39d0a8c20e8590c", 0x9f, 0x1}, {&(0x7f0000000340)="64d11c41ae5fb6d1a27169d5d5da85bf347f1a78a09fb14a73d9bb0cccbd5938d0e1a6b1fd55ce5b5731d4490954dba1e356650e04574b62c60044f51c0ac45f77cb3bedf68e66038033214cff5f5ce60c7ea91e42f7f624646d51e40ceaccba213134e203b97d5862afccd338151452733fbc10682421114d35585a1ed1bd7edef5c7c4c010a39b1554218b09884b0284706f912fa769634b", 0x99, 0x9}, {&(0x7f0000000400)="9c9c4db4338ab341f1c43dae8627ef0b468ec035e5c79dbc73976e422a0b8e1ba2b1593e0741494e292c637a7e6110a9ef9094ddde7e239d028a3840b58cc61564358f2f0c2bddbea8a5146cf117d83b1dc3114923286062739845142cbc8e767958316b5d5b3e397a0aadb41195e467bfb9cf8e9f64f50420b587e1bdc626332f892e297fdbd4c0374cc3b63a08453bbc", 0x91, 0x9}, {&(0x7f00000004c0)="242e5d3d529699ee567abe53262e6f48441b66a4a46f0bfdac1e64b419cf282361587d13cb0369251a025d721d44d5c8b4023071471cb6a5ea68328dd25f5bbc1513d368ed8c90f5e034a415", 0x4c, 0x80}], 0x6, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000600)={&(0x7f00000005c0)=[0x80000001], 0x1, 0x7ff, 0x4, 0x0, 0x68, 0x3, 0x8, {0xf919, 0x7fff, 0x6, 0x8, 0x0, 0x731, 0xfff, 0x1ff, 0x3ff, 0x5, 0x3, 0xfff9, 0x0, 0xffffffff, "b5478326ffc6937b9db5f8fdb64ed424b14b6787a5ddfd6d1baccee632b6fb42"}}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000044}, 0x24008000) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/ubi_ctrl\x00', 0xa0200, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f00000007c0)) recvmsg$can_bcm(r0, &(0x7f0000000a40)={&(0x7f0000000800)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000880)=""/150, 0x96}], 0x1, &(0x7f0000000980)=""/173, 0xad}, 0x2000) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000a80)=0xdd, 0x4) r4 = socket$netlink(0x10, 0x3, 0xb) ftruncate(r4, 0xf338) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000b00)={0x0, 0x1c, &(0x7f0000000ac0)=[@in6={0xa, 0x4e23, 0x40, @private2, 0x5}]}, &(0x7f0000000b40)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000b80)={r5, 0x3ff}, 0x8) r6 = syz_open_dev$mouse(&(0x7f0000000bc0)='/dev/input/mouse#\x00', 0x20, 0x84100) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000c00)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fffffff, @mcast1, 0x9}, {0xa, 0x4e24, 0x1, @local}, 0xffffffffffffffff, 0x7ff}}, 0x48) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000c80)={r5, 0x1f, 0xb0, "ede0e14b27af7255b884ed0a996ad7dbc8f9c64ec3ea0ccbada00f36343595e1ca25890f3e531610a85410f2757d1a6caa7e7e314bd5b28b08e08926795ff8fd528296b11687c35a922daf2e2cdc9403db79cc4e3699bb18507444649d3d15596ee2506b65611a4ace98718b0daf8e52e346e91fcf358383ee42019983c8e925068703a4ff5af6a2033cbac3945dd3ed2c7137fe8443c397e69073fb392d6d3f15de5487d9deb8c3e57c47fa732abf19"}, 0xb8) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_macvtap\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x1) 23:15:36 executing program 5 (fault-call:2 fault-nth:0): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:15:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1ff, 0x80300) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000080)=0x91) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 23:15:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0x40086604, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x204040}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000020603000000005c108f9de90286aa000900020073797a3100000000be732778c7250453ab84685b21b5f920dceb0c7c4d75d39f19fc1a49f10ba8e67f30c256b4237eff4044d5abd6e7e17d62f9383c892d53bcc57d271089c2a7e40298d1c6311d9e1a249f8303ed9b18425f3a29e5fd4a9f072661b43e9bd9b29734c87c0cb62f66bc380b77e5a06a919a4dd4d3ad835631f386bca4448967"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000500)={0x2, 0x7, 0x2, 0x4, 0x2fb3}) write(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x7b78983, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x160, 0x62020000, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0xb003, 0x130, 0x160, 0x8, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a, 0x2}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358) [ 418.334240] FAULT_INJECTION: forcing a failure. [ 418.334240] name failslab, interval 1, probability 0, space 0, times 0 [ 418.353081] CPU: 0 PID: 27796 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 418.360995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 418.370353] Call Trace: [ 418.372951] dump_stack+0x1b2/0x283 [ 418.376604] should_fail.cold+0x10a/0x154 [ 418.380770] should_failslab+0xd6/0x130 [ 418.384750] kmem_cache_alloc_node+0x263/0x410 [ 418.389349] __alloc_skb+0x5c/0x510 [ 418.390945] hub 9-0:1.0: USB hub found [ 418.392974] netlink_sendmsg+0x901/0xb80 [ 418.392990] ? nlmsg_notify+0x170/0x170 [ 418.393001] ? kernel_recvmsg+0x210/0x210 [ 418.393015] ? security_socket_sendmsg+0x83/0xb0 [ 418.393029] ? nlmsg_notify+0x170/0x170 [ 418.400923] hub 9-0:1.0: 8 ports detected [ 418.401643] sock_sendmsg+0xb5/0x100 [ 418.401656] ___sys_sendmsg+0x326/0x800 [ 418.401669] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 418.401697] ? check_preemption_disabled+0x35/0x240 [ 418.440009] ? perf_trace_lock_acquire+0x510/0x510 [ 418.444935] ? perf_trace_lock+0xf7/0x490 [ 418.449097] ? __fget+0x1fe/0x360 [ 418.452558] ? lock_acquire+0x170/0x3f0 [ 418.456539] ? lock_downgrade+0x740/0x740 [ 418.460697] ? __fget+0x225/0x360 [ 418.464151] ? __fdget+0x196/0x1f0 [ 418.467688] ? sockfd_lookup_light+0xb2/0x160 [ 418.472183] __sys_sendmmsg+0x129/0x330 [ 418.476154] ? SyS_sendmsg+0x40/0x40 [ 418.479891] ? __mutex_unlock_slowpath+0x75/0x770 [ 418.484740] ? wait_for_completion_io+0x10/0x10 [ 418.489410] ? vfs_write+0x319/0x4d0 [ 418.493120] ? fput+0xb/0x140 [ 418.496223] ? SyS_write+0x14d/0x210 [ 418.499935] ? SyS_read+0x210/0x210 [ 418.503565] SyS_sendmmsg+0x2f/0x50 [ 418.507190] ? __sys_sendmmsg+0x330/0x330 [ 418.511339] do_syscall_64+0x1d5/0x640 [ 418.515237] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 418.521291] RIP: 0033:0x45d5b9 [ 418.524472] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 23:15:37 executing program 5 (fault-call:2 fault-nth:1): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:15:37 executing program 0: sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0xb03, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x96b7}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x38}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff7fff}]}, 0x48}}, 0x8000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES32], 0x34}}, 0x0) [ 418.532174] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 418.539437] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 418.546699] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 [ 418.553961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.561238] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c [ 418.616731] cannot load conntrack support for proto=2 23:15:37 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="040005090000000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x90142, 0x0) ioctl$SNDCTL_TMR_STOP(r3, 0x5403) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) ftruncate(r2, 0x40) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000a40)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 418.650518] FAULT_INJECTION: forcing a failure. [ 418.650518] name failslab, interval 1, probability 0, space 0, times 0 [ 418.667560] CPU: 1 PID: 27825 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 418.675473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 418.684826] Call Trace: [ 418.687421] dump_stack+0x1b2/0x283 [ 418.691050] should_fail.cold+0x10a/0x154 [ 418.695198] should_failslab+0xd6/0x130 [ 418.699166] kmem_cache_alloc_node_trace+0x25a/0x400 [ 418.704251] __kmalloc_node_track_caller+0x38/0x70 [ 418.709163] __alloc_skb+0x96/0x510 [ 418.712771] netlink_sendmsg+0x901/0xb80 [ 418.716825] ? nlmsg_notify+0x170/0x170 [ 418.720799] ? kernel_recvmsg+0x210/0x210 [ 418.724927] ? security_socket_sendmsg+0x83/0xb0 [ 418.729659] ? nlmsg_notify+0x170/0x170 [ 418.733615] sock_sendmsg+0xb5/0x100 [ 418.737308] ___sys_sendmsg+0x326/0x800 [ 418.741261] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 418.746000] ? check_preemption_disabled+0x35/0x240 [ 418.751000] ? perf_trace_lock_acquire+0x510/0x510 [ 418.755904] ? perf_trace_lock+0xf7/0x490 [ 418.760034] ? __fget+0x1fe/0x360 [ 418.763466] ? lock_acquire+0x170/0x3f0 [ 418.767419] ? lock_downgrade+0x740/0x740 [ 418.771562] ? __fget+0x225/0x360 [ 418.775000] ? __fdget+0x196/0x1f0 [ 418.778525] ? sockfd_lookup_light+0xb2/0x160 [ 418.783000] __sys_sendmmsg+0x129/0x330 [ 418.786966] ? SyS_sendmsg+0x40/0x40 [ 418.790674] ? __mutex_unlock_slowpath+0x75/0x770 [ 418.795497] ? wait_for_completion_io+0x10/0x10 [ 418.800145] ? vfs_write+0x319/0x4d0 [ 418.803836] ? fput+0xb/0x140 [ 418.806920] ? SyS_write+0x14d/0x210 [ 418.810609] ? SyS_read+0x210/0x210 [ 418.814216] SyS_sendmmsg+0x2f/0x50 [ 418.817822] ? __sys_sendmmsg+0x330/0x330 [ 418.821949] do_syscall_64+0x1d5/0x640 [ 418.825817] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 418.830984] RIP: 0033:0x45d5b9 [ 418.834155] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 418.841844] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 23:15:37 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001800128008000100736974000c00028008000100", @ANYRES32=r3], 0x38}}, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000002c0)="be65e572294b6bf38121d2ffbdda641c26901ee13add2e6ff4d898b7c615055bd92e40413781c333f08172ff056cf6e9c109cf7c90aab8a67571555a217d7a492ae682a5b7ab7d3e38cccee6094821d92199292113944497cd38089e1f8be78d538b8a4276a64962814ef023082c4733e7fe10b13d") ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) 23:15:37 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r1) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x48087}, 0x6efaa407497a73af) [ 418.849102] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 418.856351] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 [ 418.863599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.870846] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c 23:15:37 executing program 5 (fault-call:2 fault-nth:2): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:15:37 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TCFLSH(r0, 0x540b, 0x2) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xb4, 0x0, 0x620, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}, @ETHTOOL_A_RINGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x8}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6}, @ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x4}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7ff800}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374"], 0x34}}, 0x0) [ 419.039410] FAULT_INJECTION: forcing a failure. [ 419.039410] name failslab, interval 1, probability 0, space 0, times 0 [ 419.072090] CPU: 0 PID: 27847 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 419.080019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.089988] Call Trace: [ 419.092587] dump_stack+0x1b2/0x283 [ 419.096228] should_fail.cold+0x10a/0x154 [ 419.100379] ? perf_trace_lock_acquire+0x510/0x510 [ 419.105318] should_failslab+0xd6/0x130 [ 419.109297] kmem_cache_alloc+0x40/0x3c0 [ 419.113364] skb_clone+0x126/0x9a0 [ 419.116912] netlink_deliver_tap+0x655/0x7d0 [ 419.121330] netlink_unicast+0x485/0x610 [ 419.125394] ? netlink_sendskb+0xd0/0xd0 [ 419.129457] netlink_sendmsg+0x62e/0xb80 [ 419.133525] ? nlmsg_notify+0x170/0x170 [ 419.137498] ? kernel_recvmsg+0x210/0x210 [ 419.141645] ? security_socket_sendmsg+0x83/0xb0 [ 419.146399] ? nlmsg_notify+0x170/0x170 [ 419.150375] sock_sendmsg+0xb5/0x100 [ 419.154087] ___sys_sendmsg+0x326/0x800 [ 419.158068] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 419.162828] ? check_preemption_disabled+0x35/0x240 [ 419.167852] ? perf_trace_lock_acquire+0x510/0x510 [ 419.172779] ? perf_trace_lock+0xf7/0x490 [ 419.176933] ? __fget+0x1fe/0x360 [ 419.180384] ? lock_acquire+0x170/0x3f0 [ 419.184356] ? lock_downgrade+0x740/0x740 [ 419.188510] ? __fget+0x225/0x360 [ 419.191969] ? __fdget+0x196/0x1f0 [ 419.195513] ? sockfd_lookup_light+0xb2/0x160 [ 419.199998] __sys_sendmmsg+0x129/0x330 [ 419.203952] ? SyS_sendmsg+0x40/0x40 [ 419.207843] ? __mutex_unlock_slowpath+0x75/0x770 [ 419.212786] ? wait_for_completion_io+0x10/0x10 [ 419.217447] ? vfs_write+0x319/0x4d0 [ 419.221247] ? fput+0xb/0x140 [ 419.224383] ? SyS_write+0x14d/0x210 [ 419.228083] ? SyS_read+0x210/0x210 [ 419.231699] SyS_sendmmsg+0x2f/0x50 [ 419.235315] ? __sys_sendmmsg+0x330/0x330 [ 419.239463] do_syscall_64+0x1d5/0x640 [ 419.243361] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 419.248576] RIP: 0033:0x45d5b9 [ 419.251756] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 419.259456] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 419.266802] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 419.274053] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 [ 419.281301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 23:15:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00001f5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000100)="0f01c47b26430f06b9800000c06c2235001000000f300f01f8c44159627508c481d961cf66b81d008ec80f20e035000200000f22e00f070f323500200000430f01c266440f38800e", 0x48}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:15:38 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0xa801, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000500)={0x3, 0x1, 0x9, 0x2, 0x80, &(0x7f0000000100)}) fcntl$setlease(r1, 0x400, 0x1) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x8a901, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f00000000c0)={0x38, 0x3, 0x9048, 0x2, 0x3, 0x24d, 0x4}) ioctl$TCSETSF(r0, 0x5437, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xdd0d, 0x260a02) dup2(r1, r0) 23:15:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x24}}, 0x0) read$eventfd(r1, &(0x7f0000000040), 0x8) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000240)) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000003200b1aff0dd000000000000000000000c000200000000000000000014000100100001000900010067616374"], 0x34}}, 0x0) 23:15:38 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xff}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x2, 0x418) semget$private(0x0, 0x1, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x8000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x8]}, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) close(r0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r1, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="0868fda2", @ANYRES16=r2, @ANYBLOB="0000000020000d000000965f4b708dd143630e773bb010a49aa351627ac6673d37696c5a8ea931fb6e65f26117a6749a97d15699bc9bd161c4f2040000009d43e4defe07f8e77bf65cce2b585733df6e1cd5eef465b8932c8210e5b78c32a4bbe52eb2bb77d6c0"], 0x14}}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000006c21a32e4e851214d8258142b4d7e229ae33774ceb112b7148aae55dd45ed90797b58bce26738f52999087735b2112328f4bb6826cd8cc47e80effbbfe0d77a71e2bfa6eef1179d23a56f3c195a99580dc0a75224dabb3d2234450e7c6ee5959d04ba78ff593c9b1ba6e99dc11f5bfc6d3bc3829873307e47419f935e05c99cd8a924477aeaf26b519ae945589779a97782c4a0c74bfbc150776a261864b70133f1d96b3c4c0b8254e26a90efbd170eb0b048940d2520d0a4f76c48227158a05ea6e31e34e825391000000000000", @ANYRES16=r2, @ANYBLOB="000425bd7000fcdbdf251100000008000600ffff0000080005000000010008000400ff0f0000"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r4, 0x8008f512, &(0x7f00000000c0)) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 23:15:38 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001800128008000100736974000c00028008000100", @ANYRES32=r3], 0x38}}, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000002c0)="be65e572294b6bf38121d2ffbdda641c26901ee13add2e6ff4d898b7c615055bd92e40413781c333f08172ff056cf6e9c109cf7c90aab8a67571555a217d7a492ae682a5b7ab7d3e38cccee6094821d92199292113944497cd38089e1f8be78d538b8a4276a64962814ef023082c4733e7fe10b13d") ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, 0x0) [ 419.288549] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c [ 419.353345] device ipvlan14 entered promiscuous mode 23:15:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="66cf"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6b, 0x0, 0x0) r3 = creat(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x201, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r4, 0x40044103, &(0x7f0000000100)) r5 = syz_open_dev$vbi(&(0x7f0000000640)='/dev/vbi#\x00', 0x0, 0x2) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="00002cbd7000ffdbdf25100000000800040008001b004000038006000400ff010000140002006970366572"], 0x5c}}, 0xc800) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446eaff8b114fae21fc6354be035e2e508ad8df2ad2eeaff20866606c4b58fb11d24094afb7deb31adc126dc1b37b0b8738dc04f3a88d47e1f08e7ad82ada7f0f3cde0f422aecd9f25c01f60960b1ad9b241e02c3f4"], 0x194) close(0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x3) readv(r5, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200), 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x1c, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x10) 23:15:38 executing program 0: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x20000) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x1}, 0x8) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f00000000c0), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374"], 0x34}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r5, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYRES32=r4, @ANYBLOB="08001f0007"], 0x40}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x58, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8040084}, 0x40010) 23:15:38 executing program 5 (fault-call:2 fault-nth:3): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:15:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00001f5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000100)="0f01c47b26430f06b9800000c06c2235001000000f300f01f8c44159627508c481d961cf66b81d008ec80f20e035000200000f22e00f070f323500200000430f01c266440f38800e", 0x48}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 419.561706] FAULT_INJECTION: forcing a failure. [ 419.561706] name failslab, interval 1, probability 0, space 0, times 0 [ 419.629661] CPU: 0 PID: 27894 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 419.637584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.646942] Call Trace: [ 419.649540] dump_stack+0x1b2/0x283 [ 419.653182] should_fail.cold+0x10a/0x154 [ 419.657344] should_failslab+0xd6/0x130 [ 419.661324] kmem_cache_alloc_node+0x263/0x410 [ 419.665915] __alloc_skb+0x5c/0x510 [ 419.669551] netlink_sendmsg+0x901/0xb80 [ 419.673622] ? nlmsg_notify+0x170/0x170 [ 419.677598] ? kernel_recvmsg+0x210/0x210 [ 419.681751] ? security_socket_sendmsg+0x83/0xb0 [ 419.686505] ? nlmsg_notify+0x170/0x170 [ 419.690480] sock_sendmsg+0xb5/0x100 [ 419.694197] ___sys_sendmsg+0x326/0x800 [ 419.698176] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 419.702931] ? check_preemption_disabled+0x35/0x240 [ 419.707950] ? perf_trace_lock_acquire+0x510/0x510 [ 419.712876] ? perf_trace_lock+0xf7/0x490 [ 419.717036] ? check_preemption_disabled+0x35/0x240 [ 419.722052] ? perf_trace_lock+0xf7/0x490 [ 419.726200] ? __fget+0x1fe/0x360 [ 419.729656] ? perf_trace_lock_acquire+0x510/0x510 [ 419.734580] ? lock_acquire+0x170/0x3f0 [ 419.738550] ? lock_downgrade+0x740/0x740 [ 419.742791] ? __might_fault+0x104/0x1b0 [ 419.746862] ? lock_acquire+0x170/0x3f0 [ 419.750845] __sys_sendmmsg+0x129/0x330 [ 419.754821] ? SyS_sendmsg+0x40/0x40 [ 419.758547] ? __mutex_unlock_slowpath+0x75/0x770 [ 419.763393] ? wait_for_completion_io+0x10/0x10 [ 419.768063] ? vfs_write+0x319/0x4d0 [ 419.771778] ? fput+0xb/0x140 [ 419.774880] ? SyS_write+0x14d/0x210 [ 419.778588] ? SyS_read+0x210/0x210 [ 419.782215] SyS_sendmmsg+0x2f/0x50 [ 419.785842] ? __sys_sendmmsg+0x330/0x330 [ 419.789991] do_syscall_64+0x1d5/0x640 [ 419.793891] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 419.799073] RIP: 0033:0x45d5b9 [ 419.802259] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 419.809966] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 419.817241] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 23:15:38 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r1) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, 0x5, 0x6, 0x301, 0x0, 0x0, {0xe, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20008001) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000000000000000000000000064000000bf088aadc9d9f004123bdced209e4710f250a953a112342a24a61cad2862eb9c3e294e4a41aaad6f2d3f2a571b8231992442a9334d20c0f675ef2eeabd3cb9ae93c271be3d00d3176cdd9526933b65a6b200d424afc671ef30f5bb1922a192985c9ddb3c84a1cd764394e4897194521731744f42967aa3000000000daa9342"], &(0x7f0000000340)=0x88) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000380)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, &(0x7f0000000300)=0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x400400, 0x0) r4 = syz_mount_image$minix(&(0x7f0000000240)='minix\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x5, &(0x7f00000017c0)=[{&(0x7f00000005c0)="6ed8db7dc6f8c0a95489af7b204eacadc8ec9f92e6da6daa1d4a9b76e4ef6d3064581c3a4826a8d34d7c8ffe9b", 0x2d, 0x2}, {&(0x7f0000000600)="1223588c5c61f7ff57aaf47a350e98636f17957b147a9efe05f4745ad3058af97c9fbdf34b056aacf1585eaa4f7af4e141cb54fb0566d2e774654a2360313605285ab721d4714a13a6df26e84a1513eabb9c93be07974151fcfc8f61f5119fd7f497b8b3e8e5ec056496fdf225829bd33aafc889623cb429c7e8294ed176b022e510d196459517c9fee83c232f53a2942a5c27bd64784695e2f864301cd554ac4fdf17731df1a94a4ab21405b8900470278c68558356e095574c3a9612a7218d19f76e963f0030d0af025bc087ca62e3f7f31658b91b49c002f60b5f182c4a0ee61913241fe91e665a40f0a3ab3b9c", 0xef, 0x1}, {&(0x7f0000000700)="327eb811ba745e8d1c9526cab9686a446491ceb67dd218686368361a152193f262ecd293e796c735ecc2af9179ddfc7d298d6aa9dffdf202467e17cf2f71dc453996c3c8cb6a49d10944fe16534016f69e2fc592412edd", 0x57, 0xff}, {&(0x7f0000000780)="5890207baeeaa49aae5d89ed2bb0acac1810b64f43e75ff90d4b8988527d36ac01bd8d7632527394f1c917ff11335404e68d0f614ef73377cbb1eb", 0x3b, 0xd2}, {&(0x7f00000007c0)="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", 0x1000}], 0x4, 0x0) openat(r4, &(0x7f0000001840)='./file0\x00', 0x82000, 0xa2) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000440)) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, &(0x7f00000001c0)=0x90) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 23:15:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c00020000000000000000001400010010000100090001006772e9eb"], 0x34}}, 0x0) r1 = dup(r0) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) [ 419.824539] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 [ 419.831807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 419.839077] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c 23:15:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00001f5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000100)="0f01c47b26430f06b9800000c06c2235001000000f300f01f8c44159627508c481d961cf66b81d008ec80f20e035000200000f22e00f070f323500200000430f01c266440f38800e", 0x48}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:15:38 executing program 5 (fault-call:2 fault-nth:4): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) [ 420.017226] FAULT_INJECTION: forcing a failure. [ 420.017226] name failslab, interval 1, probability 0, space 0, times 0 [ 420.064430] CPU: 0 PID: 27924 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 420.072354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.081709] Call Trace: [ 420.084302] dump_stack+0x1b2/0x283 [ 420.087938] should_fail.cold+0x10a/0x154 [ 420.092089] should_failslab+0xd6/0x130 [ 420.096065] kmem_cache_alloc_node_trace+0x25a/0x400 [ 420.101171] __kmalloc_node_track_caller+0x38/0x70 [ 420.106104] __alloc_skb+0x96/0x510 [ 420.109734] netlink_sendmsg+0x901/0xb80 [ 420.113798] ? nlmsg_notify+0x170/0x170 [ 420.117772] ? kernel_recvmsg+0x210/0x210 [ 420.121922] ? security_socket_sendmsg+0x83/0xb0 [ 420.126676] ? nlmsg_notify+0x170/0x170 [ 420.130650] sock_sendmsg+0xb5/0x100 [ 420.134364] ___sys_sendmsg+0x326/0x800 [ 420.138346] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 420.143105] ? check_preemption_disabled+0x35/0x240 [ 420.148119] ? perf_trace_lock_acquire+0x510/0x510 [ 420.153032] ? perf_trace_lock+0xf7/0x490 [ 420.157163] ? check_preemption_disabled+0x35/0x240 [ 420.162161] ? perf_trace_lock+0xf7/0x490 [ 420.166288] ? __fget+0x1fe/0x360 [ 420.169721] ? perf_trace_lock_acquire+0x510/0x510 [ 420.174628] ? lock_acquire+0x170/0x3f0 [ 420.178587] ? lock_downgrade+0x740/0x740 [ 420.182724] ? __might_fault+0x104/0x1b0 [ 420.186765] ? lock_acquire+0x170/0x3f0 [ 420.190726] __sys_sendmmsg+0x129/0x330 [ 420.194682] ? SyS_sendmsg+0x40/0x40 [ 420.198396] ? __mutex_unlock_slowpath+0x75/0x770 [ 420.203218] ? wait_for_completion_io+0x10/0x10 [ 420.207885] ? vfs_write+0x319/0x4d0 [ 420.211588] ? fput+0xb/0x140 [ 420.214682] ? SyS_write+0x14d/0x210 [ 420.218392] ? SyS_read+0x210/0x210 [ 420.222002] SyS_sendmmsg+0x2f/0x50 [ 420.225610] ? __sys_sendmmsg+0x330/0x330 [ 420.229738] do_syscall_64+0x1d5/0x640 [ 420.233610] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 420.238778] RIP: 0033:0x45d5b9 [ 420.241948] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 420.251996] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 420.259256] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 420.266507] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 [ 420.273756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 420.281004] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c 23:15:39 executing program 4: clone(0x1f001100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000021c0)={0x0, 0x0, 0x4}) 23:15:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x800) clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6c6f610500000062797074667384d41fb5bcfa3599ef53c8f2159d91607d7dca82671e42eb4aed4a67561a7a95a97e7ef962c7ae4783d3f5cf2c35d0455d0a4a23928100000000000000775ceb04cf7eadb8"], 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) iopl(0x81) [ 420.445486] encrypted_key: insufficient parameters specified [ 420.468171] encrypted_key: insufficient parameters specified 23:15:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374"], 0x34}}, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xbdef) 23:15:39 executing program 5 (fault-call:2 fault-nth:5): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:15:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20000006ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) vmsplice(r3, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0xfdea}], 0x1, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, 0x0, 0x2000000000002) 23:15:39 executing program 4: r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)={0x2, 'bond0\x00', {0x5}, 0x2}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x180, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xfffffff7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x4000000) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x400000, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) recvfrom$phonet(r3, &(0x7f0000000380)=""/122, 0x7a, 0x40012041, &(0x7f0000000400)={0x23, 0x80, 0x1, 0x6}, 0x10) ioctl$RTC_UIE_OFF(r1, 0x7004) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000440)={0x800000, 0x7, 0x10001, 0x3, 0x503}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0xa, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x408c4}, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000580)={0xbc6, 0x1, 0x4, 0x10, 0x8, {0x77359400}, {0x3, 0xc, 0x40, 0x3f, 0x5, 0xd, "c7b259d8"}, 0x1, 0x3, @offset=0x5, 0x40, 0x0, 0xffffffffffffffff}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000600)=@v1={0x0, @aes256, 0x8, "20f9f282c71dfac2"}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x144, 0x3e, 0x100, 0x70bd28, 0x25dfdbfc, {0xd}, [@generic="35de9ccd77ea4f444bc7bf4091471ff6dee973409b4614494e9e3ed937011278da71a410e6181e113658af005b52d23cd3c92c22de4664dde9c95ef5d3714cab182c4ef884aa48b93cc2aa82ee85", @nested={0xdd, 0x89, 0x0, 0x1, [@typed={0xc, 0x74, 0x0, 0x0, @u64=0x401}, @generic="16fa6f87e05e75c2cb49b969ced4229b65cf24f491dac2e764dd", @typed={0x13, 0x65, 0x0, 0x0, @str='/dev/dlm_plock\x00'}, @typed={0x8, 0x8f, 0x0, 0x0, @pid}, @generic="bf8af04761758721b6fb9983961ff5d17ca89908d83eef682875706f23b70d651e29fb084b82fc38beeeefad337440b9ff816263aba2b0ab49dae12471689ea4ff639bfee6a726c00ac6652a", @generic="0b17e07d95296f37dcc00add184e809acbb28c1afe1da4cfa334270cec6f6dfe41b7d0a14789882dde92c0553e2aa7fe4bca2a8a0f35a1cb93214e0de6db68d1be6669c0cdfed5", @typed={0x4, 0x5}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4004001}, 0x24000424) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000880), &(0x7f00000008c0)=0x8) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000900)=0x1) socket$inet6(0xa, 0x1, 0x2e1a) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r5, 0xf504, 0x0) 23:15:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='rdma.current\x00', 0x7a05, 0x1700) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000001280)=ANY=[], 0x194) close(r2) connect(r2, &(0x7f0000001200)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x6, @multicast2}}, 0x80) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000200)={{0x0, 0x7d8, 0x8, 0x5, 0x6, 0x4, 0x80000001, 0x7ff, 0x8001, 0x6, 0x8, 0xfffffffffffffff9, 0xff, 0x0, 0x6eaf}}) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea040000000000000000007ea290ab0e7446"], 0x194) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r4) close(r4) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x5, @any, 0x8, 0x2}, 0xe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) fdatasync(r5) 23:15:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x20000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000080)=0x6) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x311ab45fc41b8381, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40090) [ 420.571170] FAULT_INJECTION: forcing a failure. [ 420.571170] name failslab, interval 1, probability 0, space 0, times 0 [ 420.639471] CPU: 0 PID: 27964 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 420.647390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.656748] Call Trace: [ 420.659343] dump_stack+0x1b2/0x283 [ 420.662980] should_fail.cold+0x10a/0x154 [ 420.667128] ? perf_trace_lock_acquire+0x510/0x510 [ 420.672063] should_failslab+0xd6/0x130 [ 420.676043] kmem_cache_alloc+0x40/0x3c0 [ 420.680109] skb_clone+0x126/0x9a0 [ 420.683652] netlink_deliver_tap+0x655/0x7d0 [ 420.688095] netlink_unicast+0x485/0x610 [ 420.692159] ? netlink_sendskb+0xd0/0xd0 [ 420.696226] netlink_sendmsg+0x62e/0xb80 [ 420.700290] ? nlmsg_notify+0x170/0x170 [ 420.704262] ? kernel_recvmsg+0x210/0x210 [ 420.708499] ? security_socket_sendmsg+0x83/0xb0 [ 420.713251] ? nlmsg_notify+0x170/0x170 [ 420.717226] sock_sendmsg+0xb5/0x100 [ 420.720968] ___sys_sendmsg+0x326/0x800 [ 420.724942] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 420.729696] ? check_preemption_disabled+0x35/0x240 [ 420.734709] ? perf_trace_lock_acquire+0x510/0x510 [ 420.739619] ? perf_trace_lock+0xf7/0x490 [ 420.743786] ? check_preemption_disabled+0x35/0x240 [ 420.748835] ? perf_trace_lock+0xf7/0x490 [ 420.752961] ? __fget+0x1fe/0x360 [ 420.756404] ? perf_trace_lock_acquire+0x510/0x510 [ 420.761459] ? lock_acquire+0x170/0x3f0 [ 420.765427] ? lock_downgrade+0x740/0x740 [ 420.769564] ? __might_fault+0x104/0x1b0 [ 420.773606] ? lock_acquire+0x170/0x3f0 [ 420.777564] __sys_sendmmsg+0x129/0x330 [ 420.781520] ? SyS_sendmsg+0x40/0x40 [ 420.785237] ? __mutex_unlock_slowpath+0x75/0x770 [ 420.790066] ? wait_for_completion_io+0x10/0x10 [ 420.794713] ? vfs_write+0x319/0x4d0 [ 420.798413] ? fput+0xb/0x140 [ 420.801497] ? SyS_write+0x14d/0x210 [ 420.805197] ? SyS_read+0x210/0x210 [ 420.808810] SyS_sendmmsg+0x2f/0x50 [ 420.812424] ? __sys_sendmmsg+0x330/0x330 [ 420.816570] do_syscall_64+0x1d5/0x640 [ 420.820447] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 420.825622] RIP: 0033:0x45d5b9 [ 420.828802] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 420.836493] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 420.843752] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 420.851188] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 [ 420.858453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 420.865709] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c [ 420.884970] device ipvlan14 entered promiscuous mode 23:15:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x881, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea04000092290a7ea290ab0e544600000000"], 0x194) close(r0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'vlan1\x00', {0x1}, 0x81}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) io_setup(0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) msgget(0x3, 0x40) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000200)=""/4096) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000100)={{0x1b, 0x5b, 0x7, 0x3b, 0x0, 0x32, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1068, 0x40}, [{0x0, 0x0, 0x2, 0x4}]}, 0x78) 23:15:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x100, 0x0) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000080)=0xffffffffffffdf6d) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r2) ioctl$FIGETBSZ(r2, 0x2, &(0x7f00000000c0)) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000032006611554206c425020000000000000000000000000c000200000000000000000014000100100001000900"], 0x34}}, 0x0) 23:15:39 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) open_by_handle_at(r1, &(0x7f00000000c0)={0x12, 0x3c, "f2a6f927100f7b413d49"}, 0x210001) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffd03, &(0x7f0000000480)={0x0, 0x1b}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@private2, r3}, 0x14) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000540)={0x0, 0x0, "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", "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"}) 23:15:39 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r1) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2000000004000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x80003, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001180)=@mangle={'mangle\x00', 0x1f, 0x6, 0x568, 0xd0, 0x1a0, 0x3c0, 0x3c0, 0x0, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@private1, @remote, [], [], 'veth1_vlan\x00', 'veth1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@private0, @loopback, [], [], 'veth0_macvtap\x00', 'veth0_vlan\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) 23:15:39 executing program 2: ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, &(0x7f0000000040)) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 23:15:39 executing program 5 (fault-call:2 fault-nth:6): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:15:39 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000240)={@private0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x5}, 0x20) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setreuid(0xffffffffffffffff, 0x0) fcntl$setpipe(r3, 0x407, 0x2f6) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f0000000180)) r4 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, r4) 23:15:39 executing program 0: setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10001, @mcast1, 0x4}], 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374"], 0x34}}, 0x0) [ 421.079192] FAULT_INJECTION: forcing a failure. [ 421.079192] name failslab, interval 1, probability 0, space 0, times 0 23:15:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000acc000)={@multicast2, @multicast1, 0x2}, 0xc) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1=0xe0000003, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xb) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000440)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e23, 0x8, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6}, @in6={0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, [], 0x1}, 0x4ae}, @in6={0xa, 0x4e22, 0x7, @loopback, 0xc543}, @in6={0xa, 0x4e21, 0x6116, @private0, 0x401}, @in6={0xa, 0x4e21, 0x5, @private0={0xfc, 0x0, [], 0x1}, 0x80000001}], 0xac) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x4) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x2008480, 0x0) [ 421.139329] CPU: 0 PID: 28008 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 421.147251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.156606] Call Trace: [ 421.159200] dump_stack+0x1b2/0x283 [ 421.162838] should_fail.cold+0x10a/0x154 [ 421.166377] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/INPUT/POSTROUTING, but only valid from PREROUTING [ 421.167007] should_failslab+0xd6/0x130 [ 421.182504] kmem_cache_alloc_node_trace+0x25a/0x400 [ 421.187616] __kmalloc_node+0x38/0x70 [ 421.191426] kvmalloc_node+0x46/0xd0 [ 421.195160] alloc_netdev_mqs+0x76/0xb70 [ 421.199282] ? ipvlan_link_delete+0x430/0x430 [ 421.204389] rtnl_create_link+0x1ab/0x890 [ 421.208545] rtnl_newlink+0xe86/0x1830 [ 421.212451] ? check_preemption_disabled+0x35/0x240 [ 421.217470] ? rtnl_dellink+0x6a0/0x6a0 [ 421.221444] ? perf_trace_lock+0xf7/0x490 [ 421.225591] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 421.230664] ? rtnl_dellink+0x6a0/0x6a0 [ 421.234638] rtnetlink_rcv_msg+0x3be/0xb10 [ 421.238875] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 421.243371] ? perf_trace_lock+0xf7/0x490 [ 421.247618] ? netdev_pick_tx+0x2e0/0x2e0 [ 421.251772] netlink_rcv_skb+0x125/0x390 [ 421.255836] ? memcpy+0x35/0x50 [ 421.259116] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 421.263614] ? netlink_ack+0x9a0/0x9a0 [ 421.267511] netlink_unicast+0x437/0x610 [ 421.271573] ? netlink_sendskb+0xd0/0xd0 [ 421.275671] netlink_sendmsg+0x62e/0xb80 [ 421.279735] ? nlmsg_notify+0x170/0x170 [ 421.283709] ? kernel_recvmsg+0x210/0x210 [ 421.287857] ? security_socket_sendmsg+0x83/0xb0 [ 421.292609] ? nlmsg_notify+0x170/0x170 [ 421.296581] sock_sendmsg+0xb5/0x100 [ 421.300287] ___sys_sendmsg+0x326/0x800 [ 421.304259] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 421.309012] ? check_preemption_disabled+0x35/0x240 [ 421.314031] ? perf_trace_lock_acquire+0x510/0x510 [ 421.318956] ? perf_trace_lock+0xf7/0x490 [ 421.323102] ? check_preemption_disabled+0x35/0x240 [ 421.328116] ? perf_trace_lock+0xf7/0x490 [ 421.332256] ? __fget+0x1fe/0x360 [ 421.335705] ? perf_trace_lock_acquire+0x510/0x510 [ 421.340625] ? lock_acquire+0x170/0x3f0 [ 421.344593] ? lock_downgrade+0x740/0x740 [ 421.348738] ? __might_fault+0x104/0x1b0 [ 421.352798] ? lock_acquire+0x170/0x3f0 [ 421.356786] __sys_sendmmsg+0x129/0x330 [ 421.360754] ? SyS_sendmsg+0x40/0x40 [ 421.364484] ? __mutex_unlock_slowpath+0x75/0x770 [ 421.369331] ? wait_for_completion_io+0x10/0x10 [ 421.373999] ? vfs_write+0x319/0x4d0 [ 421.377831] ? fput+0xb/0x140 [ 421.380933] ? SyS_write+0x14d/0x210 [ 421.384644] ? SyS_read+0x210/0x210 [ 421.388270] SyS_sendmmsg+0x2f/0x50 [ 421.391886] ? __sys_sendmmsg+0x330/0x330 [ 421.396026] do_syscall_64+0x1d5/0x640 [ 421.399927] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 421.405105] RIP: 0033:0x45d5b9 [ 421.408285] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 421.416202] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 421.423554] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 421.430822] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 23:15:40 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2cd48a1e6b19998d62", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) 23:15:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@gettfilter={0x2c, 0x2e, 0x10, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0xf, 0xffff}, {0x1, 0x9}}, [{0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008080}, 0x4080) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3cfffffffc00010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800600080000000000"], 0x3c}}, 0x0) 23:15:40 executing program 0: socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)=@sco={0x1f, @none}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000680)=""/165, 0xa5}, {&(0x7f0000000740)=""/140, 0x8c}, {&(0x7f0000001a40)=""/232, 0xe8}, {&(0x7f0000001b40)=""/4096, 0x1000}], 0x4, &(0x7f0000000580)=""/102, 0x66}, 0x1}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x200) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="90a655c8c933367fa4d9492b32c236598cd20bd6bbd22110f4f3aa0cbecff2f927606d80c937fd6ce3431c06b454166bd8f7e9e18fcd976d4041bc0f9c6d2ed58f2b486e6156712c68ab08f149ee6b287289fef106c9a1e1b15aec95151c236a0aa50d1eb8b25d7df54abcf05a9389c4312722bcdf373823bdabef3e6e40ae", 0x7f}, {0x0}, {&(0x7f0000000140)}, {0x0}, {&(0x7f0000000600)="b015321d3a3a32c161408d79c0b7d2a631e63536047e2e9c0630446b121a57260aa45136fb23412de0a62d14dd08e03a91369c36baca98c97d173de77bec146a799be7f08b82f76e21b599702e54ff99712d98", 0x53}, {0x0}, {0x0}], 0x7, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYRES32=r4], 0x20}, 0x6008005) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x4) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) [ 421.438075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 421.445327] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c 23:15:40 executing program 5 (fault-call:2 fault-nth:7): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:15:40 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x86a01780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000001a005c0000005c00000002000000000000000400000d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000d00000009000000000000000b000000000000000000000002000000000000"], 0x0, 0x76}, 0x20) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:15:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x197d, 0x1, 0xffffff68, 0x4}, &(0x7f00000000c0)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000000)={0x0, 0x6bea, 0x50, 0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x705, 0x0, 0xfffffffe, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x1000}]}}}]}, 0x44}}, 0x0) 23:15:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f0000000180)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196bcf31282233fe7fd20000000000000000", 0x33) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_PRIORITY(r3, 0x40045644, 0x2) getsockopt$inet6_buf(r1, 0x29, 0x1c, &(0x7f0000000080)=""/41, &(0x7f0000000140)=0x29) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000100), 0x4) [ 421.673883] FAULT_INJECTION: forcing a failure. [ 421.673883] name failslab, interval 1, probability 0, space 0, times 0 [ 421.701854] CPU: 0 PID: 28059 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 421.709777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.719133] Call Trace: [ 421.721731] dump_stack+0x1b2/0x283 [ 421.725369] should_fail.cold+0x10a/0x154 [ 421.729523] should_failslab+0xd6/0x130 [ 421.733502] kmem_cache_alloc_trace+0x47/0x3d0 [ 421.738095] __hw_addr_create_ex+0x5b/0x300 [ 421.742427] __hw_addr_add_ex+0x1c1/0x290 [ 421.746587] dev_addr_init+0xfb/0x1b0 [ 421.750424] ? dev_mc_flush+0x30/0x30 [ 421.754240] alloc_netdev_mqs+0x11d/0xb70 [ 421.758392] ? ipvlan_link_delete+0x430/0x430 [ 421.762930] rtnl_create_link+0x1ab/0x890 [ 421.767090] rtnl_newlink+0xe86/0x1830 [ 421.770983] ? __lock_acquire+0x5fc/0x3f20 [ 421.775237] ? kmem_cache_free+0x7c/0x2b0 [ 421.779389] ? rtnl_dellink+0x6a0/0x6a0 [ 421.783367] ? trace_hardirqs_on+0x10/0x10 [ 421.787605] ? lock_acquire+0x170/0x3f0 [ 421.791633] ? lock_acquire+0x170/0x3f0 [ 421.795611] ? lock_downgrade+0x740/0x740 [ 421.799766] ? rtnl_dellink+0x6a0/0x6a0 [ 421.803743] rtnetlink_rcv_msg+0x3be/0xb10 [ 421.807985] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 421.812479] ? perf_trace_lock+0xf7/0x490 [ 421.816623] ? netdev_pick_tx+0x2e0/0x2e0 [ 421.820767] netlink_rcv_skb+0x125/0x390 [ 421.824816] ? memcpy+0x35/0x50 [ 421.828087] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 421.832601] ? netlink_ack+0x9a0/0x9a0 [ 421.836478] netlink_unicast+0x437/0x610 [ 421.840520] ? netlink_sendskb+0xd0/0xd0 [ 421.844568] netlink_sendmsg+0x62e/0xb80 [ 421.848622] ? nlmsg_notify+0x170/0x170 [ 421.852581] ? kernel_recvmsg+0x210/0x210 [ 421.856711] ? security_socket_sendmsg+0x83/0xb0 [ 421.861509] ? nlmsg_notify+0x170/0x170 [ 421.865473] sock_sendmsg+0xb5/0x100 [ 421.869186] ___sys_sendmsg+0x326/0x800 [ 421.873245] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 421.877984] ? check_preemption_disabled+0x35/0x240 [ 421.882981] ? perf_trace_lock_acquire+0x510/0x510 [ 421.887897] ? perf_trace_lock+0xf7/0x490 [ 421.892037] ? check_preemption_disabled+0x35/0x240 [ 421.897036] ? perf_trace_lock+0xf7/0x490 [ 421.901179] ? __fget+0x1fe/0x360 [ 421.904627] ? perf_trace_lock_acquire+0x510/0x510 [ 421.909540] ? lock_acquire+0x170/0x3f0 [ 421.913502] ? lock_downgrade+0x740/0x740 [ 421.917633] ? __might_fault+0x104/0x1b0 [ 421.921684] ? lock_acquire+0x170/0x3f0 [ 421.925662] __sys_sendmmsg+0x129/0x330 [ 421.929630] ? SyS_sendmsg+0x40/0x40 [ 421.933340] ? __mutex_unlock_slowpath+0x75/0x770 [ 421.938260] ? wait_for_completion_io+0x10/0x10 [ 421.942919] ? vfs_write+0x319/0x4d0 [ 421.946628] ? fput+0xb/0x140 [ 421.949725] ? SyS_write+0x14d/0x210 [ 421.953431] ? SyS_read+0x210/0x210 [ 421.957040] SyS_sendmmsg+0x2f/0x50 [ 421.960654] ? __sys_sendmmsg+0x330/0x330 [ 421.964804] do_syscall_64+0x1d5/0x640 [ 421.968688] entry_SYSCALL_64_after_hwframe+0x46/0xbb 23:15:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x363) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100172,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 421.973865] RIP: 0033:0x45d5b9 [ 421.977032] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 421.984718] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 421.991989] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 421.999243] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 [ 422.006520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 422.013779] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c 23:15:40 executing program 5 (fault-call:2 fault-nth:8): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:15:40 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x58, 0x140b, 0x8, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040001}, 0x240440f1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/4096, 0xfd40}], 0x1}, 0x0) 23:15:40 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, "2f83c7711f68f81f"}) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) [ 422.199025] FAULT_INJECTION: forcing a failure. [ 422.199025] name failslab, interval 1, probability 0, space 0, times 0 [ 422.210464] ip_tables: iptables: counters copy to user failed while replacing table [ 422.245128] CPU: 0 PID: 28095 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 422.253053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.263145] Call Trace: [ 422.265729] dump_stack+0x1b2/0x283 [ 422.269352] should_fail.cold+0x10a/0x154 [ 422.273502] should_failslab+0xd6/0x130 [ 422.277490] kmem_cache_alloc_node_trace+0x25a/0x400 [ 422.282592] __kmalloc_node+0x38/0x70 [ 422.286387] kvmalloc_node+0x46/0xd0 [ 422.290102] alloc_netdev_mqs+0x5e5/0xb70 [ 422.294238] rtnl_create_link+0x1ab/0x890 [ 422.298371] rtnl_newlink+0xe86/0x1830 [ 422.302243] ? __lock_acquire+0x5fc/0x3f20 [ 422.306482] ? rtnl_dellink+0x6a0/0x6a0 [ 422.310463] ? trace_hardirqs_on+0x10/0x10 [ 422.314694] ? lock_acquire+0x170/0x3f0 [ 422.318690] ? lock_acquire+0x170/0x3f0 [ 422.322660] ? lock_downgrade+0x740/0x740 [ 422.326799] ? rtnl_dellink+0x6a0/0x6a0 [ 422.330769] rtnetlink_rcv_msg+0x3be/0xb10 [ 422.335016] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 422.339510] ? perf_trace_lock+0xf7/0x490 [ 422.343652] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 422.348753] netlink_rcv_skb+0x125/0x390 [ 422.352793] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 422.357285] ? netlink_ack+0x9a0/0x9a0 [ 422.361168] netlink_unicast+0x437/0x610 [ 422.365223] ? netlink_sendskb+0xd0/0xd0 [ 422.369287] netlink_sendmsg+0x62e/0xb80 [ 422.373339] ? nlmsg_notify+0x170/0x170 [ 422.377310] ? kernel_recvmsg+0x210/0x210 [ 422.381467] ? security_socket_sendmsg+0x83/0xb0 [ 422.386215] ? nlmsg_notify+0x170/0x170 [ 422.390182] sock_sendmsg+0xb5/0x100 [ 422.393884] ___sys_sendmsg+0x326/0x800 [ 422.397848] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 422.402588] ? __schedule+0x893/0x1de0 [ 422.406468] ? check_preemption_disabled+0x35/0x240 [ 422.411538] ? perf_trace_lock+0xf7/0x490 [ 422.415697] ? perf_trace_lock_acquire+0x510/0x510 [ 422.420619] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 422.425380] ? __might_fault+0x104/0x1b0 [ 422.429494] ? lock_acquire+0x170/0x3f0 [ 422.433462] __sys_sendmmsg+0x129/0x330 [ 422.437427] ? SyS_sendmsg+0x40/0x40 [ 422.441152] ? __mutex_unlock_slowpath+0x75/0x770 [ 422.445990] ? wait_for_completion_io+0x10/0x10 [ 422.450648] ? fput+0xb/0x140 [ 422.453736] ? SyS_write+0x14d/0x210 [ 422.457435] ? SyS_read+0x210/0x210 [ 422.461051] SyS_sendmmsg+0x2f/0x50 [ 422.464655] ? __sys_sendmmsg+0x330/0x330 [ 422.468903] do_syscall_64+0x1d5/0x640 [ 422.472781] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 422.477955] RIP: 0033:0x45d5b9 [ 422.481128] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 422.488823] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 422.496089] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 422.503353] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 [ 422.510606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 422.517864] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c 23:15:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374b816e20bb7ecf8ff991febb02e6266718e7032246671753222c7495cdd1059dd138c3135901524ecd569143d7ff02ba15d7454c9aa9cc97f0a8d7c8f623922b2ca0095330e521afba64f39b67ffb3474db9703cbca9a42068848e8aef21f148f798de018778cbb2b7c4d15da363fde85c67a269649de1693ffad112ab7546de1276ecfc76d565efff56818fb1c27fd78cc592ec83d4bfc522e7d1ace56c6455a55cfa4fb3aa3c9764785fe3f72e7f0e1c5f21beb14a2a261e466ca5a3a04953f9c8a0fcedb7a8856a7"], 0x34}}, 0x0) 23:15:41 executing program 5 (fault-call:2 fault-nth:9): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:15:41 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, "2f83c7711f68f81f"}) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:15:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r2) bind$rxrpc(r2, &(0x7f0000000080)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x2, @private2}}, 0x24) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x1e) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374"], 0x34}}, 0x0) [ 422.768542] FAULT_INJECTION: forcing a failure. [ 422.768542] name failslab, interval 1, probability 0, space 0, times 0 [ 422.800023] ip_tables: iptables: counters copy to user failed while replacing table [ 422.809938] CPU: 0 PID: 28107 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 422.817846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.827199] Call Trace: [ 422.829799] dump_stack+0x1b2/0x283 [ 422.833439] should_fail.cold+0x10a/0x154 [ 422.837599] should_failslab+0xd6/0x130 [ 422.841578] kmem_cache_alloc_node_trace+0x25a/0x400 [ 422.846691] __kmalloc_node+0x38/0x70 [ 422.850497] kvmalloc_node+0x46/0xd0 [ 422.854213] alloc_netdev_mqs+0x75c/0xb70 [ 422.858392] rtnl_create_link+0x1ab/0x890 [ 422.862544] rtnl_newlink+0xe86/0x1830 [ 422.866425] ? __lock_acquire+0x5fc/0x3f20 [ 422.870669] ? kmem_cache_free+0x7c/0x2b0 [ 422.874815] ? rtnl_dellink+0x6a0/0x6a0 [ 422.878774] ? trace_hardirqs_on+0x10/0x10 [ 422.882986] ? lock_acquire+0x170/0x3f0 [ 422.886992] ? lock_acquire+0x170/0x3f0 [ 422.890971] ? lock_downgrade+0x740/0x740 [ 422.895123] ? rtnl_dellink+0x6a0/0x6a0 [ 422.899100] rtnetlink_rcv_msg+0x3be/0xb10 [ 422.903344] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 422.907854] ? perf_trace_lock+0xf7/0x490 [ 422.912007] ? netdev_pick_tx+0x2e0/0x2e0 [ 422.916162] netlink_rcv_skb+0x125/0x390 [ 422.920226] ? memcpy+0x35/0x50 [ 422.923504] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 422.929059] ? netlink_ack+0x9a0/0x9a0 [ 422.932953] netlink_unicast+0x437/0x610 [ 422.937005] ? netlink_sendskb+0xd0/0xd0 [ 422.941056] netlink_sendmsg+0x62e/0xb80 [ 422.945098] ? nlmsg_notify+0x170/0x170 [ 422.949050] ? kernel_recvmsg+0x210/0x210 [ 422.953176] ? security_socket_sendmsg+0x83/0xb0 [ 422.957920] ? nlmsg_notify+0x170/0x170 [ 422.961880] sock_sendmsg+0xb5/0x100 [ 422.965573] ___sys_sendmsg+0x326/0x800 [ 422.969526] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 422.974276] ? check_preemption_disabled+0x35/0x240 [ 422.979312] ? perf_trace_lock_acquire+0x510/0x510 [ 422.984233] ? perf_trace_lock+0xf7/0x490 [ 422.988359] ? check_preemption_disabled+0x35/0x240 [ 422.993354] ? perf_trace_lock+0xf7/0x490 [ 422.997489] ? __fget+0x1fe/0x360 [ 423.000979] ? perf_trace_lock_acquire+0x510/0x510 [ 423.005903] ? lock_acquire+0x170/0x3f0 [ 423.009857] ? lock_downgrade+0x740/0x740 [ 423.013991] ? __might_fault+0x104/0x1b0 [ 423.018044] ? lock_acquire+0x170/0x3f0 [ 423.022025] __sys_sendmmsg+0x129/0x330 [ 423.025994] ? SyS_sendmsg+0x40/0x40 [ 423.029695] ? __mutex_unlock_slowpath+0x75/0x770 [ 423.034532] ? wait_for_completion_io+0x10/0x10 [ 423.039186] ? vfs_write+0x319/0x4d0 [ 423.042903] ? fput+0xb/0x140 [ 423.045999] ? SyS_write+0x14d/0x210 [ 423.049692] ? SyS_read+0x210/0x210 [ 423.053297] SyS_sendmmsg+0x2f/0x50 [ 423.057023] ? __sys_sendmmsg+0x330/0x330 [ 423.061683] do_syscall_64+0x1d5/0x640 [ 423.065556] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 423.070750] RIP: 0033:0x45d5b9 [ 423.073916] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 423.081618] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 423.088870] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 423.096135] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 [ 423.103391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 423.110640] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c 23:15:41 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7954244cef7baf48e6d3585a09a87507ebf4e43bc0609b199b6ed90e0ebcdac5f7a860c00269c781f6428457253e89ad528d985636a86ec0f60f5a6d1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81070545cab5d5b0da0f0575cc2727e8d974927676468582d8621c3ac94712ed9cf6b40b3cf252a47c05af3a30d57cc3ed67d1867b54d24e2da18568c3b0f24b52616bf84d3b00127473e6ba922aff649609d40b47ec349ccba3ce8d530ffff19a6471bf3abc742d9cbcfb964b13831034694a6aad86cf08a2c7b2235dc99d19aa3e6b77c7a2877261ed72da90864987f30926c9013eec3b86836ae504479f60b0ec9204d2b85627aa5a79f670000000000000000000000008f02712c3d8fc4e2686e21a855e823887196d4f4e9f2013d2aef4a3b5092be4d6852b88317c5adbbdb001bafe5725c8a4047b91da3768c1ca6a4410009f95d4ba21068285afa8d3b4a6893d3626ab5becbcdb887af2c85c2d9ab09b5dd7d3c4406d273650bf7b2ff4602aec5eea200000064881c560c371a08e05137"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x69, 0x20000000, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000034c0)='devlink\x00') socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, r1, 0x0, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x1) 23:15:43 executing program 1: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @empty}}}, &(0x7f00000000c0)=0x84) socket$nl_netfilter(0x10, 0x3, 0xc) 23:15:43 executing program 5 (fault-call:2 fault-nth:10): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:15:43 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, "2f83c7711f68f81f"}) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:15:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0x0, "000000001000000000000110000000001000"}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x2000, 0x0) ioctl$sock_netrom_SIOCDELRT(r5, 0x890c, &(0x7f00000001c0)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0='bpq0\x00', 0x3, 'syz0\x00', @null, 0x5d74, 0x1, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) 23:15:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x34}}, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea240e634bc18e10cae90ab0e7446"], 0x194) close(r1) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000240)={0x7fc, 0x200, 0x9, 0x401}, 0x8) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f0000000000)={0x5, 0x6, 0x1, 0x7ff, 0x1a, 0x698d}) 23:15:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x108081, 0x0) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000100)={0x0, 0x10}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffa, &(0x7f0000000240)='big_key\x00', 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000080)=0x2, 0x4) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x200, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000140)) 23:15:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000954032002502f327000000000000000000000c000200000000000000000014000100100001000900010067616374"], 0x34}}, 0x0) [ 424.712625] FAULT_INJECTION: forcing a failure. [ 424.712625] name failslab, interval 1, probability 0, space 0, times 0 [ 424.726206] ip_tables: iptables: counters copy to user failed while replacing table [ 424.744789] CPU: 1 PID: 28145 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 424.752712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.762073] Call Trace: [ 424.764678] dump_stack+0x1b2/0x283 [ 424.768322] should_fail.cold+0x10a/0x154 [ 424.772489] should_failslab+0xd6/0x130 [ 424.776466] kmem_cache_alloc_node_trace+0x25a/0x400 [ 424.781574] __kmalloc_node+0x38/0x70 [ 424.785375] kvmalloc_node+0x46/0xd0 [ 424.789092] alloc_netdev_mqs+0x75c/0xb70 [ 424.793248] rtnl_create_link+0x1ab/0x890 [ 424.797399] rtnl_newlink+0xe86/0x1830 [ 424.801288] ? __lock_acquire+0x5fc/0x3f20 [ 424.805532] ? kmem_cache_free+0x7c/0x2b0 [ 424.809683] ? rtnl_dellink+0x6a0/0x6a0 [ 424.813678] ? trace_hardirqs_on+0x10/0x10 [ 424.817916] ? lock_acquire+0x170/0x3f0 [ 424.821937] ? lock_acquire+0x170/0x3f0 [ 424.825913] ? lock_downgrade+0x740/0x740 [ 424.830072] ? rtnl_dellink+0x6a0/0x6a0 [ 424.834050] rtnetlink_rcv_msg+0x3be/0xb10 [ 424.838292] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 424.842793] ? perf_trace_lock+0xf7/0x490 [ 424.846946] ? netdev_pick_tx+0x2e0/0x2e0 [ 424.851103] netlink_rcv_skb+0x125/0x390 [ 424.855194] ? memcpy+0x35/0x50 [ 424.858478] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 424.862976] ? netlink_ack+0x9a0/0x9a0 [ 424.866878] netlink_unicast+0x437/0x610 [ 424.870945] ? netlink_sendskb+0xd0/0xd0 [ 424.875016] netlink_sendmsg+0x62e/0xb80 [ 424.879089] ? nlmsg_notify+0x170/0x170 [ 424.883062] ? kernel_recvmsg+0x210/0x210 [ 424.887308] ? security_socket_sendmsg+0x83/0xb0 [ 424.892070] ? nlmsg_notify+0x170/0x170 [ 424.896051] sock_sendmsg+0xb5/0x100 [ 424.899770] ___sys_sendmsg+0x326/0x800 [ 424.903755] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 424.908518] ? check_preemption_disabled+0x35/0x240 23:15:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="320000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006d6163766c616e3000000000000000000a0001000180c20000000000"], 0x40}}, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r1) r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, 0xfffffffffffffffd) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000240)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, &(0x7f0000000400)={r4, &(0x7f00000003c0)=""/35}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000040)={r4, &(0x7f0000000000)=""/35}) [ 424.913542] ? perf_trace_lock_acquire+0x510/0x510 [ 424.918471] ? perf_trace_lock+0xf7/0x490 [ 424.922625] ? check_preemption_disabled+0x35/0x240 [ 424.927646] ? perf_trace_lock+0xf7/0x490 [ 424.930130] selinux_nlmsg_perm: 10 callbacks suppressed [ 424.930139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16533 sclass=netlink_route_socket pid=28156 comm=syz-executor.0 [ 424.931786] ? __fget+0x1fe/0x360 [ 424.931802] ? perf_trace_lock_acquire+0x510/0x510 [ 424.931812] ? lock_acquire+0x170/0x3f0 23:15:43 executing program 0: socket$vsock_dgram(0x28, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374"], 0x34}}, 0x0) [ 424.931823] ? lock_downgrade+0x740/0x740 [ 424.931836] ? __might_fault+0x104/0x1b0 [ 424.970117] ? lock_acquire+0x170/0x3f0 [ 424.974109] __sys_sendmmsg+0x129/0x330 [ 424.978090] ? SyS_sendmsg+0x40/0x40 [ 424.981829] ? __mutex_unlock_slowpath+0x75/0x770 [ 424.986682] ? wait_for_completion_io+0x10/0x10 [ 424.991354] ? vfs_write+0x319/0x4d0 [ 424.995072] ? fput+0xb/0x140 [ 424.998190] ? SyS_write+0x14d/0x210 [ 425.001940] ? SyS_read+0x210/0x210 [ 425.005599] SyS_sendmmsg+0x2f/0x50 [ 425.009225] ? __sys_sendmmsg+0x330/0x330 [ 425.013373] do_syscall_64+0x1d5/0x640 [ 425.017272] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 425.022462] RIP: 0033:0x45d5b9 [ 425.025647] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 425.033360] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 425.040635] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 425.047924] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 [ 425.055200] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a 23:15:43 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="7c000000000119050000000000000000000000003c0001002c00010014000300000000000200000000b700000000080114000400fe800000000000000000f0ffffffffba0c000200050001002f000000240002000c000200050001002f00040014000100080001000000e40c4b159b3a91470001080007"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x2, 0x1, 0x80b, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0x38}}, 0x0) 23:15:43 executing program 5 (fault-call:2 fault-nth:11): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) [ 425.062471] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c [ 425.073569] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.1'. 23:15:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374"], 0x34}}, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r1) accept$phonet_pipe(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10) socket$inet6_udp(0xa, 0x2, 0x0) 23:15:43 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, "2f83c7711f68f81f"}) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:15:43 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0xc) r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x6, 0x20000) r4 = openat$cgroup_ro(r1, &(0x7f0000000240)='pids.events\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r5) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x200, r6, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xc0, 0xc, 0x0, 0x1, [{0x4, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x0, 0xa, 0xe6e5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x76fe1123}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xad58}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x121eadcc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3493}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x337b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6e444365}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x16ae}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe370}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1abd749e}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x46b58ede}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd53501}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x259e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66b04260}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x279f8913}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x676cd526}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b5b2d59}]}, {0xc}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6c981cab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa2bf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31313109}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x44}, @NLBL_CIPSOV4_A_MLSCATLST={0xd0, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a1f6084}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10e429c3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4789fa0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x20b9ea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcc43}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x72c}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24f2a00f}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46d5e158}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fd74bc3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x601d3877}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d1e2268}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x161b27a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7835dcd6}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56c48d30}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x147cd1a7}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x486282db}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeaa3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe390}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48d8f5f4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee41}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34f4d0f0}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c56b5db}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x200}, 0x1, 0x0, 0x0, 0x48050}, 0x200008c0) r7 = signalfd4(r4, &(0x7f00000008c0)={[0x1]}, 0x8, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000900)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@mcast2}}, &(0x7f0000000a00)=0xe8) ioctl$SIOCAX25ADDUID(r7, 0x89e1, &(0x7f0000000a40)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r8}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FD={0x8, 0x1, r4}, @IFLA_XDP_FD={0x8, 0x1, r1}]}]}, 0x4c}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) accept4(r9, &(0x7f00000005c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000640)=0x80, 0x80000) close(r9) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r9, 0x0, 0x4ffe2, 0x0) [ 425.148828] netlink: 18 bytes leftover after parsing attributes in process `syz-executor.1'. 23:15:43 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="7ed42e2fc67e1e4595421a3266696c65"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x110420, &(0x7f00000007c0)=ANY=[@ANYBLOB="696e6b533d3078303030303030303036303030303030302c00ab9e7d1e71b4d82af018000000000000"]) [ 425.203127] FAULT_INJECTION: forcing a failure. [ 425.203127] name failslab, interval 1, probability 0, space 0, times 0 [ 425.244627] ip_tables: iptables: counters copy to user failed while replacing table [ 425.273239] CPU: 0 PID: 28176 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 425.281163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 425.290521] Call Trace: [ 425.293114] dump_stack+0x1b2/0x283 [ 425.296752] should_fail.cold+0x10a/0x154 [ 425.300902] should_failslab+0xd6/0x130 [ 425.304865] __kmalloc_track_caller+0x2bc/0x400 [ 425.309518] ? kstrdup_const+0x35/0x60 [ 425.313386] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 425.318468] kstrdup+0x36/0x70 [ 425.321644] kstrdup_const+0x35/0x60 [ 425.325406] kvasprintf_const+0xf1/0x180 [ 425.329450] kobject_set_name_vargs+0x56/0x150 [ 425.334072] dev_set_name+0xa4/0xc0 [ 425.337679] ? device_initialize+0x420/0x420 [ 425.342068] ? __lockdep_init_map+0x100/0x560 [ 425.346579] netdev_register_kobject+0xbd/0x3a0 [ 425.351231] register_netdevice+0x955/0xe40 [ 425.355621] ? netdev_change_features+0xa0/0xa0 [ 425.360271] ipvlan_link_new+0x499/0xfa0 [ 425.364323] rtnl_newlink+0xf88/0x1830 [ 425.368189] ? __lock_acquire+0x5fc/0x3f20 [ 425.372420] ? ipvlan_port_destroy+0x3f0/0x3f0 [ 425.376993] ? kmem_cache_free+0x7c/0x2b0 [ 425.381123] ? rtnl_dellink+0x6a0/0x6a0 [ 425.385103] ? trace_hardirqs_on+0x10/0x10 [ 425.389323] ? lock_acquire+0x170/0x3f0 [ 425.393316] ? lock_acquire+0x170/0x3f0 [ 425.397273] ? lock_downgrade+0x740/0x740 [ 425.401417] ? rtnl_dellink+0x6a0/0x6a0 [ 425.405373] rtnetlink_rcv_msg+0x3be/0xb10 [ 425.409593] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 425.414131] ? perf_trace_lock+0xf7/0x490 [ 425.418256] ? netdev_pick_tx+0x2e0/0x2e0 [ 425.422388] netlink_rcv_skb+0x125/0x390 [ 425.426426] ? memcpy+0x35/0x50 [ 425.429692] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 425.434165] ? netlink_ack+0x9a0/0x9a0 [ 425.438036] netlink_unicast+0x437/0x610 [ 425.442080] ? netlink_sendskb+0xd0/0xd0 [ 425.446121] netlink_sendmsg+0x62e/0xb80 [ 425.450172] ? nlmsg_notify+0x170/0x170 [ 425.454125] ? kernel_recvmsg+0x210/0x210 [ 425.458254] ? security_socket_sendmsg+0x83/0xb0 [ 425.462985] ? nlmsg_notify+0x170/0x170 [ 425.466954] sock_sendmsg+0xb5/0x100 [ 425.470658] ___sys_sendmsg+0x326/0x800 [ 425.474612] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 425.479349] ? check_preemption_disabled+0x35/0x240 [ 425.484350] ? perf_trace_lock_acquire+0x510/0x510 [ 425.489262] ? perf_trace_lock+0xf7/0x490 [ 425.493389] ? check_preemption_disabled+0x35/0x240 [ 425.498386] ? perf_trace_lock+0xf7/0x490 [ 425.502511] ? __fget+0x1fe/0x360 [ 425.505944] ? perf_trace_lock_acquire+0x510/0x510 [ 425.510853] ? lock_acquire+0x170/0x3f0 [ 425.514808] ? lock_downgrade+0x740/0x740 [ 425.518947] ? __might_fault+0x104/0x1b0 [ 425.522986] ? lock_acquire+0x170/0x3f0 [ 425.526948] __sys_sendmmsg+0x129/0x330 [ 425.530901] ? SyS_sendmsg+0x40/0x40 [ 425.534612] ? __mutex_unlock_slowpath+0x75/0x770 [ 425.539446] ? wait_for_completion_io+0x10/0x10 [ 425.544095] ? vfs_write+0x319/0x4d0 [ 425.547788] ? fput+0xb/0x140 [ 425.550870] ? SyS_write+0x14d/0x210 [ 425.554559] ? SyS_read+0x210/0x210 [ 425.558201] SyS_sendmmsg+0x2f/0x50 [ 425.561829] ? __sys_sendmmsg+0x330/0x330 [ 425.565983] do_syscall_64+0x1d5/0x640 [ 425.569882] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 425.575052] RIP: 0033:0x45d5b9 [ 425.578218] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 425.585906] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 425.593257] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 425.600505] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 [ 425.607752] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 425.614999] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c 23:15:44 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@map, 0xffffffffffffffff, 0x18}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374"], 0x34}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000140)={0x1, 0xd5, &(0x7f0000000040)=""/213}) 23:15:44 executing program 5 (fault-call:2 fault-nth:12): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) [ 425.652447] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 425.748006] FAULT_INJECTION: forcing a failure. [ 425.748006] name failslab, interval 1, probability 0, space 0, times 0 [ 425.767107] CPU: 1 PID: 28197 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 425.775053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 425.784406] Call Trace: [ 425.787002] dump_stack+0x1b2/0x283 [ 425.790639] should_fail.cold+0x10a/0x154 23:15:44 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcca}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x8}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x40000000011, r1, 0x0) setpriority(0x2, 0x0, 0x9) clone(0x84168903, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000080)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0xfffffffffffffc57}, 0x1, 0x0, 0x0, 0x40805}, 0x0) fcntl$setstatus(r4, 0x4, 0x6100) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x7f, 0x20}, &(0x7f0000000340)=0xc) 23:15:44 executing program 1: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="62696f73697a653d30303030303030b03030303030303030303008002c00aa2585766c832e75872f44e94f963d7ee1be27996818998260e2d63d5b564f1d5e2f575dc193477334cbba703836f4cd9dbc0b7db73142ca9efe786ae2b3486d3dcc2533b2"]) 23:15:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374"], 0x34}}, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x1c, 0x2}, &(0x7f0000000080)) [ 425.794793] should_failslab+0xd6/0x130 [ 425.798773] kmem_cache_alloc_trace+0x29a/0x3d0 [ 425.803440] device_add+0xce1/0x1510 [ 425.807152] ? device_is_dependent+0x270/0x270 [ 425.811757] netdev_register_kobject+0x17d/0x3a0 [ 425.816515] register_netdevice+0x955/0xe40 [ 425.820842] ? netdev_change_features+0xa0/0xa0 [ 425.825523] ipvlan_link_new+0x499/0xfa0 [ 425.829590] rtnl_newlink+0xf88/0x1830 [ 425.833485] ? ipvlan_port_destroy+0x3f0/0x3f0 [ 425.838154] ? check_preemption_disabled+0x35/0x240 [ 425.843172] ? rtnl_dellink+0x6a0/0x6a0 23:15:44 executing program 1: r0 = socket$inet6(0xa, 0x401000000001, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x400854d6, 0x0) close(r0) socket$inet6(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e25, 0x8, @loopback, 0x3}, 0x1c) r1 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r2 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000180)={0xc92, 0x96b, &(0x7f0000000000)="5bef50c3c32ae5997dfa4f0b1211366e00be930c6a3c314da2c7476d0ae00d083d7695876169039c5f25732a95365d34a9a694af91bea9ee9d8d30a0ab6eb82c108c9ea99322be14d2cb5e500181368492c0a05a0ed82ad30c196954c1b4", &(0x7f0000000140)="36b221380eef95653e3c4378fbf87a30ca1d8a5844bae097547e5bd8c1a6a026", 0x5e, 0x20}) ftruncate(r2, 0x208200) sendfile(r0, r1, 0x0, 0x8000fffffffe) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r3) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0x19) [ 425.847149] ? perf_trace_lock+0xf7/0x490 [ 425.851296] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 425.856366] ? rtnl_dellink+0x6a0/0x6a0 [ 425.860342] rtnetlink_rcv_msg+0x3be/0xb10 [ 425.864579] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 425.869078] ? perf_trace_lock+0xf7/0x490 [ 425.873227] ? netdev_pick_tx+0x2e0/0x2e0 [ 425.877382] netlink_rcv_skb+0x125/0x390 [ 425.881460] ? memcpy+0x35/0x50 [ 425.884736] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 425.889232] ? netlink_ack+0x9a0/0x9a0 [ 425.893130] netlink_unicast+0x437/0x610 [ 425.897195] ? netlink_sendskb+0xd0/0xd0 [ 425.901264] netlink_sendmsg+0x62e/0xb80 [ 425.905331] ? nlmsg_notify+0x170/0x170 [ 425.909303] ? kernel_recvmsg+0x210/0x210 [ 425.913454] ? security_socket_sendmsg+0x83/0xb0 [ 425.918214] ? nlmsg_notify+0x170/0x170 [ 425.922190] sock_sendmsg+0xb5/0x100 [ 425.925908] ___sys_sendmsg+0x326/0x800 [ 425.929883] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 425.933403] audit: type=1800 audit(1598742944.448:236): pid=28216 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.1" name="bus" dev="sda1" ino=17153 res=0 [ 425.934633] ? check_preemption_disabled+0x35/0x240 [ 425.934649] ? perf_trace_lock_acquire+0x510/0x510 [ 425.934658] ? perf_trace_lock+0xf7/0x490 [ 425.934668] ? check_preemption_disabled+0x35/0x240 [ 425.934681] ? perf_trace_lock+0xf7/0x490 [ 425.934696] ? __fget+0x1fe/0x360 [ 425.981184] ? perf_trace_lock_acquire+0x510/0x510 [ 425.986127] ? lock_acquire+0x170/0x3f0 [ 425.990105] ? lock_downgrade+0x740/0x740 [ 425.994256] ? __might_fault+0x104/0x1b0 23:15:44 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x801, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000001c0)=0xfc, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet(r2, &(0x7f0000000140)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000200)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@cipso={0x86, 0xe, 0xfffffffffffffffe, [{0x1, 0x8, "e8188956c999"}]}, @rr={0x7, 0x1b, 0x78, [@broadcast, @broadcast, @loopback, @empty, @broadcast, @multicast1]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3de8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe0}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x35}}], 0xf0}}], 0x1, 0x8c1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='team_slave_0\x00', 0x10) r3 = open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0) ftruncate(r3, 0x2008002) sendfile(r0, r3, 0x0, 0x200fff) [ 425.998323] ? lock_acquire+0x170/0x3f0 [ 426.002310] __sys_sendmmsg+0x129/0x330 [ 426.006281] ? SyS_sendmsg+0x40/0x40 [ 426.010010] ? __mutex_unlock_slowpath+0x75/0x770 [ 426.014865] ? wait_for_completion_io+0x10/0x10 [ 426.019533] ? vfs_write+0x319/0x4d0 [ 426.023248] ? fput+0xb/0x140 [ 426.026357] ? SyS_write+0x14d/0x210 [ 426.030070] ? SyS_read+0x210/0x210 [ 426.033700] SyS_sendmmsg+0x2f/0x50 [ 426.037321] ? __sys_sendmmsg+0x330/0x330 [ 426.041470] do_syscall_64+0x1d5/0x640 23:15:44 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x9f9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7fff}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008540)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xf1}, {{&(0x7f0000001740)=@xdp, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/166, 0xa6}, {&(0x7f0000001b00)=""/123, 0x7b}, {&(0x7f0000000340)=""/229, 0xe5}], 0x3, &(0x7f0000000440)=""/7, 0x7}, 0x400}, {{&(0x7f0000000500)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000840)=""/202, 0xca}, {&(0x7f00000006c0)=""/113, 0x71}, {&(0x7f0000002bc0)=""/4101, 0x1005}, {&(0x7f0000000940)=""/233, 0xe9}, {&(0x7f00000002c0)=""/19, 0x13}, {&(0x7f0000001b80)=""/118, 0x76}, {&(0x7f0000000300)=""/33, 0x21}], 0x7, &(0x7f0000001880)=""/255, 0xff}, 0x1000}, {{0x0, 0x0, &(0x7f0000005a00)=[{0x0}, {&(0x7f0000004540)=""/4, 0x4}, {0x0}, {&(0x7f00000005c0)=""/161, 0xa1}, {&(0x7f0000000740)=""/213, 0xd5}, {0x0}, {0x0}, {&(0x7f0000005940)=""/178, 0xb2}], 0x8, &(0x7f0000004880)=""/4100, 0x1004}}, {{0x0, 0x0, &(0x7f0000006f80)=[{&(0x7f0000008880)=""/248, 0xf8}, {&(0x7f0000006cc0)=""/61, 0x3d}, {&(0x7f0000006dc0)=""/49, 0x31}, {&(0x7f0000006e00)=""/14, 0xe}, {&(0x7f0000006e40)=""/126, 0x7e}, {&(0x7f0000001c80)=""/134, 0x86}], 0x6, &(0x7f0000007000)=""/31, 0x1f}, 0x101}, {{&(0x7f0000007040)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000100)=[{0x0}, {&(0x7f0000007280)=""/4096, 0x1000}, {&(0x7f0000008280)=""/47, 0x2f}, {&(0x7f00000082c0)=""/164, 0xa4}, {0x0}], 0x5}, 0x3}], 0x7, 0x100, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{r1}, 0x3, 0x20, 0x3}) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400f7ffff16) ioctl$USBDEVFS_RESETEP(r4, 0x80045503, &(0x7f0000000a40)={0x1}) creat(&(0x7f0000000680)='./bus\x00', 0x0) 23:15:44 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, "2f83c7711f68f81f"}) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) dup2(r6, r5) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) [ 426.045368] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 426.050555] RIP: 0033:0x45d5b9 [ 426.053751] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 426.061457] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 426.068724] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 426.075996] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 [ 426.083263] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 426.090535] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c 23:15:44 executing program 5 (fault-call:2 fault-nth:13): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:15:44 executing program 1: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000040)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x41001, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x7, 0x7, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfbe}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x4004) 23:15:44 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000080)={0x29, @multicast1, 0x4e20, 0x4, 'dh\x00', 0x30, 0x4, 0x66}, 0x2c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x128, 0x1, 0x8, 0x101, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x7fc}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x31e5ba92}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xc968}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x767e}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffff001}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x4060841) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374"], 0x34}}, 0x0) [ 426.182674] ip_tables: iptables: counters copy to user failed while replacing table 23:15:44 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, "2f83c7711f68f81f"}) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:15:44 executing program 1: getpid() accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) set_thread_area(&(0x7f00000001c0)={0x7, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000002c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x5, 0x5}}, 0x30) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f00000005c0)={@remote, @ipv4={[], [], @loopback}, @local, 0x0, 0x0, 0xfffe}) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000140)=0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_tables_targets\x00') r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x4, 0x3f, 0xbf, 0xfffffffe, 0x2, @loopback, @remote, 0x8000, 0x7, 0x3, 0x1}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, 0x0, 0x4040041) preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x0, 0x0) 23:15:44 executing program 2: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_ENDIAN(0x14, 0x2) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r1) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="23e10d5d2f66696c653020f014d336b003ea040000000000ea92290a7ea290ab0e7446c10023f080e07ee22455040d7295e778c8593dce6e33a52058def612a65c3d46691352"], 0x194) close(r0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0x40184150, &(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x2, 0x2, "c57d96", 0x30, 0x6}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 426.266777] FAULT_INJECTION: forcing a failure. [ 426.266777] name failslab, interval 1, probability 0, space 0, times 0 [ 426.317410] ip_tables: iptables: counters copy to user failed while replacing table [ 426.326770] CPU: 0 PID: 28242 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 426.334665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.344020] Call Trace: [ 426.346617] dump_stack+0x1b2/0x283 [ 426.350255] should_fail.cold+0x10a/0x154 [ 426.354413] should_failslab+0xd6/0x130 [ 426.358391] __kmalloc_track_caller+0x2bc/0x400 [ 426.363061] ? kstrdup_const+0x35/0x60 [ 426.366955] kstrdup+0x36/0x70 [ 426.370152] kstrdup_const+0x35/0x60 [ 426.373944] __kernfs_new_node+0x2e/0x470 [ 426.378184] kernfs_create_dir_ns+0x8c/0x200 [ 426.382581] sysfs_create_dir_ns+0xb7/0x1d0 [ 426.386901] kobject_add_internal+0x279/0x810 [ 426.391404] kobject_add+0x11f/0x180 [ 426.395118] ? kset_create_and_add+0x190/0x190 [ 426.399729] device_add+0x32c/0x1510 [ 426.403456] ? device_is_dependent+0x270/0x270 [ 426.408041] netdev_register_kobject+0x17d/0x3a0 [ 426.412792] register_netdevice+0x955/0xe40 [ 426.417099] ? netdev_change_features+0xa0/0xa0 [ 426.421754] ipvlan_link_new+0x499/0xfa0 [ 426.425816] rtnl_newlink+0xf88/0x1830 [ 426.429702] ? __lock_acquire+0x5fc/0x3f20 [ 426.433933] ? ipvlan_port_destroy+0x3f0/0x3f0 [ 426.438499] ? kmem_cache_free+0x7c/0x2b0 [ 426.442641] ? rtnl_dellink+0x6a0/0x6a0 [ 426.446606] ? trace_hardirqs_on+0x10/0x10 [ 426.450835] ? lock_acquire+0x170/0x3f0 [ 426.454839] ? lock_acquire+0x170/0x3f0 [ 426.458809] ? lock_downgrade+0x740/0x740 [ 426.462939] ? rtnl_dellink+0x6a0/0x6a0 [ 426.466902] rtnetlink_rcv_msg+0x3be/0xb10 [ 426.471235] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 426.475711] ? perf_trace_lock+0xf7/0x490 [ 426.479836] ? netdev_pick_tx+0x2e0/0x2e0 [ 426.483975] netlink_rcv_skb+0x125/0x390 [ 426.488019] ? memcpy+0x35/0x50 [ 426.491279] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 426.495752] ? netlink_ack+0x9a0/0x9a0 [ 426.499629] netlink_unicast+0x437/0x610 [ 426.503684] ? netlink_sendskb+0xd0/0xd0 [ 426.507748] netlink_sendmsg+0x62e/0xb80 [ 426.511812] ? nlmsg_notify+0x170/0x170 [ 426.515783] ? kernel_recvmsg+0x210/0x210 [ 426.519932] ? security_socket_sendmsg+0x83/0xb0 [ 426.524684] ? nlmsg_notify+0x170/0x170 [ 426.528654] sock_sendmsg+0xb5/0x100 [ 426.532365] ___sys_sendmsg+0x326/0x800 [ 426.536358] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 426.541109] ? check_preemption_disabled+0x35/0x240 [ 426.546123] ? perf_trace_lock_acquire+0x510/0x510 [ 426.551049] ? perf_trace_lock+0xf7/0x490 [ 426.555196] ? check_preemption_disabled+0x35/0x240 [ 426.560214] ? perf_trace_lock+0xf7/0x490 [ 426.564359] ? __fget+0x1fe/0x360 [ 426.567294] audit: type=1800 audit(1598742945.238:237): pid=28262 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="bus" dev="sda1" ino=17163 res=0 [ 426.567806] ? perf_trace_lock_acquire+0x510/0x510 [ 426.596480] ? lock_acquire+0x170/0x3f0 [ 426.600453] ? lock_downgrade+0x740/0x740 [ 426.604598] ? __might_fault+0x104/0x1b0 [ 426.608657] ? lock_acquire+0x170/0x3f0 [ 426.612635] __sys_sendmmsg+0x129/0x330 [ 426.616605] ? SyS_sendmsg+0x40/0x40 [ 426.620336] ? __mutex_unlock_slowpath+0x75/0x770 [ 426.625177] ? wait_for_completion_io+0x10/0x10 [ 426.629839] ? vfs_write+0x319/0x4d0 [ 426.633547] ? fput+0xb/0x140 [ 426.636648] ? SyS_write+0x14d/0x210 [ 426.640358] ? SyS_read+0x210/0x210 [ 426.643983] SyS_sendmmsg+0x2f/0x50 [ 426.647606] ? __sys_sendmmsg+0x330/0x330 [ 426.651756] do_syscall_64+0x1d5/0x640 [ 426.655646] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 426.660834] RIP: 0033:0x45d5b9 23:15:45 executing program 5 (fault-call:2 fault-nth:14): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) [ 426.664020] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 426.671729] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 426.678997] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 426.686263] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 [ 426.693526] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 426.700812] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c [ 426.710433] kobject_add_internal failed for ipvlan14 (error: -12 parent: net) [ 426.769592] FAULT_INJECTION: forcing a failure. [ 426.769592] name failslab, interval 1, probability 0, space 0, times 0 [ 426.781324] CPU: 0 PID: 28269 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 426.789212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.798566] Call Trace: [ 426.801153] dump_stack+0x1b2/0x283 [ 426.804797] should_fail.cold+0x10a/0x154 [ 426.808953] should_failslab+0xd6/0x130 [ 426.812931] kmem_cache_alloc+0x28e/0x3c0 [ 426.817083] __kernfs_new_node+0x6f/0x470 [ 426.821234] kernfs_create_dir_ns+0x8c/0x200 [ 426.825648] sysfs_create_dir_ns+0xb7/0x1d0 [ 426.829973] kobject_add_internal+0x279/0x810 [ 426.834474] kobject_add+0x11f/0x180 [ 426.838186] ? kset_create_and_add+0x190/0x190 [ 426.842778] device_add+0x32c/0x1510 [ 426.846496] ? device_is_dependent+0x270/0x270 [ 426.851209] netdev_register_kobject+0x17d/0x3a0 [ 426.855972] register_netdevice+0x955/0xe40 [ 426.860300] ? netdev_change_features+0xa0/0xa0 [ 426.864991] ipvlan_link_new+0x499/0xfa0 [ 426.869055] rtnl_newlink+0xf88/0x1830 [ 426.872942] ? __lock_acquire+0x5fc/0x3f20 [ 426.877183] ? ipvlan_port_destroy+0x3f0/0x3f0 [ 426.881761] ? kmem_cache_free+0x7c/0x2b0 [ 426.885910] ? rtnl_dellink+0x6a0/0x6a0 [ 426.889881] ? trace_hardirqs_on+0x10/0x10 [ 426.894114] ? lock_acquire+0x170/0x3f0 [ 426.898133] ? lock_acquire+0x170/0x3f0 [ 426.902105] ? lock_downgrade+0x740/0x740 [ 426.906257] ? rtnl_dellink+0x6a0/0x6a0 [ 426.910233] rtnetlink_rcv_msg+0x3be/0xb10 [ 426.914472] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 426.918968] ? perf_trace_lock+0xf7/0x490 [ 426.923112] ? netdev_pick_tx+0x2e0/0x2e0 [ 426.927266] netlink_rcv_skb+0x125/0x390 [ 426.931326] ? memcpy+0x35/0x50 [ 426.934604] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 426.939103] ? netlink_ack+0x9a0/0x9a0 [ 426.943000] netlink_unicast+0x437/0x610 [ 426.947061] ? netlink_sendskb+0xd0/0xd0 [ 426.951122] netlink_sendmsg+0x62e/0xb80 [ 426.955184] ? nlmsg_notify+0x170/0x170 [ 426.959153] ? kernel_recvmsg+0x210/0x210 [ 426.963304] ? security_socket_sendmsg+0x83/0xb0 [ 426.968053] ? nlmsg_notify+0x170/0x170 [ 426.972023] sock_sendmsg+0xb5/0x100 [ 426.975735] ___sys_sendmsg+0x326/0x800 [ 426.979712] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 426.984466] ? check_preemption_disabled+0x35/0x240 [ 426.989479] ? perf_trace_lock_acquire+0x510/0x510 [ 426.994400] ? perf_trace_lock+0xf7/0x490 [ 426.998546] ? check_preemption_disabled+0x35/0x240 [ 427.003563] ? perf_trace_lock+0xf7/0x490 [ 427.007705] ? __fget+0x1fe/0x360 [ 427.011155] ? perf_trace_lock_acquire+0x510/0x510 [ 427.016079] ? lock_acquire+0x170/0x3f0 [ 427.020048] ? lock_downgrade+0x740/0x740 [ 427.024217] ? __might_fault+0x104/0x1b0 [ 427.028275] ? lock_acquire+0x170/0x3f0 [ 427.032259] __sys_sendmmsg+0x129/0x330 [ 427.036236] ? SyS_sendmsg+0x40/0x40 [ 427.039964] ? __mutex_unlock_slowpath+0x75/0x770 [ 427.044807] ? wait_for_completion_io+0x10/0x10 [ 427.049473] ? vfs_write+0x319/0x4d0 [ 427.050324] ip_tables: iptables: counters copy to user failed while replacing table [ 427.053202] ? fput+0xb/0x140 [ 427.053212] ? SyS_write+0x14d/0x210 23:15:45 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, "2f83c7711f68f81f"}) socket$unix(0x1, 0x2, 0x0) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) [ 427.053223] ? SyS_read+0x210/0x210 [ 427.053234] SyS_sendmmsg+0x2f/0x50 [ 427.053244] ? __sys_sendmmsg+0x330/0x330 [ 427.079430] do_syscall_64+0x1d5/0x640 [ 427.083317] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 427.088498] RIP: 0033:0x45d5b9 [ 427.091684] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 427.099388] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 427.106653] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 427.113912] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 23:15:45 executing program 2: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffff01009e000000000000000000", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32], 0x8d0}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 427.121161] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 427.128408] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c [ 427.145097] kobject_add_internal failed for ipvlan14 (error: -12 parent: net) 23:15:45 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, "2f83c7711f68f81f"}) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) [ 427.179498] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 427.217432] ip_tables: iptables: counters copy to user failed while replacing table [ 427.227164] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 427.258173] audit: type=1800 audit(1598742945.938:238): pid=28262 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="bus" dev="sda1" ino=17163 res=0 23:15:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newsa={0x144, 0x10, 0x40d, 0x0, 0x0, {{@in=@dev, @in6=@rand_addr=' \x01\x00'}, {@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x6c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@sec_ctx={0xc, 0x8, {0x8}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x144}}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x50080, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000040)) 23:15:46 executing program 5 (fault-call:2 fault-nth:15): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:15:46 executing program 1: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x32a, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4096, 0xfffc}], 0x1}}], 0xffffff1f, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000480)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000880)={r1, 0x5, 0x7f, 0x1}) 23:15:46 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c0002000000000000000000140001001000010009000200676163742bb3a9e43374e6e18f100662994063a503eb28313c616be909d2730afe80dac1e6b3095f1619412b28cfdc654299aa239ce2e8dfa0ef93b9cd8b359624999a2a6e42679df21d64cb1b832c5002f8467868771dd7b26bbbfaf1b19f9add0b5c489b357001108b2e442405380b24eb4aa3f9fe46e26135"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20000840) 23:15:46 executing program 2: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000000c0)=0x3f365342, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x30) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000100)=0x82, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 23:15:46 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) [ 427.363308] FAULT_INJECTION: forcing a failure. [ 427.363308] name failslab, interval 1, probability 0, space 0, times 0 [ 427.373605] ip_tables: iptables: counters copy to user failed while replacing table [ 427.375215] CPU: 1 PID: 28295 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 427.390897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.400246] Call Trace: [ 427.402830] dump_stack+0x1b2/0x283 [ 427.406461] should_fail.cold+0x10a/0x154 [ 427.410625] should_failslab+0xd6/0x130 [ 427.414603] kmem_cache_alloc+0x40/0x3c0 [ 427.418672] radix_tree_node_alloc.constprop.0+0x1b0/0x2f0 [ 427.424307] idr_get_free_cmn+0x595/0x8d0 [ 427.428464] idr_alloc_cmn+0xe8/0x1e0 [ 427.432270] ? __fprop_inc_percpu_max+0x1d0/0x1d0 [ 427.437119] ? fs_reclaim_release+0xd0/0x110 [ 427.441539] ? fs_reclaim_release+0xd0/0x110 [ 427.445950] idr_alloc_cyclic+0xc2/0x1d0 [ 427.450016] ? idr_alloc_cmn+0x1e0/0x1e0 [ 427.454077] ? __radix_tree_preload+0x1c3/0x250 [ 427.458753] __kernfs_new_node+0xaf/0x470 [ 427.462902] kernfs_create_dir_ns+0x8c/0x200 [ 427.467313] sysfs_create_dir_ns+0xb7/0x1d0 [ 427.471638] kobject_add_internal+0x279/0x810 [ 427.476137] kobject_add+0x11f/0x180 [ 427.479849] ? kset_create_and_add+0x190/0x190 [ 427.484441] device_add+0x32c/0x1510 [ 427.488156] ? device_is_dependent+0x270/0x270 [ 427.492743] netdev_register_kobject+0x17d/0x3a0 [ 427.497512] register_netdevice+0x955/0xe40 [ 427.501834] ? netdev_change_features+0xa0/0xa0 [ 427.506508] ipvlan_link_new+0x499/0xfa0 23:15:46 executing program 3: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000001c0)={0x0, 'bridge_slave_1\x00', {0x4}, 0x8}) 23:15:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374"], 0x34}}, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r1) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000040)={0x66, "6ad0c6b7b7e434654dac320e1a8e68db549ce4ec34989d78fdff16a99325a724", 0x1}) [ 427.510576] rtnl_newlink+0xf88/0x1830 [ 427.514462] ? __lock_acquire+0x5fc/0x3f20 [ 427.518707] ? ipvlan_port_destroy+0x3f0/0x3f0 [ 427.523285] ? kmem_cache_free+0x7c/0x2b0 [ 427.527436] ? rtnl_dellink+0x6a0/0x6a0 [ 427.531407] ? trace_hardirqs_on+0x10/0x10 [ 427.535644] ? lock_acquire+0x170/0x3f0 [ 427.539642] ? lock_acquire+0x170/0x3f0 [ 427.543611] ? lock_downgrade+0x740/0x740 [ 427.547768] ? rtnl_dellink+0x6a0/0x6a0 [ 427.551743] rtnetlink_rcv_msg+0x3be/0xb10 [ 427.555988] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 427.560501] ? perf_trace_lock+0xf7/0x490 [ 427.564648] ? netdev_pick_tx+0x2e0/0x2e0 [ 427.568802] netlink_rcv_skb+0x125/0x390 [ 427.572872] ? memcpy+0x35/0x50 [ 427.576241] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 427.580737] ? netlink_ack+0x9a0/0x9a0 [ 427.584645] netlink_unicast+0x437/0x610 [ 427.588711] ? netlink_sendskb+0xd0/0xd0 [ 427.592781] netlink_sendmsg+0x62e/0xb80 [ 427.596838] ? nlmsg_notify+0x170/0x170 [ 427.600801] ? kernel_recvmsg+0x210/0x210 [ 427.604940] ? security_socket_sendmsg+0x83/0xb0 [ 427.609676] ? nlmsg_notify+0x170/0x170 [ 427.613632] sock_sendmsg+0xb5/0x100 [ 427.617388] ___sys_sendmsg+0x326/0x800 [ 427.621344] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 427.626089] ? check_preemption_disabled+0x35/0x240 [ 427.631136] ? perf_trace_lock_acquire+0x510/0x510 [ 427.636051] ? perf_trace_lock+0xf7/0x490 [ 427.640184] ? check_preemption_disabled+0x35/0x240 [ 427.645193] ? perf_trace_lock+0xf7/0x490 [ 427.649338] ? __fget+0x1fe/0x360 [ 427.652791] ? perf_trace_lock_acquire+0x510/0x510 [ 427.657714] ? lock_acquire+0x170/0x3f0 [ 427.661669] ? lock_downgrade+0x740/0x740 [ 427.665802] ? __might_fault+0x104/0x1b0 [ 427.669841] ? lock_acquire+0x170/0x3f0 [ 427.673800] __sys_sendmmsg+0x129/0x330 [ 427.677758] ? SyS_sendmsg+0x40/0x40 [ 427.681478] ? __mutex_unlock_slowpath+0x75/0x770 [ 427.686308] ? wait_for_completion_io+0x10/0x10 [ 427.690955] ? vfs_write+0x319/0x4d0 [ 427.694786] ? fput+0xb/0x140 [ 427.697886] ? SyS_write+0x14d/0x210 [ 427.701589] ? SyS_read+0x210/0x210 [ 427.705208] SyS_sendmmsg+0x2f/0x50 [ 427.708814] ? __sys_sendmmsg+0x330/0x330 [ 427.712967] do_syscall_64+0x1d5/0x640 [ 427.716840] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 427.722009] RIP: 0033:0x45d5b9 [ 427.725180] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 427.732877] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 427.740134] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 427.747393] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 [ 427.754652] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f 23:15:46 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 427.761910] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c [ 427.780055] device ipvlan14 entered promiscuous mode 23:15:46 executing program 2: shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a020002740ef801", 0x17}], 0x10, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1013c1, 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x8000, 0x4) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000100), 0x3) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a3", 0x307) lsetxattr$security_evm(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='security.evm\x00', &(0x7f0000000340)=@sha1={0x1, "1fbeb0919b7c39e12623746170d29a2376362ecf"}, 0x15, 0x0) sendfile(r0, r1, 0x0, 0x1c500) shmctl$SHM_UNLOCK(0x0, 0xc) pipe(&(0x7f0000000040)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x50) pipe(&(0x7f0000000040)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x2, 0x0) 23:15:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374"], 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)=@gettfilter={0x44, 0x2e, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xe}, {0x5, 0x3}, {0xfff3, 0x7}}, [{0x8, 0xb, 0xa7f0}, {0x8, 0xb, 0xffffff2b}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000011) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x343080, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r2) fsetxattr$security_ima(r2, &(0x7f00000004c0)='security.ima\x00', &(0x7f0000000500)=@v2={0x5, 0x1, 0x4, 0x62c, 0x1000, "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"}, 0x1009, 0x3) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x2, 0x10000) io_setup(0x7, &(0x7f0000001540)) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000001740)=ANY=[@ANYBLOB="14000000160004022abd7000fbdbdf25140000005b6d7d56cf25e47a5f627bccb4520d1447323550edf9ca3aa3302214de558da797ea17da4e1f82957debe81e611466cebdc73eba10935d9856f29674"], 0x14}, 0x1, 0x0, 0x0, 0x40008800}, 0x4880) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000440)) close(r3) sendmsg$AUDIT_GET(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x3e8, 0x0, 0x70bd28, 0x25dfdbf9, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f0000000100)={0x5, &(0x7f0000000080)="cb3b8aced69e3f1a5e2730aa0b42f255d7ab1f64cf0be101c950a9e85f3bf3381bf42ecd7c4d5c1f666fdadc731cffa009391f04e0690ff4eeca54762fc6b251a4c6517350266e248a3fcc2c23d91d89dec30d8bd4909a2968cf2e2bc01e70552c1412cb4139fe07"}) mmap$usbfs(&(0x7f0000fef000/0xe000)=nil, 0xe000, 0x8, 0x4010, 0xffffffffffffffff, 0x3ff) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000480), 0x4) [ 427.883361] ip_tables: iptables: counters copy to user failed while replacing table 23:15:46 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xfc, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc6d}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @multicast2}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000804}, 0x8800) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x4) [ 427.952314] audit: type=1804 audit(1598742946.628:239): pid=28332 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir866703277/syzkaller.wkWSq8/877/file1/file0" dev="loop2" ino=146 res=1 23:15:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374"], 0x34}}, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000080)={0x3, 0x2, 0x8, 0x3f, 0x3, 0x47, 0x3, 0x2, 0x4, 0x5, 0x3, "065fd44deacf6521ff20dcdd479cde1c1e5e7801e449cd02b920e05a36bcfd64"}) 23:15:46 executing program 5 (fault-call:2 fault-nth:16): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) [ 428.308172] FAULT_INJECTION: forcing a failure. [ 428.308172] name failslab, interval 1, probability 0, space 0, times 0 [ 428.349277] CPU: 0 PID: 28350 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 428.357244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.366604] Call Trace: [ 428.369198] dump_stack+0x1b2/0x283 [ 428.372839] should_fail.cold+0x10a/0x154 [ 428.376995] should_failslab+0xd6/0x130 [ 428.380969] kmem_cache_alloc+0x28e/0x3c0 [ 428.385121] __kernfs_new_node+0x6f/0x470 [ 428.389272] kernfs_new_node+0x7b/0xe0 [ 428.393156] __kernfs_create_file+0x3d/0x320 [ 428.397567] sysfs_add_file_mode_ns+0x1e1/0x450 [ 428.402250] device_create_file+0xc8/0x100 [ 428.406587] ? acpi_platform_notify_remove+0x1f0/0x1f0 [ 428.411871] device_add+0x367/0x1510 [ 428.415617] ? device_is_dependent+0x270/0x270 [ 428.420202] netdev_register_kobject+0x17d/0x3a0 [ 428.424961] register_netdevice+0x955/0xe40 [ 428.429283] ? netdev_change_features+0xa0/0xa0 [ 428.433956] ipvlan_link_new+0x499/0xfa0 [ 428.438022] rtnl_newlink+0xf88/0x1830 [ 428.441908] ? __lock_acquire+0x5fc/0x3f20 [ 428.446150] ? ipvlan_port_destroy+0x3f0/0x3f0 [ 428.450732] ? kmem_cache_free+0x7c/0x2b0 [ 428.454881] ? rtnl_dellink+0x6a0/0x6a0 [ 428.458911] ? trace_hardirqs_on+0x10/0x10 [ 428.463145] ? lock_acquire+0x170/0x3f0 [ 428.467159] ? lock_acquire+0x170/0x3f0 [ 428.471133] ? lock_downgrade+0x740/0x740 [ 428.475282] ? rtnl_dellink+0x6a0/0x6a0 [ 428.479252] rtnetlink_rcv_msg+0x3be/0xb10 [ 428.483490] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 428.487983] ? perf_trace_lock+0xf7/0x490 [ 428.492128] ? netdev_pick_tx+0x2e0/0x2e0 [ 428.496277] netlink_rcv_skb+0x125/0x390 [ 428.500336] ? memcpy+0x35/0x50 [ 428.503618] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 428.508136] ? netlink_ack+0x9a0/0x9a0 [ 428.512038] netlink_unicast+0x437/0x610 [ 428.516101] ? netlink_sendskb+0xd0/0xd0 [ 428.520164] netlink_sendmsg+0x62e/0xb80 [ 428.524226] ? nlmsg_notify+0x170/0x170 [ 428.528196] ? kernel_recvmsg+0x210/0x210 [ 428.532346] ? security_socket_sendmsg+0x83/0xb0 [ 428.537099] ? nlmsg_notify+0x170/0x170 [ 428.541074] sock_sendmsg+0xb5/0x100 [ 428.544788] ___sys_sendmsg+0x326/0x800 [ 428.548785] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 428.553539] ? check_preemption_disabled+0x35/0x240 [ 428.558575] ? perf_trace_lock_acquire+0x510/0x510 [ 428.563498] ? perf_trace_lock+0xf7/0x490 [ 428.567642] ? check_preemption_disabled+0x35/0x240 [ 428.572656] ? perf_trace_lock+0xf7/0x490 [ 428.576804] ? __fget+0x1fe/0x360 [ 428.580256] ? perf_trace_lock_acquire+0x510/0x510 [ 428.585179] ? lock_acquire+0x170/0x3f0 [ 428.589154] ? lock_downgrade+0x740/0x740 [ 428.593302] ? __might_fault+0x104/0x1b0 [ 428.597363] ? lock_acquire+0x170/0x3f0 [ 428.601341] __sys_sendmmsg+0x129/0x330 [ 428.605317] ? SyS_sendmsg+0x40/0x40 [ 428.609041] ? __mutex_unlock_slowpath+0x75/0x770 [ 428.613881] ? wait_for_completion_io+0x10/0x10 [ 428.618579] ? vfs_write+0x319/0x4d0 [ 428.622289] ? fput+0xb/0x140 [ 428.625392] ? SyS_write+0x14d/0x210 [ 428.629099] ? SyS_read+0x210/0x210 [ 428.632722] SyS_sendmmsg+0x2f/0x50 [ 428.636340] ? __sys_sendmmsg+0x330/0x330 [ 428.640485] do_syscall_64+0x1d5/0x640 [ 428.644384] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 428.649567] RIP: 0033:0x45d5b9 [ 428.652744] RSP: 002b:00007f428e22cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 428.660451] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 428.667715] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 428.674981] RBP: 00007f428e22cca0 R08: 0000000000000000 R09: 0000000000000000 [ 428.682264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 428.689617] R13: 00007ffe082024cf R14: 00007f428e22d9c0 R15: 000000000118cfec 23:15:47 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf0f041}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r2) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0x6, 0x4}) dup3(r1, r0, 0x0) 23:15:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000320025020000000000000000000000040c00020000000004000000001000010009aa4503000000a87af0c93306edb6d3daf08b379855fd5e225c05af0a126d8585fc24412940b435a3b885bde5f139130dd04e7a71a4a881ad6f94efd70acf2907dfb8a5fcfb71ebeaed6672566b0ef725410dfd36b14674df5ef4f5d89de49253e40e63a24d11bf5359e05b1c1300b04902d95bd4997bc9767a2bb6c8a7bfff0b56ba8c1f8f4ed32956a29ef69467b54a77c8b351a6ef7c19b6d81c907e9ad3c964c0610cc54209e8c676b7ac7dd1c68a3400000000000000000000000000000000fbb89298756126b1aff425eda07e7a2bd861c676ba22e9cf2ce0d47d46a8b3b4428895c6a7030f2abab34f900a58dd758fd888f4781840173cd680caeff6d7ed79d0c612ec32d72077556201a90d8875a429221092a9c177117558168f4bf807f09ab6e846ca8cb2505d276e2328748a5ae747705becb8e6686f000000000000"], 0x34}}, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000580)={0xa, 0x4e23, 0xfffffedf, @rand_addr=' \x01\x00', 0xb693}, 0x1c) close(r1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000440)={0x6, 'veth1_to_team\x00', {}, 0xec}) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x90, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x40}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x7f, 0xff, 0x7, 0xff]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000000}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x1, 0x8, 0x1]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}]}, 0x90}, 0x1, 0x0, 0x0, 0x4040000}, 0x20040000) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) personality(0x6) close(r3) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r3, 0x80184151, &(0x7f0000000540)={0x0, &(0x7f00000004c0)="88b456ffe6ac4c387a9ce59b19188a5f5cc4ddc0b53cb71553f8b6378b638efed403304b9a0294c835a8089a7ffc763bb5762dd8d3a8b1eb0e81cfc0e4d2d0c9706b287dd3c64fd8f2be100f336f2929d80ae5ab8ee2bdd4e5316162dcb60f2444f37de5e4479a", 0x67}) close(r2) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000480)={0x401}) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f00000003c0)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x2, 0x4e22, @empty}, 0x46, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000180)='ip6gretap0\x00', 0x7ff, 0x3}) [ 428.722735] audit: type=1804 audit(1598742947.398:240): pid=28340 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir866703277/syzkaller.wkWSq8/877/file1/file0" dev="loop2" ino=146 res=1 23:15:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}}, 0x0, 0x2, 0xffffffffffffffff, 0xa) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$FITHAW(r0, 0xc0045878) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r1, &(0x7f0000000440)=ANY=[], 0x2bcf) sendto$inet(r1, &(0x7f0000000400)="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", 0x800, 0x20004005, 0x0, 0x0) shutdown(r1, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x0, 0x0) recvmsg(r1, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x9, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000500040063f900050900020073797a3000000000050005000a00000011000300686173683a6e65742c6e65740000000010000300686173683a69702c6d6163000c0007800800064000000007"], 0x60}}, 0x0) [ 428.784272] new mount options do not match the existing superblock, will be ignored [ 428.824031] vivid-002: disconnect 23:15:47 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 23:15:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="66b8808b5ecb0f23d80f21f86635800000b00f23f80f01c5260f380020bad004ed660fc775030f01c465f20f2db79b3ce42236f3aeb8fd000f00d8", 0x3b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_audit(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340)='overlay\x00', 0x8001, &(0x7f00000003c0)={[{@index_on='index=on'}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@appraise_type='appraise_type=imasig'}, {@permit_directio='permit_directio'}, {@audit='audit'}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@pcr={'pcr', 0x3d, 0x1c}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@appraise_type='appraise_type=imasig'}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@pcr={'pcr', 0x3d, 0x2a}}]}) ioctl$KVM_NMI(r2, 0xae9a) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r3) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000200)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x88003}) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r4) ioctl$TIOCNXCL(r4, 0x540d) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 428.832869] vivid-002: reconnect [ 428.840902] vivid-002: disconnect [ 428.844467] audit: type=1804 audit(1598742947.518:241): pid=28352 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir455499395/syzkaller.9kqCz4/856/file0" dev="sda1" ino=17166 res=1 [ 428.869455] vivid-002: reconnect 23:15:47 executing program 5 (fault-call:2 fault-nth:17): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) [ 428.898362] new mount options do not match the existing superblock, will be ignored 23:15:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374"], 0x34}}, 0x0) 23:15:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) syz_emit_ethernet(0x2c3, &(0x7f00000003c0)={@local, @dev={[], 0x2}, @void, {@ipv4={0x800, @gre={{0x1d, 0x4, 0x2, 0xe, 0x2b5, 0x64, 0x0, 0x4, 0x2f, 0x0, @local, @multicast2, {[@timestamp_addr={0x44, 0x44, 0xd3, 0x1, 0xd, [{@loopback, 0x42e2}, {@rand_addr=0x64010100, 0x4a}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x66}, {@local}, {@empty, 0x40}, {@local, 0x7}, {@empty, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @noop, @rr={0x7, 0xf, 0xd6, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @generic={0x82, 0x8, "e697a2414684"}, @end, @noop]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xc3, 0x3, [0x2c, 0x3], "545d676c135d5c2be30f62a03ed80ec659ba22fee9c2cec610f51987352c34aada660a2174b64ed17613f3d01e11bb00e8bba0fb921790642be0baf237cb361d4c053d555fa8e19685e94f9b97cd295766ac0e5ce19cfa724eeccfc1c298624fca12490fef2e94473586b28591604f4e9fd7bd6b77586843d05cc5a48bf8bfedd8b4885896748b845b8a2324454532306dc1e9581b631fa6d538907f9b2bee5df9c10e2fe0fb2e21b735928e4cb45adc42af9eeb54bfed45c5986826725a5ef10a485b"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "f568d4f6c4fc6cd93c1ae8b177eab49a04882d68708ae0da4b9309cc6716ae321cab8271d28f2e22bc1f69155af3fb57"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x3, 0x3], "c159b66904e2953f8aa453788c2db75da3851093d02c509c31e0030ea7df4e4fb3ec7be1"}, {0x8, 0x88be, 0x3, {{0x9, 0x1, 0xf9, 0x1, 0x1, 0x3, 0x1, 0x9}, 0x1, {0xe9}}}, {0x8, 0x22eb, 0x2, {{0x4, 0x2, 0x2, 0x2, 0x1, 0x2, 0x0, 0x8}, 0x2, {0x5, 0x3, 0x0, 0xf, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "0295253bdbf0e15cac714cafc3f53db99ad1a69d88ed5f7d66dcc0ba2e21dd25f07273090ec2e5cc0ce397bde0f9a19b9fce9011afe1d005a15a823389d8d75329333a971326ea947635bca75e0a23d3054dc20cd0f40631e0b0b00a158050531fefcdfb4b6be9c5c12f673f25486ca8361273d48b082e0efeb2042980fc394780e91e2ee78356ec04d464047d0cf6e4f85350292d95770f08047f0ded00a824db8cae46fc18a5618f0761fd23340520fe12449f72b3dbb8e422dd224d5f31f3fecfb37219f5009af7697729959c8414a147542b02677211e24732e4d2a9"}}}}}}, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r2) setxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=@ng={0x4, 0xc, "caf888c8ca63b7a41d505658"}, 0xe, 0x2) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000080)={0x0, 0x4e29}, 0x8) [ 428.954706] ip_tables: iptables: counters copy to user failed while replacing table [ 429.008570] FAULT_INJECTION: forcing a failure. [ 429.008570] name failslab, interval 1, probability 0, space 0, times 0 [ 429.025896] CPU: 1 PID: 28382 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 429.033797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.043150] Call Trace: [ 429.045743] dump_stack+0x1b2/0x283 [ 429.049380] should_fail.cold+0x10a/0x154 [ 429.053541] should_failslab+0xd6/0x130 [ 429.057519] kmem_cache_alloc+0x28e/0x3c0 [ 429.061674] __kernfs_new_node+0x6f/0x470 [ 429.065829] kernfs_new_node+0x7b/0xe0 [ 429.069716] kernfs_create_link+0x27/0x155 [ 429.073948] sysfs_do_create_link_sd+0x90/0x120 [ 429.078703] sysfs_create_link+0x5f/0xc0 [ 429.082762] device_add+0x3f7/0x1510 [ 429.086474] ? device_is_dependent+0x270/0x270 [ 429.091060] netdev_register_kobject+0x17d/0x3a0 [ 429.095820] register_netdevice+0x955/0xe40 [ 429.100153] ? netdev_change_features+0xa0/0xa0 [ 429.104824] ipvlan_link_new+0x499/0xfa0 [ 429.108886] rtnl_newlink+0xf88/0x1830 [ 429.112777] ? __lock_acquire+0x5fc/0x3f20 [ 429.117020] ? ipvlan_port_destroy+0x3f0/0x3f0 [ 429.121599] ? kmem_cache_free+0x7c/0x2b0 [ 429.125744] ? rtnl_dellink+0x6a0/0x6a0 [ 429.129717] ? trace_hardirqs_on+0x10/0x10 [ 429.133949] ? lock_acquire+0x170/0x3f0 [ 429.137969] ? lock_acquire+0x170/0x3f0 [ 429.141938] ? lock_downgrade+0x740/0x740 [ 429.146082] ? rtnl_dellink+0x6a0/0x6a0 [ 429.150051] rtnetlink_rcv_msg+0x3be/0xb10 [ 429.154283] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 429.158776] ? perf_trace_lock+0xf7/0x490 [ 429.162942] ? netdev_pick_tx+0x2e0/0x2e0 [ 429.167092] netlink_rcv_skb+0x125/0x390 [ 429.171149] ? memcpy+0x35/0x50 [ 429.174433] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 429.178932] ? netlink_ack+0x9a0/0x9a0 [ 429.182847] netlink_unicast+0x437/0x610 [ 429.186909] ? netlink_sendskb+0xd0/0xd0 [ 429.190972] netlink_sendmsg+0x62e/0xb80 [ 429.195033] ? nlmsg_notify+0x170/0x170 [ 429.199005] ? kernel_recvmsg+0x210/0x210 [ 429.203156] ? security_socket_sendmsg+0x83/0xb0 [ 429.207910] ? nlmsg_notify+0x170/0x170 [ 429.211880] sock_sendmsg+0xb5/0x100 [ 429.215594] ___sys_sendmsg+0x326/0x800 [ 429.219570] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 429.224460] ? check_preemption_disabled+0x35/0x240 [ 429.229489] ? perf_trace_lock_acquire+0x510/0x510 [ 429.235900] ? perf_trace_lock+0xf7/0x490 [ 429.240048] ? check_preemption_disabled+0x35/0x240 [ 429.245070] ? perf_trace_lock+0xf7/0x490 [ 429.249227] ? __fget+0x1fe/0x360 [ 429.252682] ? perf_trace_lock_acquire+0x510/0x510 [ 429.257611] ? lock_acquire+0x170/0x3f0 [ 429.261587] ? lock_downgrade+0x740/0x740 [ 429.265737] ? __might_fault+0x104/0x1b0 [ 429.269798] ? lock_acquire+0x170/0x3f0 [ 429.273778] __sys_sendmmsg+0x129/0x330 [ 429.277751] ? SyS_sendmsg+0x40/0x40 [ 429.281477] ? __mutex_unlock_slowpath+0x75/0x770 [ 429.286320] ? wait_for_completion_io+0x10/0x10 [ 429.291072] ? vfs_write+0x319/0x4d0 [ 429.294782] ? fput+0xb/0x140 [ 429.297882] ? SyS_write+0x14d/0x210 [ 429.301594] ? SyS_read+0x210/0x210 [ 429.305219] SyS_sendmmsg+0x2f/0x50 [ 429.308838] ? __sys_sendmmsg+0x330/0x330 [ 429.312982] do_syscall_64+0x1d5/0x640 [ 429.316870] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 429.322053] RIP: 0033:0x45d5b9 [ 429.325235] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 429.332940] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 429.340204] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 429.347472] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 23:15:48 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fdatasync(r4) fchmod(0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000580)={{0x0, 0x0, 0x0, 0x0, '\x00', 0x322}, 0x0, [0x5, 0x89, 0x0, 0x7, 0x4, 0x0, 0x5, 0x233a, 0x5, 0xffffffffffffff71, 0x0, 0x10000, 0x7fff, 0x0, 0x0, 0x9, 0xaf03, 0x2, 0x0, 0xc, 0x0, 0x1, 0x8001, 0x0, 0x5, 0x2020000000, 0x7, 0x20, 0x5, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0xd, 0xfffffffffffffffc, 0x29e4, 0x400, 0x0, 0x5, 0xfffffffffffff47d, 0x2d1b, 0xa1, 0x7fff, 0x0, 0x2, 0x81, 0x0, 0x0, 0x20, 0x0, 0x1, 0x5, 0x2, 0x8, 0x55c, 0x0, 0x8, 0x1, 0x80, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4000000000000008, 0x0, 0x0, 0xa4, 0x7, 0x80000001, 0x0, 0x7, 0x0, 0x0, 0x10001, 0x4fdf, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x6, 0xfffffffffffffffe, 0xff, 0x4, 0x0, 0x100000000, 0x80, 0x0, 0x5, 0x0, 0x10000, 0x0, 0x5, 0x38, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffff80, 0x0, 0x5, 0x3, 0x0, 0x8, 0x100000000]}) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x100007, r4, 0x9}) 23:15:48 executing program 2: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./bus\x00', 0x10000000079d7, 0x0, &(0x7f0000000300), 0x90, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x63) sendfile(r1, r2, 0x0, 0xffffffff) ftruncate(r0, 0x0) [ 429.350819] overlayfs: unrecognized mount option "appraise_type=imasig" or missing value [ 429.354732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000011 [ 429.354739] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c [ 429.430520] FAT-fs (loop2): bogus number of reserved sectors [ 429.437022] audit: type=1804 audit(1598742948.118:242): pid=28404 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir455499395/syzkaller.9kqCz4/857/bus" dev="sda1" ino=17176 res=1 [ 429.439302] FAT-fs (loop2): Can't find a valid FAT filesystem 23:15:48 executing program 1: openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2321202e2f9591f466696c653020f014d378070009efbe1ee98dffce67f7543136b003ea0400000000000092290a7ea290ab0e744623f2b4fd86324ac228b0aebd12d1d2417234a803e7c6744faa3dbbd7d94fbbcbbc419a02b0c4fd8e69f2a9831d8271c8a82be068da91168188b86dce381ed48eb7e0d889993c3b8be49f7ce0505f23c460ea3a3b4a2f0057970182c37e1096f05f8451ea14e89fb4557254845d8d"], 0x194) close(r0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, 0xfffffffffffffffd) [ 429.500449] audit: type=1804 audit(1598742948.148:243): pid=28404 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir455499395/syzkaller.9kqCz4/857/bus" dev="sda1" ino=17176 res=1 [ 429.570719] FAT-fs (loop2): bogus number of reserved sectors [ 429.581581] FAT-fs (loop2): Can't find a valid FAT filesystem 23:15:48 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) symlink(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='./bus/file1\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000300)={0x0, 0x3f, 0x1, 0x200, 0x0, 0x9, 0x37a, 0x6, 0x4, 0x1000, 0xef, 0x1}) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYRES64]) unlink(&(0x7f00000003c0)='./bus/file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0xfffffffffffffff7) unlink(&(0x7f0000000040)='./bus/file1\x00') [ 429.612501] audit: type=1804 audit(1598742948.288:244): pid=28397 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir455499395/syzkaller.9kqCz4/857/bus" dev="sda1" ino=17176 res=1 23:15:48 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e000902000000000000000007"], 0x28}}, 0x0) socket(0x0, 0x3, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) 23:15:48 executing program 5 (fault-call:2 fault-nth:18): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:15:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374"], 0x34}}, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000000040)="bb", 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b005) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={r4, 0x3, 0x30}, 0xc) [ 429.642737] audit: type=1804 audit(1598742948.318:245): pid=28397 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir455499395/syzkaller.9kqCz4/857/bus" dev="sda1" ino=17176 res=1 [ 429.742060] FAULT_INJECTION: forcing a failure. [ 429.742060] name failslab, interval 1, probability 0, space 0, times 0 [ 429.765818] overlayfs: unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 429.774712] CPU: 1 PID: 28428 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 429.782610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.791966] Call Trace: [ 429.794564] dump_stack+0x1b2/0x283 [ 429.798316] should_fail.cold+0x10a/0x154 [ 429.802470] should_failslab+0xd6/0x130 [ 429.806449] kmem_cache_alloc+0x28e/0x3c0 [ 429.810594] __kernfs_new_node+0x6f/0x470 [ 429.814738] kernfs_new_node+0x7b/0xe0 [ 429.818626] kernfs_create_link+0x27/0x155 [ 429.822864] sysfs_do_create_link_sd+0x90/0x120 [ 429.827528] sysfs_create_link+0x5f/0xc0 [ 429.831570] device_add+0x6df/0x1510 [ 429.835279] ? device_is_dependent+0x270/0x270 [ 429.839860] netdev_register_kobject+0x17d/0x3a0 [ 429.844601] register_netdevice+0x955/0xe40 [ 429.848905] ? netdev_change_features+0xa0/0xa0 [ 429.853555] ipvlan_link_new+0x499/0xfa0 [ 429.857598] rtnl_newlink+0xf88/0x1830 [ 429.861466] ? __lock_acquire+0x5fc/0x3f20 [ 429.865723] ? ipvlan_port_destroy+0x3f0/0x3f0 [ 429.870318] ? kmem_cache_free+0x7c/0x2b0 [ 429.874444] ? rtnl_dellink+0x6a0/0x6a0 [ 429.878396] ? trace_hardirqs_on+0x10/0x10 [ 429.882609] ? lock_acquire+0x170/0x3f0 [ 429.886583] ? lock_acquire+0x170/0x3f0 [ 429.890534] ? lock_downgrade+0x740/0x740 [ 429.894660] ? rtnl_dellink+0x6a0/0x6a0 [ 429.898623] rtnetlink_rcv_msg+0x3be/0xb10 [ 429.902846] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 429.907336] ? perf_trace_lock+0xf7/0x490 [ 429.911460] ? netdev_pick_tx+0x2e0/0x2e0 [ 429.915590] netlink_rcv_skb+0x125/0x390 [ 429.919631] ? memcpy+0x35/0x50 [ 429.922888] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 429.927362] ? netlink_ack+0x9a0/0x9a0 [ 429.931236] netlink_unicast+0x437/0x610 [ 429.935289] ? netlink_sendskb+0xd0/0xd0 [ 429.939360] netlink_sendmsg+0x62e/0xb80 [ 429.943404] ? nlmsg_notify+0x170/0x170 [ 429.947360] ? kernel_recvmsg+0x210/0x210 [ 429.951490] ? security_socket_sendmsg+0x83/0xb0 [ 429.956276] ? nlmsg_notify+0x170/0x170 [ 429.960246] sock_sendmsg+0xb5/0x100 [ 429.963952] ___sys_sendmsg+0x326/0x800 [ 429.968080] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 429.972898] ? check_preemption_disabled+0x35/0x240 [ 429.977909] ? perf_trace_lock_acquire+0x510/0x510 [ 429.982843] ? perf_trace_lock+0xf7/0x490 [ 429.986972] ? check_preemption_disabled+0x35/0x240 [ 429.991969] ? perf_trace_lock+0xf7/0x490 [ 429.996096] ? __fget+0x1fe/0x360 [ 429.999527] ? perf_trace_lock_acquire+0x510/0x510 [ 430.004436] ? lock_acquire+0x170/0x3f0 [ 430.008400] ? lock_downgrade+0x740/0x740 [ 430.012529] ? __might_fault+0x104/0x1b0 [ 430.016589] ? lock_acquire+0x170/0x3f0 [ 430.020548] __sys_sendmmsg+0x129/0x330 [ 430.024506] ? SyS_sendmsg+0x40/0x40 [ 430.028209] ? __mutex_unlock_slowpath+0x75/0x770 [ 430.033032] ? wait_for_completion_io+0x10/0x10 [ 430.037682] ? vfs_write+0x319/0x4d0 [ 430.041383] ? fput+0xb/0x140 [ 430.044476] ? SyS_write+0x14d/0x210 [ 430.048177] ? SyS_read+0x210/0x210 [ 430.051792] SyS_sendmmsg+0x2f/0x50 [ 430.055519] ? __sys_sendmmsg+0x330/0x330 [ 430.059646] do_syscall_64+0x1d5/0x640 [ 430.063517] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 430.068686] RIP: 0033:0x45d5b9 [ 430.071851] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 430.079537] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 23:15:48 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 23:15:48 executing program 5 (fault-call:2 fault-nth:19): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) [ 430.086785] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 430.094053] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 [ 430.101304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 430.108585] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c [ 430.127649] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 23:15:48 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="230b202e2f66696c653020e2314ac966879f96d4d96bf036b003ea0400000000925bef60b4001d81c85400"], 0x194) close(r0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000240)={{0xa, 0x4e20, 0x10001, @dev={0xfe, 0x80, [], 0x1a}, 0x7}, {0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10001}, 0x0, [0x3aad, 0x400, 0x2, 0x9, 0x7, 0x10000, 0x7fffffff, 0xad6]}, 0x5c) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(0xffffffffffffffff) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyprintk\x00', 0x20080, 0x0) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000180)) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000100)={0x4, 0x4, 0x2, 0x1, 0x5, 0x8000}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400070e00002502006694ab749aff554b256a00f9ffffffff08000000b51843a8ff8734f62c453813a2d68123dc87f98bd1000000e27fa895180426ea8ff601001000"], 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x20000000) [ 430.181312] overlayfs: unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 430.199485] ip_tables: iptables: counters copy to user failed while replacing table 23:15:48 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "b04a253d3a44a6d9", "66a469ad0671cb39eb4f91328e466505", "d54d4eaf", "c182973372900fc9"}, 0x28) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='cgroup.clone_children\x00', 0x2, 0x0) syz_mount_image$ocfs2(&(0x7f0000000100)='ocfs2\x00', &(0x7f0000000180)='./file0\x00', 0x2, 0x7, &(0x7f0000000680)=[{&(0x7f0000000200)="8eb4134cade0d3914e1f761197d0f35ebc9d6bcb3b75b0d44a17944431af7c3643c3a61cf90999faa2763e6641810c3245756d6b33183342c3335396c0c3b57fed2d343702e3b4da8b4703fb613fbc8d11d5533d9a2b61b91279c081e3dec66c117ba29a17031111d266e98aeef6b0aa2e3d014a560c0d64fa5c8e4cc7", 0x7d, 0xff}, {&(0x7f0000000300)="7a492339125f21ac1ff8df60b62fd9b6974bab235459743e13b22ae49fa535cd09ef3b2b54f107a05f7087c13d2cfa63c16aff", 0x33, 0x6}, {&(0x7f0000000400)="9cc43a457c8427364c5744485a3cbc1a1a446b25568aa13fc1b7f7899cd36c17a4d4155261f5868b4defdbffe8c0223b7eae85c0349c5df28d4811c126b4d47ffc4d9e7e30e0ef02541d85dd6761973b1205c41b512ceec192f743519d4517f07761fefad39d72d4094f379257754fefea1e7b8b3ed72be759d4693d36f5f32628460f65d4ab42c8de4848f5dd15efb7e75f3e167f35c78783d6894714a63fbc379bc0c0e4c1a68583ee40369588bb887cdd0d9cd98393a60b6adcb31d27cea4b09524d0a3ee83f84c66152c3c35b1194cf92b7a5e5b094d315ebdff2a6014a7d8e722533b8aafe2f9682c69a7df742af0cdc59ad3d09a59", 0xf8, 0xdb8a}, {&(0x7f0000000340)="30131a7e5d1a49f0a6a9bf60ff2e1de3201003b3238e10a74ac9ca2fbe53e34162027314e86e2ab9c392403b6ceb3d254c9e70371044a027eb4ca9671473094e664f15c34392f396b3350c2aae25cb9566", 0x51, 0x7fffffff}, {&(0x7f0000000500)="b287d57557ac9eb37a6d5465fba44ac2697e024009948c4139a2f508d22585e106ebcf65aca112beb0683ab19b1100e3ce6eead9a1a28c5059f2696ac35d5863eb937d6cfbacecf652c716a6f9e720180804fb5aa267fb369596f09d183371e511bffe4b23f907a5737e361d4ad11e342a5913191e0057e9d730472ca0fcd5f0f1b49e4681312e5d1335959534", 0x8d, 0x952c}, {&(0x7f00000005c0), 0x0, 0xff}, {&(0x7f0000000600)="4c86a69368dc9ee4e26dbf460b70401dc20f4c0c08a83d207f78baa895b77dffd8d3d4bf4c72538b4cd75da16fc8f6e9c20e1e0a121a1899bebf0bc3832d01a6f265508be25b19a760733c98912e8cab19efd5b03548ca107fc2018682188f4104c6735f1012eb253e6d7bb8df", 0x6d, 0x8}], 0x20, &(0x7f0000000740)='cgroup.clone_children\x00') writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)='0', 0x1}, {&(0x7f00000003c0)='7', 0x1}], 0x2) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000780)={[], 0x1, 0x1, 0x6, 0x0, 0x1, 0x5000, 0xd000, [], 0x9}) 23:15:48 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e000902000000000000000007"], 0x28}}, 0x0) socket(0x0, 0x3, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) [ 430.231708] FAULT_INJECTION: forcing a failure. [ 430.231708] name failslab, interval 1, probability 0, space 0, times 0 23:15:49 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x40018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}, 0x200, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext={0xefa4}, 0x4200, 0x0, 0x4, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\r\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000008000100753332000c00020008000b0003000000"], 0x38}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f00000002c0)=""/128) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400007, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r4, &(0x7f0000004500)=""/4100, 0x1004) [ 430.302855] CPU: 1 PID: 28444 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 430.310781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.320142] Call Trace: [ 430.322738] dump_stack+0x1b2/0x283 [ 430.326377] should_fail.cold+0x10a/0x154 [ 430.330539] should_failslab+0xd6/0x130 [ 430.334522] kmem_cache_alloc+0x28e/0x3c0 [ 430.338680] __kernfs_new_node+0x6f/0x470 [ 430.342865] kernfs_new_node+0x7b/0xe0 [ 430.346767] kernfs_create_link+0x27/0x155 [ 430.351006] sysfs_do_create_link_sd+0x90/0x120 [ 430.355683] sysfs_create_link+0x5f/0xc0 [ 430.359749] device_add+0x6df/0x1510 [ 430.363474] ? device_is_dependent+0x270/0x270 [ 430.368069] netdev_register_kobject+0x17d/0x3a0 [ 430.372830] register_netdevice+0x955/0xe40 [ 430.377166] ? netdev_change_features+0xa0/0xa0 [ 430.381845] ipvlan_link_new+0x499/0xfa0 [ 430.385913] rtnl_newlink+0xf88/0x1830 [ 430.389804] ? __lock_acquire+0x5fc/0x3f20 [ 430.394051] ? ipvlan_port_destroy+0x3f0/0x3f0 [ 430.398636] ? kmem_cache_free+0x7c/0x2b0 [ 430.402796] ? rtnl_dellink+0x6a0/0x6a0 [ 430.406778] ? trace_hardirqs_on+0x10/0x10 [ 430.411016] ? lock_acquire+0x170/0x3f0 [ 430.415120] ? lock_acquire+0x170/0x3f0 [ 430.419107] ? lock_downgrade+0x740/0x740 [ 430.423258] ? rtnl_dellink+0x6a0/0x6a0 [ 430.427233] rtnetlink_rcv_msg+0x3be/0xb10 [ 430.431474] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 430.433171] new mount options do not match the existing superblock, will be ignored [ 430.435968] ? perf_trace_lock+0xf7/0x490 [ 430.435980] ? netdev_pick_tx+0x2e0/0x2e0 [ 430.435997] netlink_rcv_skb+0x125/0x390 [ 430.436007] ? memcpy+0x35/0x50 [ 430.436018] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 430.436029] ? netlink_ack+0x9a0/0x9a0 [ 430.436048] netlink_unicast+0x437/0x610 [ 430.471866] ? netlink_sendskb+0xd0/0xd0 [ 430.475959] netlink_sendmsg+0x62e/0xb80 [ 430.480125] ? nlmsg_notify+0x170/0x170 [ 430.484155] ? kernel_recvmsg+0x210/0x210 [ 430.488294] ? security_socket_sendmsg+0x83/0xb0 [ 430.493040] ? nlmsg_notify+0x170/0x170 [ 430.497006] sock_sendmsg+0xb5/0x100 [ 430.500701] ___sys_sendmsg+0x326/0x800 [ 430.504666] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 430.509412] ? check_preemption_disabled+0x35/0x240 [ 430.514421] ? perf_trace_lock_acquire+0x510/0x510 [ 430.519341] ? perf_trace_lock+0xf7/0x490 [ 430.523484] ? check_preemption_disabled+0x35/0x240 [ 430.528488] ? perf_trace_lock+0xf7/0x490 [ 430.532689] ? __fget+0x1fe/0x360 [ 430.536144] ? perf_trace_lock_acquire+0x510/0x510 [ 430.541053] ? lock_acquire+0x170/0x3f0 [ 430.545008] ? lock_downgrade+0x740/0x740 [ 430.549137] ? __might_fault+0x104/0x1b0 [ 430.553181] ? lock_acquire+0x170/0x3f0 [ 430.557141] __sys_sendmmsg+0x129/0x330 [ 430.561095] ? SyS_sendmsg+0x40/0x40 [ 430.564799] ? __mutex_unlock_slowpath+0x75/0x770 [ 430.569623] ? wait_for_completion_io+0x10/0x10 [ 430.574275] ? vfs_write+0x319/0x4d0 [ 430.577971] ? fput+0xb/0x140 [ 430.581055] ? SyS_write+0x14d/0x210 [ 430.584748] ? SyS_read+0x210/0x210 [ 430.588355] SyS_sendmmsg+0x2f/0x50 [ 430.591983] ? __sys_sendmmsg+0x330/0x330 [ 430.596122] do_syscall_64+0x1d5/0x640 [ 430.599993] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 430.605160] RIP: 0033:0x45d5b9 [ 430.608327] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 430.616015] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 430.623276] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 430.630525] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 [ 430.637776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 430.645025] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c 23:15:49 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f0000000100)=[@register_looper, @exit_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x3, 0x1, 0x10}, @fd={0x66642a85, 0x0, r0}, @flat=@weak_handle}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}, 0x400}], 0x25, 0x0, &(0x7f0000000180)="1bab231d1965fb1e272c0813a1b7831d7c14ad0600a9bba14391bb293248a49f23f3a1e2b7"}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000320025020000000000000000000000000c00020400000010000121090001006761633b000000000000000000"], 0x34}}, 0x0) 23:15:49 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$setlease(r0, 0x400, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x7, 0x181000) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f00000000c0)) rename(&(0x7f0000fdbff8)='./file0\x00', &(0x7f0000000000)='./file1\x00') 23:15:49 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0xa, 0xc) dup2(r2, r0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x5}}, 0x14}}, 0xc844) fremovexattr(r2, &(0x7f0000000000)=@known='system.sockprotoname\x00') sendmmsg$alg(r2, &(0x7f0000000140), 0xffffffffffffff68, 0x0) [ 430.681311] new mount options do not match the existing superblock, will be ignored [ 430.713714] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 23:15:49 executing program 5 (fault-call:2 fault-nth:20): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) [ 430.796101] FAULT_INJECTION: forcing a failure. [ 430.796101] name failslab, interval 1, probability 0, space 0, times 0 [ 430.830738] CPU: 0 PID: 28482 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 430.838656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.848010] Call Trace: [ 430.850603] dump_stack+0x1b2/0x283 [ 430.854239] should_fail.cold+0x10a/0x154 [ 430.855063] kauditd_printk_skb: 1 callbacks suppressed [ 430.855072] audit: type=1804 audit(1598742949.518:247): pid=28484 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir866703277/syzkaller.wkWSq8/883/file0" dev="sda1" ino=17174 res=1 [ 430.858386] should_failslab+0xd6/0x130 [ 430.891382] kmem_cache_alloc+0x28e/0x3c0 [ 430.895538] __kernfs_new_node+0x6f/0x470 [ 430.899694] kernfs_new_node+0x7b/0xe0 [ 430.903585] __kernfs_create_file+0x3d/0x320 [ 430.907995] sysfs_add_file_mode_ns+0x1e1/0x450 [ 430.912666] internal_create_group+0x22b/0x710 [ 430.917254] sysfs_create_groups+0x92/0x127 [ 430.921578] device_add+0x77b/0x1510 [ 430.925296] ? device_is_dependent+0x270/0x270 [ 430.929883] netdev_register_kobject+0x17d/0x3a0 [ 430.934641] register_netdevice+0x955/0xe40 [ 430.938964] ? netdev_change_features+0xa0/0xa0 [ 430.943640] ipvlan_link_new+0x499/0xfa0 [ 430.947710] rtnl_newlink+0xf88/0x1830 [ 430.951598] ? __lock_acquire+0x5fc/0x3f20 [ 430.955841] ? ipvlan_port_destroy+0x3f0/0x3f0 [ 430.960421] ? kmem_cache_free+0x7c/0x2b0 [ 430.964569] ? rtnl_dellink+0x6a0/0x6a0 [ 430.968541] ? trace_hardirqs_on+0x10/0x10 [ 430.972775] ? lock_acquire+0x170/0x3f0 [ 430.976793] ? lock_acquire+0x170/0x3f0 [ 430.980767] ? lock_downgrade+0x740/0x740 [ 430.984916] ? rtnl_dellink+0x6a0/0x6a0 [ 430.988887] rtnetlink_rcv_msg+0x3be/0xb10 [ 430.993126] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 430.997627] ? perf_trace_lock+0xf7/0x490 [ 431.001773] ? netdev_pick_tx+0x2e0/0x2e0 [ 431.005927] netlink_rcv_skb+0x125/0x390 [ 431.009983] ? memcpy+0x35/0x50 [ 431.013265] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 431.017760] ? netlink_ack+0x9a0/0x9a0 [ 431.021659] netlink_unicast+0x437/0x610 [ 431.025729] ? netlink_sendskb+0xd0/0xd0 [ 431.029790] netlink_sendmsg+0x62e/0xb80 [ 431.033856] ? nlmsg_notify+0x170/0x170 [ 431.037832] ? kernel_recvmsg+0x210/0x210 [ 431.041982] ? security_socket_sendmsg+0x83/0xb0 [ 431.046735] ? nlmsg_notify+0x170/0x170 [ 431.050706] sock_sendmsg+0xb5/0x100 [ 431.054420] ___sys_sendmsg+0x326/0x800 [ 431.058396] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 431.063149] ? check_preemption_disabled+0x35/0x240 [ 431.068165] ? perf_trace_lock_acquire+0x510/0x510 [ 431.073092] ? perf_trace_lock+0xf7/0x490 [ 431.077245] ? check_preemption_disabled+0x35/0x240 [ 431.082263] ? perf_trace_lock+0xf7/0x490 [ 431.086414] ? __fget+0x1fe/0x360 [ 431.089867] ? perf_trace_lock_acquire+0x510/0x510 [ 431.094792] ? lock_acquire+0x170/0x3f0 [ 431.098765] ? lock_downgrade+0x740/0x740 [ 431.102913] ? __might_fault+0x104/0x1b0 [ 431.106976] ? lock_acquire+0x170/0x3f0 [ 431.110959] __sys_sendmmsg+0x129/0x330 [ 431.114931] ? SyS_sendmsg+0x40/0x40 [ 431.118659] ? __mutex_unlock_slowpath+0x75/0x770 [ 431.123501] ? wait_for_completion_io+0x10/0x10 [ 431.128168] ? vfs_write+0x319/0x4d0 [ 431.131880] ? fput+0xb/0x140 [ 431.134984] ? SyS_write+0x14d/0x210 [ 431.138692] ? SyS_read+0x210/0x210 [ 431.142318] SyS_sendmmsg+0x2f/0x50 [ 431.145940] ? __sys_sendmmsg+0x330/0x330 [ 431.150084] do_syscall_64+0x1d5/0x640 [ 431.153978] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 431.159160] RIP: 0033:0x45d5b9 [ 431.162344] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 431.170052] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 431.177320] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 431.184589] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 [ 431.191863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 431.199136] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c 23:15:49 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:15:49 executing program 5 (fault-call:2 fault-nth:21): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) [ 431.247437] audit: type=1804 audit(1598742949.928:248): pid=28484 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir866703277/syzkaller.wkWSq8/883/file0" dev="sda1" ino=17160 res=1 23:15:50 executing program 1: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x3f6958feadd1b0b1, 0x0, 0x4e24}, 0x6e) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000003100010000000000000000340004000a0001007065fa2a740000000800038004000500040006000c00070000000000000000000c0008000000000000000000"], 0x4c}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(0xffffffffffffffff) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x81000) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x2, 0x1, 0xfffb, 0x0, 0x400000000}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r2, r3, &(0x7f00000003c0)=0x202, 0x4000000000dc) dup2(r2, 0xffffffffffffffff) setgid(0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[@ANYBLOB="64000000d78729b32708fb58ff56494c966c9511090c850c829992751bbf08af61f07f721ec72b9880c2f0f05c785eb7", @ANYRES16=r4, @ANYBLOB="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"], 0x64}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x24, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4010) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="889f49c1", @ANYRES16=r4, @ANYBLOB="00012abd7000fedbdf25080000000500010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4003}, 0x4000891) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="03000000", @ANYRES16=r4, @ANYBLOB="00012abd7000ffdbdf250600000008000400e00000010800050000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4040041}, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)=ANY=[@ANYBLOB="584cdeff", @ANYRES16=r4, @ANYBLOB="00022abd7000fcdbdf25010000002a00070073797374656d5f753a6f626a6563745f723a6d6f64756c65735f6f626a6563745f743a733000000008000400ac14143e08000500000000000500010000000000"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0xd}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x44095) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20402040}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r4, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hwclock_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}]}, 0x74}, 0x1, 0x0, 0x0, 0x20048040}, 0x15) 23:15:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2b22, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x20000000000000d8) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x4, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x7, 0x86}, 0x204, 0x0, 0x0, 0x2, 0x400, 0x0, 0x9b13}, 0x0, 0x0, r0, 0x1) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000000040)="bb", 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b005) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r5, 0x9}, 0x8) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x103000, 0x0) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000040)=0x1) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r8, r6, 0x0, 0x20000000000000d8) 23:15:50 executing program 0: ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendto$x25(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374"], 0x34}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r2, 0x3fd, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x80ffff}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x1c}}, 0x11) 23:15:50 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x5423, &(0x7f0000000000)={0x4, 0xffffffff, 0x0, 0xfffffffc, 0x0, "9d0000000000000000000000001000", 0x91, 0x1}) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x89f0, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, "0816d15891bcf9b86bd4430cee7edcf3d70100"}) [ 431.359149] ip_tables: iptables: counters copy to user failed while replacing table [ 431.383170] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 431.438004] tc_ctl_action: received NO action attribs [ 431.444217] FAULT_INJECTION: forcing a failure. [ 431.444217] name failslab, interval 1, probability 0, space 0, times 0 [ 431.478734] CPU: 1 PID: 28499 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 431.486651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.496011] Call Trace: [ 431.498608] dump_stack+0x1b2/0x283 [ 431.502247] should_fail.cold+0x10a/0x154 [ 431.506407] should_failslab+0xd6/0x130 [ 431.510388] kmem_cache_alloc+0x28e/0x3c0 [ 431.514542] __kernfs_new_node+0x6f/0x470 [ 431.518697] kernfs_new_node+0x7b/0xe0 [ 431.522590] __kernfs_create_file+0x3d/0x320 [ 431.527004] sysfs_add_file_mode_ns+0x1e1/0x450 [ 431.531684] internal_create_group+0x22b/0x710 [ 431.536278] sysfs_create_groups+0x92/0x127 [ 431.540622] device_add+0x77b/0x1510 [ 431.544338] ? device_is_dependent+0x270/0x270 [ 431.548928] netdev_register_kobject+0x17d/0x3a0 [ 431.553689] register_netdevice+0x955/0xe40 [ 431.558016] ? netdev_change_features+0xa0/0xa0 [ 431.562690] ipvlan_link_new+0x499/0xfa0 [ 431.566754] rtnl_newlink+0xf88/0x1830 [ 431.570649] ? ipvlan_port_destroy+0x3f0/0x3f0 [ 431.575229] ? check_preemption_disabled+0x35/0x240 [ 431.580239] ? rtnl_dellink+0x6a0/0x6a0 [ 431.584472] ? perf_trace_lock+0xf7/0x490 [ 431.588615] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 431.593669] ? rtnl_dellink+0x6a0/0x6a0 [ 431.597638] rtnetlink_rcv_msg+0x3be/0xb10 [ 431.601871] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 431.606367] ? perf_trace_lock+0xf7/0x490 [ 431.610510] ? netdev_pick_tx+0x2e0/0x2e0 [ 431.614662] netlink_rcv_skb+0x125/0x390 [ 431.618718] ? memcpy+0x35/0x50 [ 431.622009] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 431.626518] ? netlink_ack+0x9a0/0x9a0 [ 431.630411] netlink_unicast+0x437/0x610 [ 431.634469] ? netlink_sendskb+0xd0/0xd0 [ 431.638531] netlink_sendmsg+0x62e/0xb80 [ 431.642589] ? nlmsg_notify+0x170/0x170 [ 431.646554] ? kernel_recvmsg+0x210/0x210 [ 431.650695] ? security_socket_sendmsg+0x83/0xb0 [ 431.655444] ? nlmsg_notify+0x170/0x170 [ 431.659414] sock_sendmsg+0xb5/0x100 [ 431.663122] ___sys_sendmsg+0x326/0x800 [ 431.667092] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 431.671846] ? check_preemption_disabled+0x35/0x240 [ 431.676860] ? perf_trace_lock_acquire+0x510/0x510 [ 431.681786] ? perf_trace_lock+0xf7/0x490 [ 431.685925] ? check_preemption_disabled+0x35/0x240 [ 431.690941] ? perf_trace_lock+0xf7/0x490 [ 431.695084] ? __fget+0x1fe/0x360 [ 431.698535] ? perf_trace_lock_acquire+0x510/0x510 [ 431.703457] ? lock_acquire+0x170/0x3f0 [ 431.707423] ? lock_downgrade+0x740/0x740 [ 431.711565] ? __might_fault+0x104/0x1b0 [ 431.715640] ? lock_acquire+0x170/0x3f0 [ 431.719621] __sys_sendmmsg+0x129/0x330 [ 431.723589] ? SyS_sendmsg+0x40/0x40 [ 431.727316] ? __mutex_unlock_slowpath+0x75/0x770 [ 431.732153] ? wait_for_completion_io+0x10/0x10 [ 431.736816] ? vfs_write+0x319/0x4d0 [ 431.740524] ? fput+0xb/0x140 [ 431.743627] ? SyS_write+0x14d/0x210 [ 431.747359] ? SyS_read+0x210/0x210 [ 431.750988] SyS_sendmmsg+0x2f/0x50 [ 431.754622] ? __sys_sendmmsg+0x330/0x330 [ 431.754635] do_syscall_64+0x1d5/0x640 [ 431.754653] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 431.767829] RIP: 0033:0x45d5b9 [ 431.771019] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 431.778734] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 431.786019] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 23:15:50 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:15:50 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="0100000074575b2400defffff701000100", @ANYRES32, @ANYBLOB="00000000ffffffff000000000700010066710000340002000800050004"], 0x60}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 23:15:50 executing program 5 (fault-call:2 fault-nth:22): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:15:50 executing program 2: getsockname$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x6) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000004c0)={0x0, "8d9a11cfb04f2fc1819965be344bfd6c"}) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000100)={0x8, 0x2f0b, 0x10001, 0x2, 0x80000000, 0x8}) ioprio_get$pid(0x2, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00820c1000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500070006000000"], 0x3c}}, 0x0) 23:15:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374"], 0x34}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r2) getgroups(0x2, &(0x7f0000000100)=[0xee00, 0xee01]) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000400)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="ee29858859f7d1991dfed2edbdb10bd8b50cb000", @ANYRES16=r4, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="05003e00"], 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x44014) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x24, r4, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x693}, @NL80211_ATTR_STA_VLAN={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x10) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x80, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6fd4f1746d6f64653d3030303030303030303030309a303030303031303030302c757365725f69", @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB=',allow_other,allow_other,default_permissions,max_read=0x0000000000000020,blksize=0x0000000000000000,smackfshat=&[$^!,obj_role=^\'*%!,subj_role=-\'-,appraise_type=imasig,subj_user=,\x00']) 23:15:50 executing program 5 (fault-call:2 fault-nth:23): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) [ 431.786025] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 [ 431.786031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 431.786037] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c [ 431.816072] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 431.816079] tc_ctl_action: received NO action attribs [ 431.910923] FAULT_INJECTION: forcing a failure. [ 431.910923] name failslab, interval 1, probability 0, space 0, times 0 [ 431.910936] CPU: 0 PID: 28525 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 431.910943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.910954] Call Trace: [ 431.910971] dump_stack+0x1b2/0x283 [ 431.910990] should_fail.cold+0x10a/0x154 [ 431.911009] should_failslab+0xd6/0x130 [ 431.911020] kmem_cache_alloc+0x28e/0x3c0 [ 431.911035] __kernfs_new_node+0x6f/0x470 [ 431.911052] kernfs_new_node+0x7b/0xe0 [ 431.911064] __kernfs_create_file+0x3d/0x320 [ 431.911077] sysfs_add_file_mode_ns+0x1e1/0x450 [ 431.911093] internal_create_group+0x22b/0x710 [ 431.911109] sysfs_create_groups+0x92/0x127 [ 431.911122] device_add+0x77b/0x1510 [ 431.911136] ? device_is_dependent+0x270/0x270 [ 431.911154] netdev_register_kobject+0x17d/0x3a0 [ 431.911168] register_netdevice+0x955/0xe40 [ 431.911182] ? netdev_change_features+0xa0/0xa0 [ 431.911199] ipvlan_link_new+0x499/0xfa0 [ 431.911216] rtnl_newlink+0xf88/0x1830 [ 431.911228] ? __lock_acquire+0x5fc/0x3f20 [ 431.911248] ? ipvlan_port_destroy+0x3f0/0x3f0 [ 431.911257] ? kmem_cache_free+0x7c/0x2b0 [ 431.911267] ? rtnl_dellink+0x6a0/0x6a0 [ 431.911277] ? trace_hardirqs_on+0x10/0x10 [ 431.911290] ? lock_acquire+0x170/0x3f0 [ 431.911346] ? lock_acquire+0x170/0x3f0 [ 431.911357] ? lock_downgrade+0x740/0x740 [ 431.911370] ? rtnl_dellink+0x6a0/0x6a0 [ 431.911382] rtnetlink_rcv_msg+0x3be/0xb10 [ 431.911396] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 431.911409] ? perf_trace_lock+0xf7/0x490 [ 431.911418] ? netdev_pick_tx+0x2e0/0x2e0 [ 431.911435] netlink_rcv_skb+0x125/0x390 [ 431.911444] ? memcpy+0x35/0x50 [ 431.911455] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 431.911467] ? netlink_ack+0x9a0/0x9a0 [ 431.911489] netlink_unicast+0x437/0x610 [ 431.911504] ? netlink_sendskb+0xd0/0xd0 [ 431.911520] netlink_sendmsg+0x62e/0xb80 [ 431.911542] ? nlmsg_notify+0x170/0x170 [ 431.911553] ? kernel_recvmsg+0x210/0x210 [ 431.911567] ? security_socket_sendmsg+0x83/0xb0 [ 431.911577] ? nlmsg_notify+0x170/0x170 [ 431.911588] sock_sendmsg+0xb5/0x100 [ 431.911601] ___sys_sendmsg+0x326/0x800 [ 431.911615] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 431.911628] ? check_preemption_disabled+0x35/0x240 [ 431.911642] ? perf_trace_lock_acquire+0x510/0x510 [ 431.911650] ? perf_trace_lock+0xf7/0x490 [ 431.911661] ? check_preemption_disabled+0x35/0x240 [ 431.911673] ? perf_trace_lock+0xf7/0x490 [ 431.911684] ? __fget+0x1fe/0x360 [ 431.911697] ? perf_trace_lock_acquire+0x510/0x510 [ 431.911706] ? lock_acquire+0x170/0x3f0 [ 431.911717] ? lock_downgrade+0x740/0x740 [ 431.911732] ? __might_fault+0x104/0x1b0 [ 431.911745] ? lock_acquire+0x170/0x3f0 [ 431.911765] __sys_sendmmsg+0x129/0x330 [ 431.911777] ? SyS_sendmsg+0x40/0x40 [ 431.911804] ? __mutex_unlock_slowpath+0x75/0x770 [ 431.911818] ? wait_for_completion_io+0x10/0x10 [ 431.911828] ? vfs_write+0x319/0x4d0 [ 431.911839] ? fput+0xb/0x140 [ 431.911849] ? SyS_write+0x14d/0x210 [ 431.911859] ? SyS_read+0x210/0x210 [ 431.911870] SyS_sendmmsg+0x2f/0x50 [ 431.911878] ? __sys_sendmmsg+0x330/0x330 [ 431.911889] do_syscall_64+0x1d5/0x640 [ 431.911907] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 431.911915] RIP: 0033:0x45d5b9 [ 431.911921] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 431.911932] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 431.911938] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 431.911944] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 [ 431.911949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 431.911955] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c 23:15:50 executing program 2: clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_settime(0x2, &(0x7f0000000140)={r0, r1+60000000}) finit_module(0xffffffffffffffff, &(0x7f00000000c0)='syzkaller\x00', 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x240000, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f00000001c0)={0x1, 0xdc41}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xc00c1ca) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x4, 0x2, 0x6, 0xa, 0x0, 0x0, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x2}, 0x10}, 0x78) 23:15:50 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r2) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000000c0)={0x2005, 0x1b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r6}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000000)={r7}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000380)={r7}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) close(r1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x275a, 0x0) r9 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x400, 0x80000) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000003c0)={0x1, 0x0, 0x200, 0x2, 0x4, 0x1000, 0x1, 0xff}, 0x20) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r9, 0xc0505510, &(0x7f0000000300)={0x1, 0x9, 0x6, 0x3ff, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) dup3(r8, r0, 0x0) 23:15:51 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x30}, 0x40400, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x1) r1 = signalfd4(r0, &(0x7f0000002080), 0x8, 0x800) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000020c0)={0x0, 0x2}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) getresgid(0x0, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000002040)={0x28, 0x0, r2, {{0x1, 0x2ee5, 0x0, 0xffffffffffffffff}}}, 0x28) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB="a97bb9576df95730e6ebf5df2551ab73cef133dd73adbce994a64c4313681f5fe62ec3cad569eb1e042aa8f20f66b12fd7d1e33825de17e637d546db071b116cb12d4eb163b84e35f4e807e2d888f372dae9b421341b9e162842e1707b23eee14ebaaafaf00fd62d357938b4e2e629c8c7fd43b8c37ed814f273eb18d315ed478c871a98f5e5e5c53e3e8bb24b9c0f48278b2b217c1c6aca13c7b09b747e9c53383c6862e3946d06431525cbecb8d45c248bac62fb84bcbf497dd3250d5a6df4f0aa72a177c54920d82dc4a965b1f73b227478dd6329e56238408e3e481d3e44e70e64db8f4ec12269f43207dde42290ce68d5e1317fa17c7958a1575670845d717eb726e9af5ceac49599c0868bb3e0d8e6bc5807acdd3b452b0b712f1fe2fc2eb85154c1aa5e6dd4845bc0892da1b8c6cbc2aa116521486ead4889dc482bfb3239d9a4856e2eaa1664ebf8c51188b0edc896eb74c2551e95466b825bf0f00e8f6b1fb4337b1404c575c03aeb9e6b68feda66ca685c960b7326c1243a47959687ad4abb669561a866540be5e54bf493ac9cfc793972a7530d2c3c"]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000002240)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x2, 0x50000000000000, 0x6d, 0x7, 0x1, 0x4, 0x9, 0x7ff, 0x10000, 0x0, 0x100, 0x0, 0x0, 0x0, 0x77a}}}, 0x78) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000002140)={0x1fe, 0x0, &(0x7f0000219000/0x4000)=nil}) [ 431.940449] ip_tables: iptables: counters copy to user failed while replacing table [ 431.961822] FAULT_INJECTION: forcing a failure. [ 431.961822] name failslab, interval 1, probability 0, space 0, times 0 [ 432.357024] CPU: 0 PID: 28534 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 432.364931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 23:15:51 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:15:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x34}}, 0x4044000) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='gretap0\x00') [ 432.374294] Call Trace: [ 432.374311] dump_stack+0x1b2/0x283 [ 432.374327] should_fail.cold+0x10a/0x154 [ 432.374344] should_failslab+0xd6/0x130 [ 432.374355] kmem_cache_alloc+0x28e/0x3c0 [ 432.374370] __kernfs_new_node+0x6f/0x470 [ 432.374385] kernfs_new_node+0x7b/0xe0 [ 432.374396] __kernfs_create_file+0x3d/0x320 [ 432.374409] sysfs_add_file_mode_ns+0x1e1/0x450 [ 432.374425] internal_create_group+0x22b/0x710 [ 432.374441] sysfs_create_groups+0x92/0x127 [ 432.374453] device_add+0x77b/0x1510 [ 432.374467] ? device_is_dependent+0x270/0x270 [ 432.374486] netdev_register_kobject+0x17d/0x3a0 [ 432.374500] register_netdevice+0x955/0xe40 [ 432.374514] ? netdev_change_features+0xa0/0xa0 [ 432.374531] ipvlan_link_new+0x499/0xfa0 [ 432.374547] rtnl_newlink+0xf88/0x1830 [ 432.374560] ? __lock_acquire+0x5fc/0x3f20 [ 432.374579] ? ipvlan_port_destroy+0x3f0/0x3f0 [ 432.374587] ? kmem_cache_free+0x7c/0x2b0 [ 432.374597] ? rtnl_dellink+0x6a0/0x6a0 [ 432.374607] ? trace_hardirqs_on+0x10/0x10 [ 432.374619] ? lock_acquire+0x170/0x3f0 [ 432.374675] ? lock_acquire+0x170/0x3f0 [ 432.374685] ? lock_downgrade+0x740/0x740 [ 432.374697] ? rtnl_dellink+0x6a0/0x6a0 [ 432.374709] rtnetlink_rcv_msg+0x3be/0xb10 [ 432.374723] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 432.374736] ? perf_trace_lock+0xf7/0x490 [ 432.374744] ? netdev_pick_tx+0x2e0/0x2e0 [ 432.374761] netlink_rcv_skb+0x125/0x390 [ 432.374770] ? memcpy+0x35/0x50 [ 432.374780] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 432.374792] ? netlink_ack+0x9a0/0x9a0 [ 432.374819] netlink_unicast+0x437/0x610 [ 432.374834] ? netlink_sendskb+0xd0/0xd0 [ 432.374848] netlink_sendmsg+0x62e/0xb80 [ 432.374863] ? nlmsg_notify+0x170/0x170 [ 432.374872] ? kernel_recvmsg+0x210/0x210 [ 432.374885] ? security_socket_sendmsg+0x83/0xb0 [ 432.374894] ? nlmsg_notify+0x170/0x170 [ 432.374904] sock_sendmsg+0xb5/0x100 [ 432.374915] ___sys_sendmsg+0x326/0x800 [ 432.374928] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 432.374940] ? check_preemption_disabled+0x35/0x240 [ 432.374952] ? perf_trace_lock_acquire+0x510/0x510 [ 432.374960] ? perf_trace_lock+0xf7/0x490 [ 432.374970] ? check_preemption_disabled+0x35/0x240 [ 432.374982] ? perf_trace_lock+0xf7/0x490 [ 432.374992] ? __fget+0x1fe/0x360 [ 432.375005] ? perf_trace_lock_acquire+0x510/0x510 [ 432.375014] ? lock_acquire+0x170/0x3f0 [ 432.375025] ? lock_downgrade+0x740/0x740 [ 432.375039] ? __might_fault+0x104/0x1b0 [ 432.375051] ? lock_acquire+0x170/0x3f0 [ 432.375068] __sys_sendmmsg+0x129/0x330 [ 432.375078] ? SyS_sendmsg+0x40/0x40 [ 432.375104] ? __mutex_unlock_slowpath+0x75/0x770 [ 432.375116] ? wait_for_completion_io+0x10/0x10 [ 432.375127] ? vfs_write+0x319/0x4d0 [ 432.375137] ? fput+0xb/0x140 [ 432.375147] ? SyS_write+0x14d/0x210 [ 432.375156] ? SyS_read+0x210/0x210 [ 432.375168] SyS_sendmmsg+0x2f/0x50 [ 432.375176] ? __sys_sendmmsg+0x330/0x330 [ 432.375187] do_syscall_64+0x1d5/0x640 [ 432.375205] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 432.375213] RIP: 0033:0x45d5b9 [ 432.375218] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 432.375228] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 432.375234] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 432.375239] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 [ 432.375244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 432.375250] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c [ 432.437773] block nbd1: shutting down sockets [ 432.508354] ip_tables: iptables: counters copy to user failed while replacing table [ 433.100678] block nbd1: shutting down sockets 23:15:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x5423, &(0x7f0000000000)={0x4, 0xffffffff, 0x0, 0xfffffffc, 0x0, "9d0000000000000000000000001000", 0x91, 0x1}) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x89f0, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, "0816d15891bcf9b86bd4430cee7edcf3d70100"}) 23:15:51 executing program 5 (fault-call:2 fault-nth:24): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:15:51 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:15:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e23, 0xfff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3f}}, 0x8, 0x101, 0x10001, 0x1, 0x8}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r1, 0x6}, &(0x7f0000000180)=0x8) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000003200250200000000000000000000003f0c000200000000000000000014000100100001000900010067616374"], 0x34}}, 0x0) 23:15:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_newnexthop={0x38, 0x68, 0x8, 0x70bd26, 0x25dfdbfc, {0x2, 0x0, 0x2, 0x0, 0x6}, [@NHA_ID={0x8}, @NHA_GROUP_TYPE={0x6}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000000002c000000300012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000090000000000000000000000e20a000000", @ANYRES32=r7, @ANYBLOB="00000a00140001"], 0x30}}, 0x0) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcsa\x00', 0x840, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000380)={'batadv0\x00', r7}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'sit0\x00', r9}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8}]}, 0x20}}, 0x4) 23:15:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000320025020000000000000000000000140001001000014e12239528576035efa391e95500010067614fbed3902c031844a1ccd8000000000000000000e8950f343a85fa2996fe50000000"], 0x34}}, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r1) r2 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x10001, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x9000001}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc850}, 0x41) personality(0x4000000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000090ab0e7446d2fbb769bad04e8ac562927881f87c4ea5a3324c15261d04665062400752a3cdf5b4a25248d5abefc1fc1de1c05bd83ee87fc48d6e8d3bc14215d570e1895da079333a52ff4dc849f42b293ae4c5611f7d3b774acb6553cd045ede992756821a5d2e"], 0x194) close(r3) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x80}, &(0x7f0000000100)=0x8) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000003c0)={0x2, 0x5}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r4, 0x80184153, &(0x7f0000000480)={0x0, &(0x7f00000003c0)}) [ 433.206333] ip_tables: iptables: counters copy to user failed while replacing table 23:15:51 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) [ 433.252004] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 433.274751] tc_dump_action: action bad kind [ 433.282456] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 433.292496] ip_tables: iptables: counters copy to user failed while replacing table [ 433.303155] FAULT_INJECTION: forcing a failure. [ 433.303155] name failslab, interval 1, probability 0, space 0, times 0 [ 433.360439] CPU: 1 PID: 28579 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 433.368357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.377808] Call Trace: [ 433.377831] dump_stack+0x1b2/0x283 [ 433.377850] should_fail.cold+0x10a/0x154 [ 433.377866] should_failslab+0xd6/0x130 [ 433.377878] kmem_cache_alloc+0x28e/0x3c0 [ 433.377894] __kernfs_new_node+0x6f/0x470 [ 433.377911] kernfs_new_node+0x7b/0xe0 [ 433.377923] __kernfs_create_file+0x3d/0x320 [ 433.377935] sysfs_add_file_mode_ns+0x1e1/0x450 [ 433.377951] internal_create_group+0x22b/0x710 [ 433.377967] sysfs_create_groups+0x92/0x127 [ 433.377979] device_add+0x77b/0x1510 [ 433.377993] ? device_is_dependent+0x270/0x270 [ 433.378012] netdev_register_kobject+0x17d/0x3a0 [ 433.378027] register_netdevice+0x955/0xe40 [ 433.378041] ? netdev_change_features+0xa0/0xa0 [ 433.378057] ipvlan_link_new+0x499/0xfa0 [ 433.378076] rtnl_newlink+0xf88/0x1830 [ 433.378097] ? ipvlan_port_destroy+0x3f0/0x3f0 [ 433.378108] ? check_preemption_disabled+0x35/0x240 [ 433.378119] ? rtnl_dellink+0x6a0/0x6a0 [ 433.378131] ? perf_trace_lock+0xf7/0x490 [ 433.378193] ? rtnl_dellink+0x6a0/0x6a0 [ 433.378205] rtnetlink_rcv_msg+0x3be/0xb10 [ 433.378220] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 433.378234] ? perf_trace_lock+0xf7/0x490 [ 433.378242] ? netdev_pick_tx+0x2e0/0x2e0 [ 433.378266] netlink_rcv_skb+0x125/0x390 [ 433.378276] ? memcpy+0x35/0x50 [ 433.378287] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 433.378298] ? netlink_ack+0x9a0/0x9a0 [ 433.378320] netlink_unicast+0x437/0x610 [ 433.378334] ? netlink_sendskb+0xd0/0xd0 [ 433.378351] netlink_sendmsg+0x62e/0xb80 [ 433.378365] ? nlmsg_notify+0x170/0x170 [ 433.378373] ? kernel_recvmsg+0x210/0x210 [ 433.378382] ? security_socket_sendmsg+0x83/0xb0 [ 433.378392] ? nlmsg_notify+0x170/0x170 [ 433.378403] sock_sendmsg+0xb5/0x100 [ 433.378413] ___sys_sendmsg+0x326/0x800 [ 433.378425] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 433.548086] ? check_preemption_disabled+0x35/0x240 [ 433.548101] ? perf_trace_lock_acquire+0x510/0x510 [ 433.548110] ? perf_trace_lock+0xf7/0x490 [ 433.548119] ? check_preemption_disabled+0x35/0x240 [ 433.548132] ? perf_trace_lock+0xf7/0x490 [ 433.548144] ? __fget+0x1fe/0x360 [ 433.548156] ? perf_trace_lock_acquire+0x510/0x510 [ 433.548165] ? lock_acquire+0x170/0x3f0 [ 433.548175] ? lock_downgrade+0x740/0x740 [ 433.548189] ? __might_fault+0x104/0x1b0 [ 433.548202] ? lock_acquire+0x170/0x3f0 [ 433.548223] __sys_sendmmsg+0x129/0x330 [ 433.548235] ? SyS_sendmsg+0x40/0x40 [ 433.548267] ? __mutex_unlock_slowpath+0x75/0x770 [ 433.548280] ? wait_for_completion_io+0x10/0x10 [ 433.548290] ? vfs_write+0x319/0x4d0 [ 433.548300] ? fput+0xb/0x140 [ 433.548309] ? SyS_write+0x14d/0x210 [ 433.548318] ? SyS_read+0x210/0x210 [ 433.548330] SyS_sendmmsg+0x2f/0x50 [ 433.548338] ? __sys_sendmmsg+0x330/0x330 [ 433.548347] do_syscall_64+0x1d5/0x640 [ 433.548363] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 433.643910] RIP: 0033:0x45d5b9 [ 433.647092] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 433.654879] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 433.662143] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 433.669402] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 [ 433.676661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 433.683930] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c 23:15:52 executing program 5 (fault-call:2 fault-nth:25): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) [ 433.710599] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 433.731682] tc_dump_action: action bad kind 23:15:52 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) [ 433.761125] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 433.827198] FAULT_INJECTION: forcing a failure. [ 433.827198] name failslab, interval 1, probability 0, space 0, times 0 [ 433.870837] ip_tables: iptables: counters copy to user failed while replacing table [ 433.884678] CPU: 0 PID: 28598 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 433.892586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.901947] Call Trace: [ 433.904536] dump_stack+0x1b2/0x283 [ 433.908180] should_fail.cold+0x10a/0x154 [ 433.913207] should_failslab+0xd6/0x130 [ 433.917185] kmem_cache_alloc+0x28e/0x3c0 [ 433.921338] __kernfs_new_node+0x6f/0x470 [ 433.925492] kernfs_new_node+0x7b/0xe0 [ 433.929377] __kernfs_create_file+0x3d/0x320 [ 433.933781] sysfs_add_file_mode_ns+0x1e1/0x450 [ 433.938450] internal_create_group+0x22b/0x710 [ 433.943030] sysfs_create_groups+0x92/0x127 [ 433.947346] device_add+0x77b/0x1510 [ 433.951085] ? device_is_dependent+0x270/0x270 [ 433.955669] netdev_register_kobject+0x17d/0x3a0 [ 433.960422] register_netdevice+0x955/0xe40 [ 433.964739] ? netdev_change_features+0xa0/0xa0 [ 433.969408] ipvlan_link_new+0x499/0xfa0 [ 433.973467] rtnl_newlink+0xf88/0x1830 [ 433.977350] ? __lock_acquire+0x5fc/0x3f20 [ 433.981587] ? ipvlan_port_destroy+0x3f0/0x3f0 [ 433.986163] ? kmem_cache_free+0x7c/0x2b0 [ 433.990303] ? rtnl_dellink+0x6a0/0x6a0 [ 433.994273] ? trace_hardirqs_on+0x10/0x10 [ 433.998511] ? lock_acquire+0x170/0x3f0 [ 434.002524] ? lock_acquire+0x170/0x3f0 [ 434.006503] ? lock_downgrade+0x740/0x740 [ 434.010648] ? rtnl_dellink+0x6a0/0x6a0 [ 434.014614] rtnetlink_rcv_msg+0x3be/0xb10 [ 434.018843] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 434.023337] ? perf_trace_lock+0xf7/0x490 [ 434.027478] ? netdev_pick_tx+0x2e0/0x2e0 [ 434.031625] netlink_rcv_skb+0x125/0x390 [ 434.035680] ? memcpy+0x35/0x50 [ 434.038960] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 434.043451] ? netlink_ack+0x9a0/0x9a0 [ 434.047341] netlink_unicast+0x437/0x610 [ 434.051424] ? netlink_sendskb+0xd0/0xd0 [ 434.055485] netlink_sendmsg+0x62e/0xb80 [ 434.059569] ? nlmsg_notify+0x170/0x170 [ 434.063537] ? kernel_recvmsg+0x210/0x210 [ 434.067681] ? security_socket_sendmsg+0x83/0xb0 [ 434.072440] ? nlmsg_notify+0x170/0x170 [ 434.076411] sock_sendmsg+0xb5/0x100 [ 434.080141] ___sys_sendmsg+0x326/0x800 [ 434.084113] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 434.088866] ? check_preemption_disabled+0x35/0x240 [ 434.094576] ? perf_trace_lock_acquire+0x510/0x510 [ 434.099497] ? perf_trace_lock+0xf7/0x490 [ 434.103638] ? check_preemption_disabled+0x35/0x240 [ 434.108653] ? perf_trace_lock+0xf7/0x490 [ 434.112796] ? __fget+0x1fe/0x360 [ 434.116253] ? perf_trace_lock_acquire+0x510/0x510 [ 434.121262] ? lock_acquire+0x170/0x3f0 [ 434.125232] ? lock_downgrade+0x740/0x740 [ 434.129376] ? __might_fault+0x104/0x1b0 [ 434.133433] ? lock_acquire+0x170/0x3f0 [ 434.137413] __sys_sendmmsg+0x129/0x330 [ 434.141419] ? SyS_sendmsg+0x40/0x40 [ 434.145144] ? __mutex_unlock_slowpath+0x75/0x770 [ 434.149982] ? wait_for_completion_io+0x10/0x10 [ 434.154753] ? vfs_write+0x319/0x4d0 [ 434.158463] ? fput+0xb/0x140 [ 434.161558] ? SyS_write+0x14d/0x210 [ 434.165263] ? SyS_read+0x210/0x210 [ 434.168893] SyS_sendmmsg+0x2f/0x50 [ 434.172511] ? __sys_sendmmsg+0x330/0x330 [ 434.176654] do_syscall_64+0x1d5/0x640 [ 434.180547] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 434.185727] RIP: 0033:0x45d5b9 [ 434.188910] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 434.196613] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 434.203874] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 434.211163] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 [ 434.218425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 434.225691] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c 23:15:54 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e00000010008108040f9becdb4cb92e0a48b1371400000069bd6efb2503eaff0d000100020200bf050005001201", 0x2e}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000140)={0x80000001, [[0xffff2ab8, 0x4, 0x5, 0x1f, 0x7, 0x16fd, 0x2], [0x7, 0xab, 0xffff, 0x100, 0x3, 0xe0000, 0xfffff06c, 0x9], [0x8, 0x7fff, 0x8, 0xffff, 0x6, 0x8, 0x0, 0x101]], [], [{0x9, 0x7f, 0x0, 0x1, 0x1, 0x1}, {0x62a3066, 0x8a, 0x0, 0x0, 0x0, 0x1}, {0x1000, 0xfffffd69, 0x0, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x8, 0x3, 0x1, 0x1, 0x0, 0x1}, {0xfff, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x8, 0x7fff, 0x0, 0x0, 0x1}, {0x330000, 0x400, 0x0, 0x0, 0x1, 0x1}, {0x1000, 0x3, 0x1, 0x1}, {0x5, 0x4, 0x1, 0x1, 0x1}, {0x3, 0x8, 0x1, 0x1, 0x1}, {0x9, 0x92, 0x1, 0x0, 0x0, 0x1}], [], 0x80000000}) 23:15:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) fstatfs(r0, &(0x7f0000000040)=""/197) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100120001000900010067616374"], 0x34}}, 0x0) 23:15:54 executing program 1: r0 = syz_mount_image$nfs(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=tcp,', {'port', 0x3d, 0xf4010000}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000002c0)={0x0, 0x2, 0x0, [0x1, 0x4, 0x0, 0x6, 0x1], [0x6947008f, 0x40, 0x80000001, 0x5, 0x7ff, 0x4, 0x1f, 0x3, 0xccd3, 0x50ad, 0x3, 0x30, 0x0, 0x2c2e37b7, 0xfffffffffffffc01, 0xfffffffffffffffc, 0x0, 0xff, 0x100000000, 0x9, 0x1, 0xb05d, 0x1, 0x1, 0x7, 0x5, 0x18000000000000, 0x3f, 0x1, 0x10001, 0x3, 0x5, 0xfffffffffffff800, 0x6fc, 0x0, 0xffffffff8f7d8f4f, 0x3, 0x5f, 0x81, 0x651, 0x404, 0x6, 0x75a2, 0x400, 0x482b, 0x800, 0x70bf, 0x9, 0x40, 0x5bb, 0x10000000000000, 0x80, 0xffffffffffffffc0, 0x7, 0x100000000, 0x1b8a6079, 0x4, 0x9, 0x7, 0x9, 0xfffffffffffffff7, 0x9, 0xfffffffffffffc00, 0x401, 0x8, 0x200, 0x4, 0x400, 0x4, 0xfff, 0x9, 0x0, 0xea, 0x9, 0x2, 0x2, 0x800, 0x7f, 0x7fffffff, 0x375da0cb, 0xbabe, 0x0, 0x3, 0x8, 0x8f67, 0xb2d, 0x1, 0x20000000000000, 0x7935, 0x0, 0x100000001, 0x7fffffff8000, 0x401, 0x4, 0x1000, 0x9, 0x10001, 0x1, 0x7fff, 0x20000000000000, 0x3ff, 0xa41, 0x1, 0x8001, 0x1f, 0x3, 0x7, 0x9, 0x5, 0x8001, 0x4, 0x72d, 0x4, 0x5, 0x6, 0x2, 0x1, 0x7, 0xfff, 0xe88]}) 23:15:54 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:15:54 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x5423, &(0x7f0000000000)={0x4, 0xffffffff, 0x0, 0xfffffffc, 0x0, "9d0000000000000000000000001000", 0x91, 0x1}) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x89f0, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, "0816d15891bcf9b86bd4430cee7edcf3d70100"}) 23:15:54 executing program 5 (fault-call:2 fault-nth:26): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) [ 435.495493] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 435.506379] ip_tables: iptables: counters copy to user failed while replacing table [ 435.510358] tc_dump_action: action bad kind [ 435.520497] FAULT_INJECTION: forcing a failure. [ 435.520497] name failslab, interval 1, probability 0, space 0, times 0 23:15:54 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) [ 435.539552] CPU: 1 PID: 28616 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 435.547461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.556814] Call Trace: [ 435.559406] dump_stack+0x1b2/0x283 [ 435.563043] should_fail.cold+0x10a/0x154 [ 435.567197] should_failslab+0xd6/0x130 [ 435.571210] kmem_cache_alloc+0x28e/0x3c0 [ 435.575365] __kernfs_new_node+0x6f/0x470 [ 435.579520] kernfs_new_node+0x7b/0xe0 [ 435.583410] __kernfs_create_file+0x3d/0x320 [ 435.587827] sysfs_add_file_mode_ns+0x1e1/0x450 [ 435.592522] internal_create_group+0x22b/0x710 [ 435.597280] sysfs_create_groups+0x92/0x127 [ 435.601601] device_add+0x77b/0x1510 [ 435.605347] ? device_is_dependent+0x270/0x270 [ 435.609956] netdev_register_kobject+0x17d/0x3a0 [ 435.609972] register_netdevice+0x955/0xe40 [ 435.609986] ? netdev_change_features+0xa0/0xa0 [ 435.610002] ipvlan_link_new+0x499/0xfa0 [ 435.610018] rtnl_newlink+0xf88/0x1830 [ 435.610038] ? ipvlan_port_destroy+0x3f0/0x3f0 [ 435.610049] ? check_preemption_disabled+0x35/0x240 [ 435.610058] ? rtnl_dellink+0x6a0/0x6a0 23:15:54 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) [ 435.610070] ? perf_trace_lock+0xf7/0x490 [ 435.610079] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 435.610138] ? rtnl_dellink+0x6a0/0x6a0 [ 435.610149] rtnetlink_rcv_msg+0x3be/0xb10 [ 435.610162] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 435.610174] ? perf_trace_lock+0xf7/0x490 [ 435.610182] ? netdev_pick_tx+0x2e0/0x2e0 [ 435.610198] netlink_rcv_skb+0x125/0x390 [ 435.610208] ? memcpy+0x35/0x50 [ 435.610217] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 435.610229] ? netlink_ack+0x9a0/0x9a0 [ 435.610249] netlink_unicast+0x437/0x610 23:15:54 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) [ 435.610262] ? netlink_sendskb+0xd0/0xd0 [ 435.610277] netlink_sendmsg+0x62e/0xb80 [ 435.610290] ? nlmsg_notify+0x170/0x170 [ 435.610300] ? kernel_recvmsg+0x210/0x210 [ 435.610313] ? security_socket_sendmsg+0x83/0xb0 [ 435.610325] ? nlmsg_notify+0x170/0x170 [ 435.615761] ip_tables: iptables: counters copy to user failed while replacing table [ 435.619379] sock_sendmsg+0xb5/0x100 [ 435.619393] ___sys_sendmsg+0x326/0x800 [ 435.619407] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 435.619423] ? check_preemption_disabled+0x35/0x240 [ 435.688257] ip_tables: iptables: counters copy to user failed while replacing table [ 435.691479] ? perf_trace_lock_acquire+0x510/0x510 [ 435.691489] ? perf_trace_lock+0xf7/0x490 [ 435.691500] ? check_preemption_disabled+0x35/0x240 [ 435.691516] ? perf_trace_lock+0xf7/0x490 [ 435.771654] ? __fget+0x1fe/0x360 [ 435.771676] ? perf_trace_lock_acquire+0x510/0x510 [ 435.771684] ? lock_acquire+0x170/0x3f0 [ 435.771695] ? lock_downgrade+0x740/0x740 [ 435.771709] ? __might_fault+0x104/0x1b0 [ 435.771722] ? lock_acquire+0x170/0x3f0 23:15:54 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x5423, &(0x7f0000000000)={0x4, 0xffffffff, 0x0, 0xfffffffc, 0x0, "9d0000000000000000000000001000", 0x91, 0x1}) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x89f0, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, "0816d15891bcf9b86bd4430cee7edcf3d70100"}) [ 435.771741] __sys_sendmmsg+0x129/0x330 [ 435.776538] ip_tables: iptables: counters copy to user failed while replacing table [ 435.780106] ? SyS_sendmsg+0x40/0x40 [ 435.780135] ? __mutex_unlock_slowpath+0x75/0x770 [ 435.780147] ? wait_for_completion_io+0x10/0x10 [ 435.821150] ? vfs_write+0x319/0x4d0 [ 435.824872] ? fput+0xb/0x140 [ 435.827979] ? SyS_write+0x14d/0x210 [ 435.831700] ? SyS_read+0x210/0x210 [ 435.835328] SyS_sendmmsg+0x2f/0x50 [ 435.838954] ? __sys_sendmmsg+0x330/0x330 [ 435.843105] do_syscall_64+0x1d5/0x640 [ 435.847001] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 435.852184] RIP: 0033:0x45d5b9 [ 435.855378] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 435.855389] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 435.855394] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 435.855399] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 [ 435.855407] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001a [ 435.892168] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c 23:15:54 executing program 1: r0 = perf_event_open(&(0x7f0000001040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000400)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x5, &(0x7f00000019c0)=[{0x0}, {&(0x7f00000004c0)="3fd8a86118f952", 0x7}, {&(0x7f00000006c0)="a9fd42035bdaaafa155154217d413d7c59189428406ddf068ad6919f8bb553fff98a8a78d508f8b2360e340ad4cb6e618905dc3f5144991472313c4aeaeb004d48dbe04d939da186f8e85ca0797ccbf48653e3d35fbd2383e3", 0x59}, {&(0x7f0000000800)}, {0x0, 0x0, 0x3f}], 0x102020, &(0x7f0000000880)=ANY=[@ANYBLOB="726f6469722c686173682c6f626a5f747970653d6f7665726c6179002c00000000000000000000938cf19e6073558f40a68313fb0852c2de3bf49ca5466415164fe8a6949ce8bcbdf53fc64d82beb50e43eb5b326a3d6d84293252abc2522cd3ed0055dbd363c09155a5ba5c4e359089b6b28588ca321cdf116b993ed3092aa71a462ec85523e9fbb9ea5dd183ebb0c4104745560d348bdb63123569bffebc62ee6649dfbf899ae2fe3b4e920a41551f017441c0885701693d0d4f900b83f36b75d836fea0ad"]) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') accept4$x25(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYRES32, @ANYBLOB="08001f0007"], 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000c80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c40)={&(0x7f00000010c0)={0x724, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [{{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xe}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xffff8000}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xee}}}]}}, {{0x8}, {0x254, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xb2fc}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x628}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x44, 0x4, [{0xffff, 0x65, 0x6, 0xe84a}, {0x2, 0xb9, 0x5, 0x1}, {0x0, 0x6, 0x2, 0x80000001}, {0xfffe, 0x20, 0x9, 0x29d3}, {0xb081, 0x31, 0x45, 0x7a}, {0x9, 0x4, 0x40, 0xfffffce3}, {0x1f, 0x0, 0xfc, 0x8}, {0x5, 0x6, 0xff, 0x1}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x99b}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}]}}]}, 0x724}, 0x1, 0x0, 0x0, 0x4}, 0x4c810) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x200) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @bcast]}) fcntl$getownex(r0, 0x10, &(0x7f0000000500)={0x0, 0x0}) ptrace$pokeuser(0x6, r2, 0x1a, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) acct(&(0x7f0000000280)='./file0\x00') getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000580)={0x0, 0x7}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000640)={0x8, 0x2, 0x5, 0x81, 0x0, 0x80000001, 0x1000, 0x5dc5, r3}, &(0x7f0000000740)=0x20) 23:15:54 executing program 5 (fault-call:2 fault-nth:27): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) [ 435.919774] device batadv0 entered promiscuous mode [ 435.926707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.946755] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 23:15:54 executing program 2: timerfd_create(0x4, 0x0) request_key(&(0x7f0000000000)='cifs.spnego\x00', 0x0, &(0x7f0000000340)='cpuset@\x00', 0xfffffffffffffffa) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xb, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open$dir(0x0, 0x0, 0x82) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x200100, 0xdbca2467442a03ef) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x2f) io_setup(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) creat(0x0, 0x40) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x93) dup(0xffffffffffffffff) open$dir(0x0, 0x505280, 0x1) mkdirat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe26) open$dir(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000100)=0x3ff, 0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0xac) prctl$PR_GET_KEEPCAPS(0x7) fdatasync(0xffffffffffffffff) ftruncate(r2, 0x7fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 435.966685] tc_dump_action: action bad kind 23:15:54 executing program 3: setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000000)=0x6, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3c43, 0xa1429, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket(0x6, 0x5, 0x2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x1) r3 = socket(0x40000000002, 0x3, 0x80000000002) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='bridge_slave_0\x00', 0xf) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x33) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000040)=0x9, 0x4) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) close(r1) 23:15:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd(r0, &(0x7f0000000040)={[0x401]}, 0x8) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000080)) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x39, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374"], 0x34}}, 0x4000811) 23:15:54 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:15:54 executing program 1: r0 = perf_event_open(&(0x7f0000001040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000400)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x5, &(0x7f00000019c0)=[{0x0}, {&(0x7f00000004c0)="3fd8a86118f952", 0x7}, {&(0x7f00000006c0)="a9fd42035bdaaafa155154217d413d7c59189428406ddf068ad6919f8bb553fff98a8a78d508f8b2360e340ad4cb6e618905dc3f5144991472313c4aeaeb004d48dbe04d939da186f8e85ca0797ccbf48653e3d35fbd2383e3", 0x59}, {&(0x7f0000000800)}, {0x0, 0x0, 0x3f}], 0x102020, &(0x7f0000000880)=ANY=[@ANYBLOB="726f6469722c686173682c6f626a5f747970653d6f7665726c6179002c00000000000000000000938cf19e6073558f40a68313fb0852c2de3bf49ca5466415164fe8a6949ce8bcbdf53fc64d82beb50e43eb5b326a3d6d84293252abc2522cd3ed0055dbd363c09155a5ba5c4e359089b6b28588ca321cdf116b993ed3092aa71a462ec85523e9fbb9ea5dd183ebb0c4104745560d348bdb63123569bffebc62ee6649dfbf899ae2fe3b4e920a41551f017441c0885701693d0d4f900b83f36b75d836fea0ad"]) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') accept4$x25(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYRES32, @ANYBLOB="08001f0007"], 0x40}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000c80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c40)={&(0x7f00000010c0)={0x724, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [{{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xfffffffb}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xe}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x1f4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x34, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xffff8000}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xee}}}]}}, {{0x8}, {0x254, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xb2fc}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x628}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x44, 0x4, [{0xffff, 0x65, 0x6, 0xe84a}, {0x2, 0xb9, 0x5, 0x1}, {0x0, 0x6, 0x2, 0x80000001}, {0xfffe, 0x20, 0x9, 0x29d3}, {0xb081, 0x31, 0x45, 0x7a}, {0x9, 0x4, 0x40, 0xfffffce3}, {0x1f, 0x0, 0xfc, 0x8}, {0x5, 0x6, 0xff, 0x1}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x99b}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}]}}]}, 0x724}, 0x1, 0x0, 0x0, 0x4}, 0x4c810) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x200) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @bcast]}) fcntl$getownex(r0, 0x10, &(0x7f0000000500)={0x0, 0x0}) ptrace$pokeuser(0x6, r2, 0x1a, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) acct(&(0x7f0000000280)='./file0\x00') getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000580)={0x0, 0x7}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000640)={0x8, 0x2, 0x5, 0x81, 0x0, 0x80000001, 0x1000, 0x5dc5, r3}, &(0x7f0000000740)=0x20) [ 436.079224] FAULT_INJECTION: forcing a failure. [ 436.079224] name failslab, interval 1, probability 0, space 0, times 0 [ 436.128768] ip_tables: iptables: counters copy to user failed while replacing table [ 436.129482] CPU: 1 PID: 28652 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 436.145351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.155224] Call Trace: [ 436.157824] dump_stack+0x1b2/0x283 [ 436.161461] should_fail.cold+0x10a/0x154 [ 436.165667] should_failslab+0xd6/0x130 [ 436.169654] kmem_cache_alloc+0x28e/0x3c0 [ 436.173813] __kernfs_new_node+0x6f/0x470 [ 436.177970] kernfs_new_node+0x7b/0xe0 [ 436.181868] __kernfs_create_file+0x3d/0x320 [ 436.186284] sysfs_add_file_mode_ns+0x1e1/0x450 [ 436.190963] internal_create_group+0x22b/0x710 [ 436.195563] sysfs_create_groups+0x92/0x127 [ 436.199889] device_add+0x77b/0x1510 [ 436.203611] ? device_is_dependent+0x270/0x270 [ 436.208208] netdev_register_kobject+0x17d/0x3a0 [ 436.212980] register_netdevice+0x955/0xe40 [ 436.217317] ? netdev_change_features+0xa0/0xa0 [ 436.222002] ipvlan_link_new+0x499/0xfa0 [ 436.226076] rtnl_newlink+0xf88/0x1830 [ 436.229968] ? __lock_acquire+0x5fc/0x3f20 [ 436.234220] ? ipvlan_port_destroy+0x3f0/0x3f0 [ 436.238803] ? kmem_cache_free+0x7c/0x2b0 [ 436.242966] ? rtnl_dellink+0x6a0/0x6a0 [ 436.246952] ? trace_hardirqs_on+0x10/0x10 [ 436.251195] ? lock_acquire+0x170/0x3f0 [ 436.255217] ? lock_acquire+0x170/0x3f0 [ 436.259195] ? lock_downgrade+0x740/0x740 [ 436.263346] ? rtnl_dellink+0x6a0/0x6a0 [ 436.267323] rtnetlink_rcv_msg+0x3be/0xb10 [ 436.271563] ? rtnl_calcit.isra.0+0x3a0/0x3a0 23:15:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xb, 0x5, 0x1f) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374", @ANYRESHEX, @ANYRES64=r0], 0x34}}, 0x0) [ 436.276061] ? perf_trace_lock+0xf7/0x490 [ 436.280208] ? netdev_pick_tx+0x2e0/0x2e0 [ 436.284355] netlink_rcv_skb+0x125/0x390 [ 436.288411] ? memcpy+0x35/0x50 [ 436.291688] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 436.296269] ? netlink_ack+0x9a0/0x9a0 [ 436.300166] netlink_unicast+0x437/0x610 [ 436.304227] ? netlink_sendskb+0xd0/0xd0 [ 436.308293] netlink_sendmsg+0x62e/0xb80 [ 436.312357] ? nlmsg_notify+0x170/0x170 [ 436.316327] ? kernel_recvmsg+0x210/0x210 [ 436.320475] ? security_socket_sendmsg+0x83/0xb0 [ 436.325231] ? nlmsg_notify+0x170/0x170 [ 436.329208] sock_sendmsg+0xb5/0x100 [ 436.332926] ___sys_sendmsg+0x326/0x800 [ 436.336904] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 436.341661] ? check_preemption_disabled+0x35/0x240 [ 436.346680] ? perf_trace_lock_acquire+0x510/0x510 [ 436.351607] ? perf_trace_lock+0xf7/0x490 [ 436.355758] ? check_preemption_disabled+0x35/0x240 [ 436.360778] ? perf_trace_lock+0xf7/0x490 [ 436.364920] ? __fget+0x1fe/0x360 [ 436.368402] ? perf_trace_lock_acquire+0x510/0x510 [ 436.373309] ? lock_acquire+0x170/0x3f0 [ 436.377265] ? lock_downgrade+0x740/0x740 [ 436.381433] ? __might_fault+0x104/0x1b0 [ 436.385475] ? lock_acquire+0x170/0x3f0 [ 436.389431] __sys_sendmmsg+0x129/0x330 [ 436.393384] ? SyS_sendmsg+0x40/0x40 [ 436.397087] ? __mutex_unlock_slowpath+0x75/0x770 [ 436.401936] ? wait_for_completion_io+0x10/0x10 [ 436.406604] ? vfs_write+0x319/0x4d0 [ 436.410307] ? fput+0xb/0x140 [ 436.413393] ? SyS_write+0x14d/0x210 [ 436.417141] ? SyS_read+0x210/0x210 [ 436.420750] SyS_sendmmsg+0x2f/0x50 [ 436.424366] ? __sys_sendmmsg+0x330/0x330 [ 436.428504] do_syscall_64+0x1d5/0x640 [ 436.432378] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 436.437583] RIP: 0033:0x45d5b9 [ 436.440789] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 436.448480] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 436.455738] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 436.462990] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 [ 436.470249] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001b 23:15:55 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) dup(r0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x349841, 0x40) write$P9_RREADLINK(r3, &(0x7f0000000780)=ANY=[@ANYRESDEC], 0x14) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000)=0x5, 0x683) getsockopt$inet_int(r3, 0x0, 0xb, 0x0, &(0x7f0000000000)) readv(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x90583, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x3200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe27) connect$inet(0xffffffffffffffff, 0x0, 0x5b) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$KDDELIO(r1, 0x4b35, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) keyctl$set_timeout(0xf, 0x0, 0xfffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0xbf) unshare(0x60000000) [ 436.477498] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c 23:15:55 executing program 5 (fault-call:2 fault-nth:28): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:15:55 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:15:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x39}, @l2cap_cid_signaling={{0x35}, [@l2cap_disconn_req={{0x6, 0x3f, 0x4}, {0x9, 0x3f}}, @l2cap_conn_rsp={{0x3, 0x10, 0x8}, {0x4, 0x4, 0x101, 0x7477}}, @l2cap_info_req={{0xa, 0x1f, 0x2}, {0x2}}, @l2cap_conf_req={{0x4, 0x5, 0x17}, {0x1ff, 0xda9b, [@l2cap_conf_mtu={0x1, 0x2, 0x100}, @l2cap_conf_mtu={0x1, 0x2, 0x2}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x1, 0x8, 0xffff, 0x2, 0x81}}]}}]}}, 0x3e) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000280), 0x4) 23:15:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x10042, 0x0) getsockname(r1, &(0x7f0000000100)=@nfc_llcp, &(0x7f00000000c0)=0x78) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x14000, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000002c0)=""/212) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000240)={0x3, r2}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = dup2(r0, r0) setsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000180)=0xa8, 0x4) [ 436.586570] FAULT_INJECTION: forcing a failure. [ 436.586570] name failslab, interval 1, probability 0, space 0, times 0 [ 436.605950] ip_tables: iptables: counters copy to user failed while replacing table [ 436.623469] CPU: 0 PID: 28682 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 436.631381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 436.640735] Call Trace: [ 436.643329] dump_stack+0x1b2/0x283 [ 436.646973] should_fail.cold+0x10a/0x154 [ 436.651132] should_failslab+0xd6/0x130 [ 436.655110] kmem_cache_alloc+0x28e/0x3c0 [ 436.659259] __kernfs_new_node+0x6f/0x470 [ 436.663413] kernfs_new_node+0x7b/0xe0 [ 436.667300] __kernfs_create_file+0x3d/0x320 [ 436.671709] sysfs_add_file_mode_ns+0x1e1/0x450 [ 436.676385] internal_create_group+0x22b/0x710 [ 436.680974] sysfs_create_groups+0x92/0x127 [ 436.685298] device_add+0x77b/0x1510 [ 436.689014] ? device_is_dependent+0x270/0x270 [ 436.693602] netdev_register_kobject+0x17d/0x3a0 [ 436.698359] register_netdevice+0x955/0xe40 [ 436.702682] ? netdev_change_features+0xa0/0xa0 [ 436.707356] ipvlan_link_new+0x499/0xfa0 [ 436.711421] rtnl_newlink+0xf88/0x1830 [ 436.715312] ? __lock_acquire+0x5fc/0x3f20 [ 436.719557] ? ipvlan_port_destroy+0x3f0/0x3f0 [ 436.724136] ? kmem_cache_free+0x7c/0x2b0 [ 436.728281] ? rtnl_dellink+0x6a0/0x6a0 [ 436.732266] ? trace_hardirqs_on+0x10/0x10 [ 436.736504] ? lock_acquire+0x170/0x3f0 [ 436.740533] ? lock_acquire+0x170/0x3f0 [ 436.744512] ? lock_downgrade+0x740/0x740 [ 436.748662] ? rtnl_dellink+0x6a0/0x6a0 [ 436.752637] rtnetlink_rcv_msg+0x3be/0xb10 [ 436.756876] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 436.761373] ? perf_trace_lock+0xf7/0x490 [ 436.763859] sock: process `syz-executor.3' is using obsolete setsockopt SO_BSDCOMPAT [ 436.765519] ? netdev_pick_tx+0x2e0/0x2e0 [ 436.765538] netlink_rcv_skb+0x125/0x390 [ 436.765550] ? memcpy+0x35/0x50 [ 436.765561] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 436.765574] ? netlink_ack+0x9a0/0x9a0 [ 436.765591] netlink_unicast+0x437/0x610 [ 436.765604] ? netlink_sendskb+0xd0/0xd0 [ 436.765619] netlink_sendmsg+0x62e/0xb80 [ 436.765633] ? nlmsg_notify+0x170/0x170 [ 436.765642] ? kernel_recvmsg+0x210/0x210 [ 436.765655] ? security_socket_sendmsg+0x83/0xb0 [ 436.765663] ? nlmsg_notify+0x170/0x170 [ 436.765674] sock_sendmsg+0xb5/0x100 [ 436.825934] ___sys_sendmsg+0x326/0x800 [ 436.829917] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 436.834678] ? check_preemption_disabled+0x35/0x240 [ 436.839698] ? perf_trace_lock_acquire+0x510/0x510 [ 436.844625] ? perf_trace_lock+0xf7/0x490 [ 436.848773] ? check_preemption_disabled+0x35/0x240 [ 436.853880] ? perf_trace_lock+0xf7/0x490 [ 436.858026] ? __fget+0x1fe/0x360 [ 436.861480] ? perf_trace_lock_acquire+0x510/0x510 [ 436.866406] ? lock_acquire+0x170/0x3f0 [ 436.870361] ? lock_downgrade+0x740/0x740 [ 436.874488] ? __might_fault+0x104/0x1b0 [ 436.878533] ? lock_acquire+0x170/0x3f0 [ 436.882510] __sys_sendmmsg+0x129/0x330 [ 436.886465] ? SyS_sendmsg+0x40/0x40 [ 436.890255] ? __mutex_unlock_slowpath+0x75/0x770 [ 436.895085] ? wait_for_completion_io+0x10/0x10 [ 436.899740] ? vfs_write+0x319/0x4d0 [ 436.903433] ? fput+0xb/0x140 [ 436.906515] ? SyS_write+0x14d/0x210 [ 436.910205] ? SyS_read+0x210/0x210 [ 436.913822] SyS_sendmmsg+0x2f/0x50 [ 436.917427] ? __sys_sendmmsg+0x330/0x330 [ 436.921556] do_syscall_64+0x1d5/0x640 [ 436.925439] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 436.930605] RIP: 0033:0x45d5b9 23:15:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000000c0002000000000000df13000100100001000900010067616374f9522a0000ca719902825cfa93c2aac7cf9560292dbd41772fd5680127dc4ebbd92a5f22fce40acd4e9ec1c8cc2e987811342d5f25ab1fc149b87de0759f5633890000000000000000000000004530fd7e1c9a6c8b2fb0a7fbd63d2a49de60dc4f174c0572ea5caee382335fd93f28f2c5abbf9b07fac67bc0d23572efd1859604fe89e6be36d02cfaccc2d68b3f656e33b1bc46f100b1865786e21bfa389d276432b6533307b580de0f9517354f873b8dc0ca91fcd043659805f7fca41c54848a98fcab4efcb4d9bef761f665a9420d78285d207d9e63"], 0x34}}, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r0}) [ 436.933772] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 436.941457] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 436.948704] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 436.955966] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 [ 436.963213] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001c [ 436.970460] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c [ 437.029515] IPVS: ftp: loaded support on port[0] = 21 23:15:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x10001, 0x1}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f00000002c0)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x8) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x1, 0x32, 0x400, 0x2, 0x9, 0xb8, 0x4, 0x3, 0x1f}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000100)={0x6}) write$binfmt_script(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x187) inotify_init1(0x0) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 23:15:56 executing program 5 (fault-call:2 fault-nth:29): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:15:56 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) close(0xffffffffffffffff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) 23:15:56 executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374", @ANYBLOB="e7f269c1783708abf1e56fcdedfa76a208680356dfd08e6d00469b50cbea357e073d14b825eb791553d8dbbaa44fa28ca10704fc156f241e1cd3a53730f3dbb803e3fa7a1f1a1af4949502afca41a540ac7adfb8b1b9b2c59f0398c3fbfb1778cf339188f5064ffa97ce7f6d508a2caa89c76437b87471c60c0edbdac9ee33e6255b99ecf7d534abe4"], 0x34}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r1, 0xffffffffffffffff, 0x0, 0x0, {0x3, 0x60}}, 0x14}}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_TYPE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x84) 23:15:56 executing program 3: ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB]) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x1}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0xe0040500, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x2000012, 0x1f4}}], 0x1, 0x100, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000006c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ef922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecfa0b1a7511bf746bec66ba76b699d3a483904811c5709efa01fa13e4ddc813f76684d3d1529fea5d78b38267db0082270f62b41b50981b0313b668585ad32e8977c5f7c2dc112136b8f7392223205ad86f4a9de1cddbd119f26acc2f", 0xffffffcd, 0x11, 0x0, 0x170) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) [ 437.421098] FAULT_INJECTION: forcing a failure. [ 437.421098] name failslab, interval 1, probability 0, space 0, times 0 [ 437.442520] CPU: 0 PID: 28727 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 437.450435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 437.459790] Call Trace: [ 437.462387] dump_stack+0x1b2/0x283 [ 437.466098] should_fail.cold+0x10a/0x154 [ 437.470229] should_failslab+0xd6/0x130 [ 437.474183] kmem_cache_alloc+0x28e/0x3c0 [ 437.478318] __kernfs_new_node+0x6f/0x470 [ 437.482448] kernfs_new_node+0x7b/0xe0 [ 437.486315] __kernfs_create_file+0x3d/0x320 [ 437.490704] sysfs_add_file_mode_ns+0x1e1/0x450 [ 437.495355] internal_create_group+0x22b/0x710 [ 437.499921] sysfs_create_groups+0x92/0x127 [ 437.504222] device_add+0x77b/0x1510 [ 437.507916] ? device_is_dependent+0x270/0x270 [ 437.512484] netdev_register_kobject+0x17d/0x3a0 [ 437.517221] register_netdevice+0x955/0xe40 [ 437.521522] ? netdev_change_features+0xa0/0xa0 [ 437.526175] ipvlan_link_new+0x499/0xfa0 [ 437.530220] rtnl_newlink+0xf88/0x1830 [ 437.534092] ? ipvlan_port_destroy+0x3f0/0x3f0 [ 437.538673] ? check_preemption_disabled+0x35/0x240 [ 437.543670] ? rtnl_dellink+0x6a0/0x6a0 [ 437.547624] ? perf_trace_lock+0xf7/0x490 [ 437.551750] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 437.556779] ? rtnl_dellink+0x6a0/0x6a0 [ 437.560732] rtnetlink_rcv_msg+0x3be/0xb10 [ 437.564947] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 437.569420] ? perf_trace_lock+0xf7/0x490 [ 437.573543] ? netdev_pick_tx+0x2e0/0x2e0 [ 437.577676] netlink_rcv_skb+0x125/0x390 [ 437.581718] ? memcpy+0x35/0x50 [ 437.584976] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 437.589447] ? netlink_ack+0x9a0/0x9a0 [ 437.593319] netlink_unicast+0x437/0x610 [ 437.597361] ? netlink_sendskb+0xd0/0xd0 [ 437.601406] netlink_sendmsg+0x62e/0xb80 [ 437.605450] ? nlmsg_notify+0x170/0x170 [ 437.609403] ? kernel_recvmsg+0x210/0x210 [ 437.613529] ? security_socket_sendmsg+0x83/0xb0 [ 437.618262] ? nlmsg_notify+0x170/0x170 [ 437.622215] sock_sendmsg+0xb5/0x100 [ 437.625906] ___sys_sendmsg+0x326/0x800 [ 437.629860] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 437.634683] ? check_preemption_disabled+0x35/0x240 [ 437.639680] ? perf_trace_lock_acquire+0x510/0x510 [ 437.644584] ? perf_trace_lock+0xf7/0x490 [ 437.648711] ? check_preemption_disabled+0x35/0x240 [ 437.653705] ? perf_trace_lock+0xf7/0x490 [ 437.657834] ? __fget+0x1fe/0x360 [ 437.661266] ? perf_trace_lock_acquire+0x510/0x510 [ 437.666172] ? lock_acquire+0x170/0x3f0 [ 437.670125] ? lock_downgrade+0x740/0x740 [ 437.674254] ? __might_fault+0x104/0x1b0 [ 437.678309] ? lock_acquire+0x170/0x3f0 [ 437.682267] __sys_sendmmsg+0x129/0x330 [ 437.686219] ? SyS_sendmsg+0x40/0x40 [ 437.689922] ? __mutex_unlock_slowpath+0x75/0x770 [ 437.694743] ? wait_for_completion_io+0x10/0x10 [ 437.699405] ? vfs_write+0x319/0x4d0 [ 437.703096] ? fput+0xb/0x140 [ 437.706180] ? SyS_write+0x14d/0x210 [ 437.709872] ? SyS_read+0x210/0x210 [ 437.713475] SyS_sendmmsg+0x2f/0x50 [ 437.717084] ? __sys_sendmmsg+0x330/0x330 [ 437.721211] do_syscall_64+0x1d5/0x640 [ 437.725081] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 437.730246] RIP: 0033:0x45d5b9 [ 437.733414] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 437.741100] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 437.748347] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 437.755611] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 [ 437.762879] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001d 23:15:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000320025020000000000000020000000000c0402001f00a26e8a7edb41635f0200100001000900010067616374"], 0x34}}, 0x0) [ 437.770145] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c 23:15:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) sched_getparam(0x0, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x8) recvmmsg(r1, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82200, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000640)={{{@in6=@initdev, @in=@loopback}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000580)=0x5, 0x0) 23:15:56 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) close(0xffffffffffffffff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) 23:15:56 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x3, 0x48, 0x0, 0x0, 0x83cd, 0xb0005, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000001c0), 0x6}, 0x10100, 0x6, 0x3, 0x0, 0x0, 0x419e}, 0x0, 0x5, 0xffffffffffffffff, 0x19) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/netfilter\x00') r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r1, 0x202000) keyctl$chown(0x4, r1, 0x0, 0x0) keyctl$assume_authority(0x10, r1) personality(0x4000000) fchdir(r0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x7, 0x4000) perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x41, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100101, 0x0, @perf_bp={0x0}, 0x4700e, 0x1, 0x2, 0x6, 0x400000000, 0x9, 0x32e}, 0x0, 0x9, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f00000006c0)='net/netstat\x00') semctl$GETVAL(0x0, 0x2, 0xc, 0x0) inotify_init1(0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='attr/exec\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000400)=""/81, 0x51}, {&(0x7f0000000580)=""/139, 0x8b}, {&(0x7f0000000700)=""/190, 0xbe}], 0x3, 0x4c00, 0xefb5) read$alg(r2, &(0x7f0000000340)=""/186, 0xba) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af00031400000000000000000f0000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) arch_prctl$ARCH_GET_CPUID(0x1011) 23:15:56 executing program 5 (fault-call:2 fault-nth:30): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:15:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374ef445e56f79862d3069ba1aff2001653bf1324346c71b1f716c67f2c9d56b2147be7af8064b3cd29b193d8e03b97d7f850aad46c0dfecc6e5eacd514bb2845cb70ff08c047194107f1d45b645c352b6df3a3f9dc4c872fe8f26f88ab00bd08db9728e2b42b6bdf86185a535814244de5bcef7992c2bd5f668445c14bfa3e6f3a24c8"], 0x34}}, 0x0) [ 437.910690] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 437.919875] tc_dump_action: action bad kind [ 438.012262] net_ratelimit: 1 callbacks suppressed [ 438.012268] ip_tables: iptables: counters copy to user failed while replacing table [ 438.018882] FAULT_INJECTION: forcing a failure. [ 438.018882] name failslab, interval 1, probability 0, space 0, times 0 [ 438.067602] CPU: 0 PID: 28766 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 438.075610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.084961] Call Trace: [ 438.087551] dump_stack+0x1b2/0x283 [ 438.091188] should_fail.cold+0x10a/0x154 [ 438.095344] should_failslab+0xd6/0x130 [ 438.099319] kmem_cache_alloc+0x28e/0x3c0 [ 438.103475] __kernfs_new_node+0x6f/0x470 [ 438.107631] kernfs_new_node+0x7b/0xe0 [ 438.111515] __kernfs_create_file+0x3d/0x320 [ 438.115960] sysfs_add_file_mode_ns+0x1e1/0x450 [ 438.120630] internal_create_group+0x22b/0x710 [ 438.125214] sysfs_create_groups+0x92/0x127 [ 438.129539] device_add+0x77b/0x1510 [ 438.133255] ? device_is_dependent+0x270/0x270 [ 438.137844] netdev_register_kobject+0x17d/0x3a0 [ 438.142601] register_netdevice+0x955/0xe40 [ 438.146923] ? netdev_change_features+0xa0/0xa0 [ 438.151596] ipvlan_link_new+0x499/0xfa0 [ 438.155660] rtnl_newlink+0xf88/0x1830 [ 438.159546] ? __lock_acquire+0x5fc/0x3f20 [ 438.163802] ? ipvlan_port_destroy+0x3f0/0x3f0 [ 438.168379] ? kmem_cache_free+0x7c/0x2b0 [ 438.172525] ? rtnl_dellink+0x6a0/0x6a0 [ 438.176493] ? trace_hardirqs_on+0x10/0x10 [ 438.180724] ? lock_acquire+0x170/0x3f0 [ 438.184741] ? lock_acquire+0x170/0x3f0 [ 438.188713] ? lock_downgrade+0x740/0x740 [ 438.192861] ? rtnl_dellink+0x6a0/0x6a0 [ 438.196833] rtnetlink_rcv_msg+0x3be/0xb10 [ 438.201071] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 438.205573] ? perf_trace_lock+0xf7/0x490 [ 438.209716] ? netdev_pick_tx+0x2e0/0x2e0 [ 438.213870] netlink_rcv_skb+0x125/0x390 [ 438.217929] ? memcpy+0x35/0x50 [ 438.221203] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 438.225696] ? netlink_ack+0x9a0/0x9a0 [ 438.229611] netlink_unicast+0x437/0x610 [ 438.233676] ? netlink_sendskb+0xd0/0xd0 [ 438.237741] netlink_sendmsg+0x62e/0xb80 [ 438.241817] ? nlmsg_notify+0x170/0x170 [ 438.245784] ? kernel_recvmsg+0x210/0x210 [ 438.249943] ? security_socket_sendmsg+0x83/0xb0 [ 438.254702] ? nlmsg_notify+0x170/0x170 [ 438.258677] sock_sendmsg+0xb5/0x100 [ 438.262391] ___sys_sendmsg+0x326/0x800 [ 438.266365] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 438.271117] ? check_preemption_disabled+0x35/0x240 [ 438.276134] ? perf_trace_lock_acquire+0x510/0x510 [ 438.281059] ? perf_trace_lock+0xf7/0x490 [ 438.285206] ? check_preemption_disabled+0x35/0x240 [ 438.290222] ? perf_trace_lock+0xf7/0x490 [ 438.294363] ? __fget+0x1fe/0x360 [ 438.297818] ? perf_trace_lock_acquire+0x510/0x510 [ 438.302747] ? lock_acquire+0x170/0x3f0 [ 438.306718] ? lock_downgrade+0x740/0x740 [ 438.310868] ? __might_fault+0x104/0x1b0 [ 438.314931] ? lock_acquire+0x170/0x3f0 [ 438.318910] __sys_sendmmsg+0x129/0x330 [ 438.322886] ? SyS_sendmsg+0x40/0x40 [ 438.326700] ? __mutex_unlock_slowpath+0x75/0x770 [ 438.331540] ? wait_for_completion_io+0x10/0x10 [ 438.336206] ? vfs_write+0x319/0x4d0 [ 438.339919] ? fput+0xb/0x140 [ 438.343016] ? SyS_write+0x14d/0x210 [ 438.346721] ? SyS_read+0x210/0x210 [ 438.350350] SyS_sendmmsg+0x2f/0x50 [ 438.353972] ? __sys_sendmmsg+0x330/0x330 [ 438.358120] do_syscall_64+0x1d5/0x640 [ 438.362012] entry_SYSCALL_64_after_hwframe+0x46/0xbb 23:15:57 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0) socket$key(0xf, 0x3, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000009cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000380)}, {0x0}], 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r2], 0x20, 0x4810}, 0x0) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1, &(0x7f00000002c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080ffffff7e) 23:15:57 executing program 5 (fault-call:2 fault-nth:31): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:15:57 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) close(0xffffffffffffffff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) [ 438.367197] RIP: 0033:0x45d5b9 [ 438.370380] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 438.378141] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 438.385398] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 438.392659] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 [ 438.399918] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001e [ 438.407178] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c 23:15:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r1) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f666907c681f9ca442addb003ea0400000000000092290a7ea290ab0e7446833f448d4008e482a6ae46ebcd2cd66849bbf9a4a3200161cdf322079832d009e0a71241a6bd1ec2"], 0x194) close(r3) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r3, @ANYRES16=r2], 0x34}}, 0x48001) [ 438.477581] audit: type=1804 audit(1598742957.158:249): pid=28781 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir883520692/syzkaller.LV7oW2/808/bus" dev="sda1" ino=16887 res=1 [ 438.559722] ip_tables: iptables: counters copy to user failed while replacing table [ 438.583200] FAULT_INJECTION: forcing a failure. [ 438.583200] name failslab, interval 1, probability 0, space 0, times 0 [ 438.611394] CPU: 0 PID: 28786 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 438.619310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.628671] Call Trace: [ 438.631269] dump_stack+0x1b2/0x283 [ 438.634911] should_fail.cold+0x10a/0x154 [ 438.639064] should_failslab+0xd6/0x130 [ 438.643035] kmem_cache_alloc+0x28e/0x3c0 [ 438.647184] __kernfs_new_node+0x6f/0x470 [ 438.651331] kernfs_new_node+0x7b/0xe0 [ 438.655216] __kernfs_create_file+0x3d/0x320 [ 438.659619] sysfs_add_file_mode_ns+0x1e1/0x450 [ 438.664287] internal_create_group+0x22b/0x710 [ 438.668869] sysfs_create_groups+0x92/0x127 [ 438.673186] device_add+0x77b/0x1510 [ 438.676903] ? device_is_dependent+0x270/0x270 [ 438.681485] netdev_register_kobject+0x17d/0x3a0 [ 438.686238] register_netdevice+0x955/0xe40 [ 438.690560] ? netdev_change_features+0xa0/0xa0 [ 438.695231] ipvlan_link_new+0x499/0xfa0 [ 438.699290] rtnl_newlink+0xf88/0x1830 [ 438.703175] ? __lock_acquire+0x5fc/0x3f20 [ 438.707413] ? ipvlan_port_destroy+0x3f0/0x3f0 [ 438.711985] ? kmem_cache_free+0x7c/0x2b0 [ 438.716130] ? rtnl_dellink+0x6a0/0x6a0 [ 438.720097] ? trace_hardirqs_on+0x10/0x10 [ 438.724324] ? lock_acquire+0x170/0x3f0 [ 438.728334] ? lock_acquire+0x170/0x3f0 [ 438.732306] ? lock_downgrade+0x740/0x740 [ 438.736453] ? rtnl_dellink+0x6a0/0x6a0 [ 438.740424] rtnetlink_rcv_msg+0x3be/0xb10 [ 438.744659] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 438.749155] ? perf_trace_lock+0xf7/0x490 [ 438.753305] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 438.758410] netlink_rcv_skb+0x125/0x390 [ 438.762465] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 438.766957] ? netlink_ack+0x9a0/0x9a0 [ 438.770847] netlink_unicast+0x437/0x610 [ 438.774903] ? netlink_sendskb+0xd0/0xd0 [ 438.778969] netlink_sendmsg+0x62e/0xb80 [ 438.783033] ? nlmsg_notify+0x170/0x170 [ 438.786999] ? kernel_recvmsg+0x210/0x210 [ 438.791152] ? security_socket_sendmsg+0x83/0xb0 [ 438.795903] ? nlmsg_notify+0x170/0x170 [ 438.799870] sock_sendmsg+0xb5/0x100 [ 438.803576] ___sys_sendmsg+0x326/0x800 [ 438.807548] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 438.812300] ? check_preemption_disabled+0x35/0x240 [ 438.817315] ? perf_trace_lock_acquire+0x510/0x510 [ 438.822240] ? perf_trace_lock+0xf7/0x490 [ 438.826386] ? check_preemption_disabled+0x35/0x240 [ 438.831404] ? perf_trace_lock+0xf7/0x490 [ 438.835550] ? __fget+0x1fe/0x360 [ 438.838996] ? perf_trace_lock_acquire+0x510/0x510 [ 438.843916] ? lock_acquire+0x170/0x3f0 [ 438.847888] ? lock_downgrade+0x740/0x740 [ 438.852039] ? __might_fault+0x104/0x1b0 [ 438.856098] ? lock_acquire+0x170/0x3f0 [ 438.860113] __sys_sendmmsg+0x129/0x330 [ 438.864085] ? SyS_sendmsg+0x40/0x40 [ 438.867827] ? __mutex_unlock_slowpath+0x75/0x770 [ 438.872671] ? wait_for_completion_io+0x10/0x10 [ 438.877338] ? vfs_write+0x319/0x4d0 [ 438.881045] ? fput+0xb/0x140 [ 438.884145] ? SyS_write+0x14d/0x210 [ 438.887856] ? SyS_read+0x210/0x210 [ 438.891462] SyS_sendmmsg+0x2f/0x50 [ 438.895092] ? __sys_sendmmsg+0x330/0x330 [ 438.899234] do_syscall_64+0x1d5/0x640 [ 438.903114] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 438.908278] RIP: 0033:0x45d5b9 [ 438.911441] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 438.919125] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 438.926391] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 438.933636] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 [ 438.940885] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001f [ 438.948131] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c 23:15:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374"], 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@dellinkprop={0x34, 0x6d, 0x8, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x81, 0x20}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x8084) [ 439.020442] audit: type=1804 audit(1598742957.698:250): pid=28775 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir883520692/syzkaller.LV7oW2/808/bus" dev="sda1" ino=16887 res=1 23:15:57 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyprintk\x00', 0x0, 0x0) dup3(r0, r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x299812df, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x5, 0x12040) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x38, 0x2}, 0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000002c0)=r6) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="17e295"], 0x0, 0x1b}, 0x20) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x8}, 0x0, 0x6, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 23:15:57 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 23:15:57 executing program 5 (fault-call:2 fault-nth:32): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:15:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x440, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x20008004) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x40, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x2}]}}]}, 0x40}}, 0x0) 23:15:57 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 439.130304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=109 sclass=netlink_route_socket pid=28801 comm=syz-executor.0 [ 439.173792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=109 sclass=netlink_route_socket pid=28807 comm=syz-executor.0 [ 439.188995] FAULT_INJECTION: forcing a failure. [ 439.188995] name failslab, interval 1, probability 0, space 0, times 0 [ 439.210617] CPU: 1 PID: 28808 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 439.218529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.227886] Call Trace: [ 439.230481] dump_stack+0x1b2/0x283 [ 439.234118] should_fail.cold+0x10a/0x154 [ 439.238280] should_failslab+0xd6/0x130 [ 439.242263] kmem_cache_alloc+0x28e/0x3c0 [ 439.246416] __kernfs_new_node+0x6f/0x470 [ 439.250572] kernfs_new_node+0x7b/0xe0 [ 439.254463] __kernfs_create_file+0x3d/0x320 [ 439.258869] sysfs_add_file_mode_ns+0x1e1/0x450 [ 439.263541] internal_create_group+0x22b/0x710 [ 439.268129] sysfs_create_groups+0x92/0x127 [ 439.272451] device_add+0x77b/0x1510 [ 439.276172] ? device_is_dependent+0x270/0x270 [ 439.280764] netdev_register_kobject+0x17d/0x3a0 [ 439.285522] register_netdevice+0x955/0xe40 [ 439.289848] ? netdev_change_features+0xa0/0xa0 [ 439.294524] ipvlan_link_new+0x499/0xfa0 [ 439.298587] rtnl_newlink+0xf88/0x1830 [ 439.302479] ? __lock_acquire+0x5fc/0x3f20 [ 439.306724] ? ipvlan_port_destroy+0x3f0/0x3f0 [ 439.311306] ? kmem_cache_free+0x7c/0x2b0 [ 439.315470] ? rtnl_dellink+0x6a0/0x6a0 [ 439.319447] ? trace_hardirqs_on+0x10/0x10 23:15:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140000003300e7de000000000000000004000080270d4844ce766246e535d0ff6edaf94b1dd11d86f0dee4c70700000042a452a9c5af70e4c6d96caa380ee89fbd209a3ee37f50f158ff6bc457188c50b4aee6c6142fab5dd0409b8518a0266fd1e30990500209c271795854fc31c4347d8f84c0b211b8e615baaf07210f698b9bada2a3aadb536df05a68b2a12516a5e6a207b58283bafdd661d42a34a4c124a50088f1c86d919d3898a3196e7235ccbd9e93f9b5dbd1d6fe59483c458e7cca5ff83a812d98ac363a87a546a8df8f3fe050d9f788c18aaa81634fe8cfb47a5d8a0c031bd9db22329cb82accd19ad2885f095bb8aaa15501530095f62900000000000000077aded9817a64a45b295718140a962ace14e2cb771ef1c7de4dd2028e6a8c0a95db424cfa9346e0ad01a92fc5434095d4770af64726f73dad70a4c416a8529b5c195efa4407a82ef6385b7d9f1c8f7e5a57511a9a054c14f64fe8472d23f10c4f8be2981a80e56a942b6a83ac0146b7bde7a85273cb4c6b8b6d01e66cd5c02f6a17df259f319733b92608bddd62e5d1aef1550037c25784c054fd4a484831e7a2f7abdd1f42fcdffd6df88ee02fa249f2dc8e3757a5d7702a8fcc53a8cea843608759e66a4b3c7ee50c9ea47e61"], 0x14}], 0x1}, 0x4000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x3c}}, 0x4) [ 439.323693] ? lock_acquire+0x170/0x3f0 [ 439.327713] ? lock_acquire+0x170/0x3f0 [ 439.330625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=28821 comm=syz-executor.3 [ 439.331684] ? lock_downgrade+0x740/0x740 [ 439.331700] ? rtnl_dellink+0x6a0/0x6a0 [ 439.331712] rtnetlink_rcv_msg+0x3be/0xb10 [ 439.331724] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 439.331736] ? perf_trace_lock+0xf7/0x490 [ 439.364794] ? netdev_pick_tx+0x2e0/0x2e0 [ 439.368936] netlink_rcv_skb+0x125/0x390 [ 439.372976] ? memcpy+0x35/0x50 [ 439.376273] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 439.380774] ? netlink_ack+0x9a0/0x9a0 [ 439.384655] netlink_unicast+0x437/0x610 [ 439.388697] ? netlink_sendskb+0xd0/0xd0 [ 439.392737] netlink_sendmsg+0x62e/0xb80 [ 439.396799] ? nlmsg_notify+0x170/0x170 [ 439.400756] ? kernel_recvmsg+0x210/0x210 [ 439.404885] ? security_socket_sendmsg+0x83/0xb0 [ 439.409638] ? nlmsg_notify+0x170/0x170 [ 439.413606] sock_sendmsg+0xb5/0x100 [ 439.417302] ___sys_sendmsg+0x326/0x800 [ 439.421267] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 439.426009] ? check_preemption_disabled+0x35/0x240 [ 439.431055] ? perf_trace_lock_acquire+0x510/0x510 [ 439.435964] ? perf_trace_lock+0xf7/0x490 [ 439.440091] ? check_preemption_disabled+0x35/0x240 [ 439.445089] ? perf_trace_lock+0xf7/0x490 [ 439.449218] ? __fget+0x1fe/0x360 [ 439.452650] ? perf_trace_lock_acquire+0x510/0x510 [ 439.457596] ? lock_acquire+0x170/0x3f0 [ 439.461551] ? lock_downgrade+0x740/0x740 [ 439.465723] ? __might_fault+0x104/0x1b0 [ 439.469765] ? lock_acquire+0x170/0x3f0 [ 439.473794] __sys_sendmmsg+0x129/0x330 [ 439.477762] ? SyS_sendmsg+0x40/0x40 [ 439.481516] ? __mutex_unlock_slowpath+0x75/0x770 [ 439.486351] ? wait_for_completion_io+0x10/0x10 [ 439.491007] ? vfs_write+0x319/0x4d0 [ 439.494699] ? fput+0xb/0x140 [ 439.497783] ? SyS_write+0x14d/0x210 [ 439.501475] ? SyS_read+0x210/0x210 [ 439.505090] SyS_sendmmsg+0x2f/0x50 [ 439.508719] ? __sys_sendmmsg+0x330/0x330 [ 439.512856] do_syscall_64+0x1d5/0x640 [ 439.516781] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 439.521950] RIP: 0033:0x45d5b9 [ 439.525170] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 439.532858] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 439.540106] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 439.547368] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 [ 439.554618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000020 [ 439.561877] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c 23:15:58 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x8001, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000500)=""/206) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"/341], 0x34}}, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@known='security.apparmor\x00', &(0x7f00000003c0)='\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000400)=ANY=[@ANYRESHEX=r1, @ANYBLOB="e300000035f6d203173fbbec7e3ccf227e4fb7fcd1c721575e0b5b43300e6770559a71d4f8377dd63c1365a54aee3a3f92d57da12d99382bcc01780755048e6ad4e52f5f406d64bce75c13a8f4157c99dfa834f7c050a1c9a77f95dad9d6ecebf131251158a47227ce54b2650dfd012a3ea28f12a2784399689bcb262ec883513a5c09f87f127190cf213a2fbda0d61c46dae7b320e631822b13478f445055abb1c1032da293aff2b0df26c8534adc6cdd303357ab3f8812712b93b88cf5de50b226254c8bee549bf132b99acd2bf73ed4e619425efa6dc3a2fceb68121dedf86b20b62476519c"], &(0x7f0000000140)=0xeb) 23:15:58 executing program 5 (fault-call:2 fault-nth:33): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) [ 439.582629] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:15:58 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 439.672194] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 439.686050] qfq: invalid max length 0 [ 439.690694] IPVS: Error connecting to the multicast addr [ 439.715528] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 439.724320] tc_dump_action: action bad kind [ 439.746703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=28821 comm=syz-executor.3 [ 439.764370] FAULT_INJECTION: forcing a failure. [ 439.764370] name failslab, interval 1, probability 0, space 0, times 0 [ 439.781537] CPU: 1 PID: 28833 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 439.789431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.798770] Call Trace: [ 439.801349] dump_stack+0x1b2/0x283 [ 439.804986] should_fail.cold+0x10a/0x154 [ 439.809135] should_failslab+0xd6/0x130 [ 439.813094] kmem_cache_alloc+0x28e/0x3c0 [ 439.817241] __kernfs_new_node+0x6f/0x470 [ 439.821375] kernfs_new_node+0x7b/0xe0 [ 439.825243] __kernfs_create_file+0x3d/0x320 [ 439.829634] sysfs_add_file_mode_ns+0x1e1/0x450 [ 439.834289] internal_create_group+0x22b/0x710 [ 439.838855] sysfs_create_groups+0x92/0x127 [ 439.843168] device_add+0x77b/0x1510 [ 439.846862] ? device_is_dependent+0x270/0x270 [ 439.851429] netdev_register_kobject+0x17d/0x3a0 [ 439.856168] register_netdevice+0x955/0xe40 [ 439.860472] ? netdev_change_features+0xa0/0xa0 [ 439.865124] ipvlan_link_new+0x499/0xfa0 [ 439.869181] rtnl_newlink+0xf88/0x1830 [ 439.873065] ? ipvlan_port_destroy+0x3f0/0x3f0 [ 439.877630] ? check_preemption_disabled+0x35/0x240 [ 439.882623] ? rtnl_dellink+0x6a0/0x6a0 [ 439.886588] ? perf_trace_lock+0xf7/0x490 [ 439.890713] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 439.895744] ? rtnl_dellink+0x6a0/0x6a0 [ 439.899701] rtnetlink_rcv_msg+0x3be/0xb10 [ 439.903916] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 439.908398] ? perf_trace_lock+0xf7/0x490 [ 439.912521] ? netdev_pick_tx+0x2e0/0x2e0 [ 439.916649] netlink_rcv_skb+0x125/0x390 [ 439.920692] ? memcpy+0x35/0x50 [ 439.923951] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 439.928427] ? netlink_ack+0x9a0/0x9a0 [ 439.932299] netlink_unicast+0x437/0x610 [ 439.936341] ? netlink_sendskb+0xd0/0xd0 [ 439.940385] netlink_sendmsg+0x62e/0xb80 [ 439.944462] ? nlmsg_notify+0x170/0x170 [ 439.948415] ? kernel_recvmsg+0x210/0x210 [ 439.952554] ? security_socket_sendmsg+0x83/0xb0 [ 439.957286] ? nlmsg_notify+0x170/0x170 [ 439.961239] sock_sendmsg+0xb5/0x100 [ 439.964933] ___sys_sendmsg+0x326/0x800 [ 439.968887] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 439.973634] ? check_preemption_disabled+0x35/0x240 [ 439.978638] ? perf_trace_lock_acquire+0x510/0x510 [ 439.983543] ? perf_trace_lock+0xf7/0x490 [ 439.987668] ? check_preemption_disabled+0x35/0x240 [ 439.992777] ? perf_trace_lock+0xf7/0x490 [ 439.996904] ? __fget+0x1fe/0x360 [ 440.000335] ? perf_trace_lock_acquire+0x510/0x510 [ 440.005243] ? lock_acquire+0x170/0x3f0 [ 440.009196] ? lock_downgrade+0x740/0x740 [ 440.013326] ? __might_fault+0x104/0x1b0 [ 440.017368] ? lock_acquire+0x170/0x3f0 [ 440.021325] __sys_sendmmsg+0x129/0x330 [ 440.025280] ? SyS_sendmsg+0x40/0x40 [ 440.028982] ? __mutex_unlock_slowpath+0x75/0x770 [ 440.033812] ? wait_for_completion_io+0x10/0x10 [ 440.038458] ? vfs_write+0x319/0x4d0 [ 440.042160] ? fput+0xb/0x140 [ 440.045244] ? SyS_write+0x14d/0x210 [ 440.048944] ? SyS_read+0x210/0x210 [ 440.052549] SyS_sendmmsg+0x2f/0x50 [ 440.056150] ? __sys_sendmmsg+0x330/0x330 [ 440.060290] do_syscall_64+0x1d5/0x640 [ 440.064159] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 440.069338] RIP: 0033:0x45d5b9 [ 440.072521] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 440.080206] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 440.087473] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 440.094720] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 [ 440.101976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000021 [ 440.109222] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c 23:15:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374"], 0x34}}, 0x0) 23:15:58 executing program 5 (fault-call:2 fault-nth:34): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:15:58 executing program 1: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)={0x9, 0x20000000001, '\v'}, 0x582202) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0xb}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4841) [ 440.187395] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 440.215213] IPVS: Error connecting to the multicast addr [ 440.295755] FAULT_INJECTION: forcing a failure. [ 440.295755] name failslab, interval 1, probability 0, space 0, times 0 [ 440.339893] CPU: 1 PID: 28850 Comm: syz-executor.5 Not tainted 4.14.195-syzkaller #0 [ 440.347826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.358144] Call Trace: [ 440.360749] dump_stack+0x1b2/0x283 [ 440.364393] should_fail.cold+0x10a/0x154 [ 440.368564] should_failslab+0xd6/0x130 [ 440.372551] kmem_cache_alloc+0x28e/0x3c0 [ 440.376713] __kernfs_new_node+0x6f/0x470 [ 440.380877] kernfs_new_node+0x7b/0xe0 [ 440.384777] __kernfs_create_file+0x3d/0x320 [ 440.389200] sysfs_add_file_mode_ns+0x1e1/0x450 [ 440.393904] internal_create_group+0x22b/0x710 [ 440.398499] sysfs_create_groups+0x92/0x127 [ 440.402835] device_add+0x77b/0x1510 [ 440.406669] ? device_is_dependent+0x270/0x270 [ 440.411262] netdev_register_kobject+0x17d/0x3a0 [ 440.416020] register_netdevice+0x955/0xe40 [ 440.420347] ? netdev_change_features+0xa0/0xa0 [ 440.425047] ipvlan_link_new+0x499/0xfa0 [ 440.429118] rtnl_newlink+0xf88/0x1830 [ 440.433006] ? __lock_acquire+0x5fc/0x3f20 [ 440.437253] ? ipvlan_port_destroy+0x3f0/0x3f0 [ 440.441835] ? kmem_cache_free+0x7c/0x2b0 [ 440.445989] ? rtnl_dellink+0x6a0/0x6a0 [ 440.449965] ? trace_hardirqs_on+0x10/0x10 [ 440.454204] ? lock_acquire+0x170/0x3f0 [ 440.458226] ? lock_acquire+0x170/0x3f0 [ 440.462200] ? lock_downgrade+0x740/0x740 [ 440.466349] ? rtnl_dellink+0x6a0/0x6a0 [ 440.470322] rtnetlink_rcv_msg+0x3be/0xb10 [ 440.474644] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 440.479134] ? perf_trace_lock+0xf7/0x490 [ 440.483279] ? netdev_pick_tx+0x2e0/0x2e0 [ 440.487426] netlink_rcv_skb+0x125/0x390 [ 440.491481] ? memcpy+0x35/0x50 [ 440.494755] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 440.499245] ? netlink_ack+0x9a0/0x9a0 [ 440.503141] netlink_unicast+0x437/0x610 [ 440.507203] ? netlink_sendskb+0xd0/0xd0 [ 440.511265] netlink_sendmsg+0x62e/0xb80 [ 440.515327] ? nlmsg_notify+0x170/0x170 [ 440.519295] ? kernel_recvmsg+0x210/0x210 [ 440.523442] ? security_socket_sendmsg+0x83/0xb0 [ 440.528197] ? nlmsg_notify+0x170/0x170 [ 440.532178] sock_sendmsg+0xb5/0x100 [ 440.535898] ___sys_sendmsg+0x326/0x800 [ 440.539877] ? copy_msghdr_from_user+0x3b0/0x3b0 [ 440.544636] ? check_preemption_disabled+0x35/0x240 [ 440.549658] ? perf_trace_lock_acquire+0x510/0x510 [ 440.554584] ? perf_trace_lock+0xf7/0x490 [ 440.558731] ? check_preemption_disabled+0x35/0x240 [ 440.563746] ? perf_trace_lock+0xf7/0x490 [ 440.567886] ? __fget+0x1fe/0x360 [ 440.571333] ? perf_trace_lock_acquire+0x510/0x510 [ 440.576254] ? lock_acquire+0x170/0x3f0 [ 440.580225] ? lock_downgrade+0x740/0x740 [ 440.584373] ? __might_fault+0x104/0x1b0 [ 440.588527] ? lock_acquire+0x170/0x3f0 [ 440.592507] __sys_sendmmsg+0x129/0x330 [ 440.596479] ? SyS_sendmsg+0x40/0x40 [ 440.600208] ? __mutex_unlock_slowpath+0x75/0x770 [ 440.605048] ? wait_for_completion_io+0x10/0x10 [ 440.609711] ? vfs_write+0x319/0x4d0 [ 440.613420] ? fput+0xb/0x140 [ 440.616519] ? SyS_write+0x14d/0x210 [ 440.620231] ? SyS_read+0x210/0x210 [ 440.623865] SyS_sendmmsg+0x2f/0x50 [ 440.627485] ? __sys_sendmmsg+0x330/0x330 [ 440.631627] do_syscall_64+0x1d5/0x640 [ 440.635517] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 440.640705] RIP: 0033:0x45d5b9 [ 440.643907] RSP: 002b:00007f428e24dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 440.652580] RAX: ffffffffffffffda RBX: 00000000000279c0 RCX: 000000000045d5b9 [ 440.659850] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 440.667117] RBP: 00007f428e24dca0 R08: 0000000000000000 R09: 0000000000000000 [ 440.674385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000022 [ 440.681649] R13: 00007ffe082024cf R14: 00007f428e24e9c0 R15: 000000000118cf4c 23:15:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x20000, 0x6}, 0x0) clone(0x20040103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) write$binfmt_script(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2fb1cfff8066696c653020f014d336b003ea0400000000000092290a7ea290"], 0x194) close(r3) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffff01}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000045}, 0x800) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000900)={0x1, [0x0]}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={r5, 0x8}, 0x8) 23:15:59 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 23:15:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) write$9p(0xffffffffffffffff, &(0x7f0000000000)="9e71c698502b33c82bb90f2c39b255cd86d6cba4050e00c243b33c97346863dfab70f346ea", 0x25) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x40, 0x20001000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r1, @ANYRESDEC, @ANYRES64=r0], 0x34}}, 0x8014) 23:15:59 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000200), 0x4) keyctl$get_keyring_id(0x0, 0x0, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b927481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0xc) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xa4a, 0x1, 0x7f, 0x5}, 0x14) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 23:15:59 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x5018c2, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000000040)="bb", 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @local}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b005) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={r5, 0x8, 0x0, 0x6, 0x3f}, &(0x7f0000000100)=0x18) listen(r0, 0x4000000043) accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f000087dffe)='F', 0x3e, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:15:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r1) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000040)=0xb2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374"], 0x34}}, 0x0) [ 440.888739] audit: type=1326 audit(1598742959.568:251): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=28868 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 23:15:59 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 23:15:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000040)={0x1, 0x80000001, 0x2, 0x6, 0x1, 0x1, 0x0, 0x9, 0x1ff}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="34ff0000220025020000000000000000000000000c00020000000000000000001417c8b9d3fc9bcda941527aa3f37f83000100101ee5ffff67616374000000"], 0x34}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000080)) 23:15:59 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[], 0x60}}, 0x20000000) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400008000000092290a7ea290ab0e7446"], 0x194) close(r1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x40, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000140)="a55263f4afe5fd10174b1162341789c0cb040841659bc4c7b8e9482a486ac000d33ace749919aa35b8b8b3b3a4319aade4a5c44679e1f23f368696db417f476f89421a099bb70edf3128fc7ab5f637c1e5838810983dc5b75c9f679e2ff24bd74d50368f0662650e5c478c959a7e4ccdc9ef38617f285b79c491c24ee97e6a4a018477455e484b803ac62661c9caccc01d54852bf022468f1e0ec53c9da3698b809480822d644c207ad3614c5b95217a", &(0x7f00000000c0)=@udp=r2, 0x1}, 0x20) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000)) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x1, {0x2, 0xb26ade7, 0x0, 0x99d}}) 23:15:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000320025020000bc061e058098a95573629fe0caaf151617000000000008000000000c00020008000000000000001400f31de46f01000900010067110a"], 0x34}}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x20040, 0x0) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000000c0)={0xaac, 0x100, 0x8, {0x0, 0x2}, 0x6, 0x5b3}) 23:15:59 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 23:15:59 executing program 5: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="6000a88410000507000004000000000000000000", @ANYRESOCT=r0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600011503000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r1 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r3 = openat$cgroup_procs(r0, &(0x7f0000000780)='cgroup.threads\x00', 0x2, 0x0) write$binfmt_script(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="2321202e2f66696c653020342589b11f1b5065adbc7d5075f014d336b003ea040000faa3978b8466ff000092290a7ea290ab0e7446b29b38909fc6a7a02a669d3a1b0248139abbe2331dadf54f536779ef9c1cb2b70f105248c1d7334d475ae546f69893f650b9d3182ae395f660d53319bc91518613a851ea953099f37be35c09c74ebb8c46abb598b4869c240250"], 0x194) close(r2) linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', r2, &(0x7f0000000600)='./file0\x00', 0x1000) r4 = syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f0000000340)=[{&(0x7f0000000140)="39c69870b6d5a42ee9f40074e95525f14a4ddeba4b409a84e77e94759a24a9a96779f59afbe892226ed99778f1aa699155c5211635effc4404113f9d9b3b58fde366a8ad2822bab7b1457f958da1bed7ebc4797ba7d8c2fe4056dd3546d9215b44bf496c38369b17e87fca504df6499dd5214d67ea8b8a4ece86dba3c29012b3dd443a0e6c1d2f4dd80009d7d31e28cc7e444943ccfbab0505dcf8a3db71343e4b9ca2b77ab09c543e0273943d7630ca0c0e7f49e3f6df6324beb6e5009ae60486c8ee43572a842d12ac8552c7d11bc8886a072111", 0xd5, 0x2}, {&(0x7f0000000240)="19403518e716e68cf91428cf46e935aa3e614b6b2eb7e14f6d8f58757a07cd5fd5bf5d7b3ca2d00d11dbaa5a7b7874e8ac753c15c9e8ab9680cd20b5911e0b8a34b55a2e32afe9", 0x47, 0x81}, {&(0x7f00000002c0)="756d5e781d01939fd0b4a046d6130a3125d64f2ed8cea714556c7593204590860c247e72067e1eb78c594bb632663cb656722547e784013f3204772a9c7048280c932957eb4a22ae7a957e27ac82fd161d16e582fe", 0x55, 0xeeb}], 0x4008, &(0x7f00000003c0)=ANY=[@ANYBLOB="706172743d3078003030303030303030303030303030655f756d61736b3d30303030303030303030303137373737373737373737029fb561495e6f2c66", @ANYRESDEC=0xee01, @ANYBLOB=',dont_measure,fowner<', @ANYRESDEC=0x0, @ANYBLOB=',smackfshat=(!%,context=system_u,fsmagic=0x0000000000000007,obj_type=:(\'(^^$.,smackfshat=&][(@@,\x00']) execveat(r4, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0), &(0x7f00000005c0)=[&(0x7f0000000500)='\x0f:\x00', &(0x7f0000000540)=']\x00', &(0x7f0000000580)='\x00'], 0x1000) [ 441.264012] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 441.292526] tc_dump_action: action bad kind [ 441.311181] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 441.346206] tc_dump_action: action bad kind [ 441.400099] hfs: unable to parse mount options [ 441.445745] print_req_error: I/O error, dev loop5, sector 0 23:16:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0xd) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x19404, 0x0) 23:16:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374"], 0x34}}, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x6}, 0x8) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000040)={'filter\x00', 0x2, [{}, {}]}, 0x48) 23:16:00 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="ee29858859f7d1991dfed2edbdb10bd8b50cb000", @ANYRES16=r0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="05003e00"], 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x44014) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, r0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "c3bc370887a5f03c19f91bbfa4"}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x2200c091) r1 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) [ 441.682543] audit: type=1326 audit(1598742960.358:252): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=28883 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 23:16:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r3) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x28000, 0x0) sendmsg$nl_route(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)=@ipv4_newroute={0x40, 0x18, 0x200, 0x100000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2700}, [@RTA_MULTIPATH={0xc, 0x9, {0x6c7, 0x28, 0x7, r4}}, @RTA_FLOW={0x8, 0xb, 0x2}, @RTA_OIF={0x8, 0x4, r4}, @RTA_PRIORITY={0x8, 0x6, 0x80}]}, 0x40}}, 0x0) [ 441.795596] ip_tables: iptables: counters copy to user failed while replacing table 23:16:00 executing program 1: socket(0x10, 0x80002, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_MTU={0x8, 0x4, 0xbea}]}, 0x4c}}, 0x0) 23:16:00 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nvme-fabrics\x00', 0x181c2, 0x0) connect$bt_rfcomm(r1, &(0x7f00000003c0)={0x1f, @none, 0x7}, 0xa) sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r2) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x240, 0x0, 0xffffffffffffff37) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x100, r3, 0x8, 0x70bd27, 0x25dfd3fc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x100}}, 0x0) 23:16:00 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c000280060001000600010000000000060001a3eadfc74c413177f4a100020000000a00050004000000000000"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:16:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374"], 0x34}}, 0x0) r1 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 23:16:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0xd) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x19404, 0x0) 23:16:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0xfffffffffffffffd, 0xc4002) write$binfmt_aout(r2, &(0x7f0000000440)={{0x10b, 0x5, 0x9, 0xba, 0x346, 0x8, 0x1b8, 0x6}, "fc71cdc8bdeadb186c67113630eef7d7ba28b1e12e218f6832a64febccd4c9f11d032c2ac0efc41134e27a1d95fa1da2dcbda2cae6c3665d23859a59b5f6daefc04bd367cbbae07f4d34ed8b981c06f98829094bb8916c078ecdae0ce416c7dd2771b6d1bd176ea5b608fb054b34504630227ca94c8bcbcc8a9044dd1eb4bfce92b985357788f2ce17e1475aed27407f0b7fe148b09a17bc5c9346d887786c799ddc460d5acd42eb529e275a4887af987d7dc497b921fc03a82c901acd77920e6038b5916ad7ab05de9db968a3b9c67b1f6f983a8960e09786", [[], [], [], [], [], [], [], [], []]}, 0x9f9) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x8000, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000ec0)={0xa10000, 0x2, 0xfffffffd, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x1000000, [], @value64=0x3f}}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) link(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)='./file0\x00') close(r5) sendto$rxrpc(r5, &(0x7f00000002c0)="f81ba8f9c8300b6d838672621f596b4b792b196688acbed76a1c8b75c398b02d84283cd6fa5fccd40bf55f97a76526e4d9c34edb29c4f937e38a76b841513e469d866d73441210e6c2ae1bb1263d6ea313a83566e095b7db81a0d339e9797778fcc2a035fb85243ff242c3d514db544244158a63a7f7aea7b90e59d20eddf9712c504a33f86a4531117412be936cc52bcc09ba55cf", 0x95, 0x20048810, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) close(r4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000240), &(0x7f00000003c0)=0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN(r4, 0x4040942c, &(0x7f0000000180)={0x0, 0x4, [0x20, 0x0, 0x1000, 0x8, 0x8, 0x1]}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x6}]}) 23:16:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x34}}, 0x0) [ 442.011812] batman_adv: Cannot find parent device [ 442.022248] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 442.022257] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 442.029157] ip_tables: iptables: counters copy to user failed while replacing table [ 442.050199] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 23:16:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x2e0, 0x0, 0x168, 0x0, 0x0, 0x98, 0x238, 0x248, 0x248, 0x248, 0x238, 0x4, 0x0, {[{{@ip={@empty, @multicast1, 0x0, 0x0, 'bond_slave_1\x00', 'wg2\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38, 'time\x00'}, {0x0, 0x0, 0x0, 0x40000}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x8001}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0xffffffffffffff8e) r1 = socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x208) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x800, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e21, @private=0xa010102}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000000040), 0x14123f2dc6a8be1, 0x0) [ 442.090939] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 23:16:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x34}}, 0x0) 23:16:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0xd) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x19404, 0x0) 23:16:00 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000000)) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r2) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000080), 0x4) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:16:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000600)={'ip6_vti0\x00', 0x0, 0x2f, 0x10, 0x6, 0xfff, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, 0x10, 0x1, 0x22, 0x1f}}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'ip6tnl0\x00', r1, 0x0, 0x7, 0x7, 0x7f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, [], 0x1}, 0x60, 0x7, 0x5, 0x4}}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) 23:16:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000002a00255a9ca00200000000faffffffffffffff0c006ac9e4156990ebf8b47db95b288b9e87e6ffffff090000"], 0x34}}, 0x24000090) [ 442.245373] ip_tables: iptables: counters copy to user failed while replacing table [ 442.250862] device ipvlan14 entered promiscuous mode [ 442.410326] device ipvlan14 entered promiscuous mode 23:16:01 executing program 0: r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374"], 0x34}}, 0x0) 23:16:01 executing program 4: pipe(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0xd) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x19404, 0x0) 23:16:01 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="5500000018007f5800fe08b2a4a280930a06000015290dcd30aeda5e3900090008000c0001000000190015000600000000000084136ef75afb010006000000715f000000007f8d621a4559e65517b3000010000000", 0x55}], 0x1}, 0x0) r1 = accept4(r0, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x80, 0x0) fcntl$dupfd(r1, 0x0, r0) 23:16:01 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e6f666964653020f014d336b003eaecffffffffffff91290a7ea290ab0e74464ae5e93f2e8913f108b38137fe3365e5ce66cef84b1df179ca44e4dc94a8676aee3842c57ce0fd2026f292c9ed"], 0x194) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x6686}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00', 0x21}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r3) getdents(r3, &(0x7f0000000040)=""/63, 0xffffffffffffff62) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b0000000290a7ea290ab0e7446"], 0x194) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000000)=0x2) epoll_wait(r1, &(0x7f00000000c0), 0x0, 0xfffffffc) close(r5) ioctl$TIOCCBRK(r5, 0x5428) 23:16:01 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000000)='#-{:{-&[!--)__\x00', &(0x7f0000000080)) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:16:01 executing program 2: socket$packet(0x11, 0x3, 0x300) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = socket(0x1a, 0x5, 0x400000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000180)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040), &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0x52, 0x0}, 0xc000) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000700)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4182, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7fff}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x1) syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000240)={0x4, 0x16, 0x0, 0x5a99, 0x3a, 0xffffffff, &(0x7f0000000200)="15b77b5a74604e0e3b25443bf8647869984cf52d368073ef3c6c592511bd81f8e22e9d45fb838f2298df7ded366a690afef330c6311e0df38ef4"}) fchdir(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) syz_open_procfs(0x0, 0x0) fchdir(r1) ioctl$SIOCNRDECOBS(0xffffffffffffffff, 0x89e2) unshare(0x40000000) [ 442.952204] ip_tables: iptables: counters copy to user failed while replacing table 23:16:01 executing program 0: mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x3f, 0x1, @thr={&(0x7f0000000040)="54e759364aeb3cf3e8e8b56aae82e3f8b071f44c69fa6d468cd3f8c08e28660da145191c4d6c9438b2954300a52c1d5b1524afea42a8b17eb199f33e1cb671fb5f4b0015094b8a67f0d8ff5aa92a2ece473ef0718a36963fad53a5c89666257892a9c6344d9652c9c1d585e8b384c07efb72c16c4dcad86dd478e4b297a2ea4ec7d5e3c3c05cce7f0736dcf7a4af640418f8da99bbcc5d7aa03b8bcadb7931707fcc5d97ae092fd915a3e6660e447dc5b51c55532d8da2ed43795a176227979000a692388e73167c6ea9671729c0", &(0x7f0000000240)="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"}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000320025020000000000000000000000000c000200000000000000000014000100100001000900010067616374"], 0x34}}, 0x0) 23:16:01 executing program 4: pipe(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0xd) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x19404, 0x0) 23:16:01 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYBLOB="7cdc45d6a04b5024", @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) [ 443.055553] IPVS: ftp: loaded support on port[0] = 21 23:16:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r2) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000200)={r4, 0xb}) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r5) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f00000003c0)={{r5}, "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"}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) r7 = socket(0x1000000010, 0x80002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$alg(r7, &(0x7f0000000200), 0x4924924924926d3, 0x0) 23:16:01 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3) recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) r4 = accept4(r2, &(0x7f0000000740)=@generic, &(0x7f00000007c0)=0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000680)=ANY=[@ANYBLOB="180000000614000128dbdf25080001005cf4230080000000456f59aec8ffd9b4d669f8a9bc2c839e44155a7015f1cb19311637bff919691eecda255aad842ed1d50921a57d9fed447b06c2caa8c5b2e3af3138af03ab097a0532b75e79f33143458c71a0cd992583c1de2866c49fd574b98aa3"], 0x18}}, 0x20000000) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffffffffffcc9}], 0x1, 0x2) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x1, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000340)="b57804445ebf3fb2c95b97cd48785e29873a71e761e29b9dbeaf724a5181b9bcc2c9828f5ebfa36f0204e385bb57fff5760bfe235f5cb9ba698af0c4e116f6df496f2d966732cae3a6a458869c26f0cd977a48dc4e03a676e31ba7f7cfffd67d375c358810fecd2b4f495a9c4c90ced2d25e8b249148c80d31a56607656f99cfc2a6cb72f8447af9105095d2e8a1fc4a37f6755dafeec27e2b9ad60b371b4703bd110ceccd1b7d51d7af5f6d64eb0601e916cadada8ccd951bfa2fca74ffaa71a24228b4d9", 0xc5, 0xffffffff00000001}, {&(0x7f0000000440)="25a23ae4bbb277e7525f6d736d7afdbc8ce352ed7a303ce9a0d040e2889072ac5c6789289d9e7e135a19ab36391cb7550ea72a661599876943fed41c78523845a31810958f09c2661bec68a777f371684bca2db6cbc4202b65b203f6496e908276305071583f", 0x66, 0xfffffffffffffff7}, {&(0x7f00000004c0)="96fb4a2e3491d41ab47cd4a44413cbc4c4bd629cc50b686c7d14ac6d41e7403d551db375935bad01c5cb784c7ab1899f0834ab6b6cb9bc7c2443378d46f8a6c00fab226a960f70eac740a755f421a4bb6b4d70a32dc8445d344070373afee16ed232ad00c106ad7287c3413756f755d73f10580de4a5a2a28c862ee4b8b2701b5377ef2ae6b43c7230b227441c0e70bc8f4d7e73d627a1851b3415f2108e36629ba42e710fd0c69d93d7132193129871a7af8dc56636809a51852212367c687f6781ab9ac667ddafa3922723812f16942a0f0ceab3", 0xd5, 0x2}], 0x1002080, &(0x7f0000000900)=ANY=[@ANYBLOB="7395626a5f726f6c653d212f5d3a7b282c686173682c610000000000005fb3f0788f2cc1118a62522c0350c53b884036465ccd4225690560884b4aa4db1a491882c38aae6e6fc317bdf16c4b0a741b115bad4e59939f86222bdd17e087c09a2b588a63505c89645124748656cf49e7801a9deb2e525a1762f5308f92e644a1ff7b8de5cd2953f2dc55dd8008fe0bb6e8f80979743e928740af4a195278dbe36830a4bc92908be828c2cfff62006b00ef1f6a50fe454ddc3458a3456526a8805d74058cb23fec3dd469fac8b7e0e23e92"]) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setxattr$security_ima(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='security.ima\x00', &(0x7f00000002c0)=@md5={0x1, "1a71b9bf8f7745a8362438fc0b6e34ab"}, 0x11, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x2008480, 0x0) [ 443.160527] IPv6: NLM_F_CREATE should be specified when creating new route [ 443.171368] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 443.178263] IPv6: NLM_F_CREATE should be set when creating new route [ 443.184817] IPv6: NLM_F_CREATE should be set when creating new route [ 443.206906] ip_tables: iptables: counters copy to user failed while replacing table 23:16:02 executing program 4: pipe(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0xd) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x19404, 0x0) [ 443.279975] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. [ 443.304308] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:16:02 executing program 1: r0 = add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000240)="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"/293, 0x125, r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) r4 = getegid() keyctl$chown(0x4, r1, r3, r4) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x64, 0xf, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x4048000) socketpair(0x1f, 0x6000e837af7a2e41, 0xfdeb, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9449, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bpq0='bpq0\x00', 0x0, [@default, @default, @bcast, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) [ 443.359284] IPVS: ftp: loaded support on port[0] = 21 [ 443.377845] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 23:16:02 executing program 5: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x101) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a", @ANYRESDEC, @ANYRESHEX=r0], 0x60}}, 0x0) r1 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) [ 443.429959] ip_tables: iptables: counters copy to user failed while replacing table [ 443.556643] device ipvlan14 entered promiscuous mode 23:16:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x0, 0x0) inotify_add_watch(r1, 0x0, 0x0) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x7e6) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000980)={&(0x7f0000000880), 0x10, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="07000000970600000600000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="020000000100000003000000180100001ba423c840a32319787dfcf53385041c4ec0e7f580fbe0b86300fdad374ad745dc386f73ab037e7249afcf74452468de4b3157793810d12f706128c619cafdfa"], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x8001) r4 = syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f0000000240)='./file0\x00', 0x8000, 0x7, &(0x7f00000006c0)=[{&(0x7f00000002c0)="22d219dc9f64d1952fedf6a2c08d88735b09593217de84781f012d6eaa95b3b18bd9ceb088dd8ec59701f5c8ab0bcb0ea6648c618ba061ea59bab5f2669a9ffc5313d9eadf05c3db0fde517d45e89104130e385bd5c0cffbf10690c57f92743d804da9deb1dc5537e5bb68eac8f69c8794f3540a03db1709c9bd7f136422e8bb588d1ab32eddf1c748733d38a4fa6ccf0cfd40b82ec184eeb3c58cc9363afab4f10e7ae68a89fe3be9311932bf7bace5bee968ecab64e8d0c468ef4476caa47333caa013a8655fd8c1108d8604d6fea23cdd2993c5e7cc01cb4dd059d4bc4b15fdfebc0a75bfa8ee2814803a378290e65ffdda00bbc48938826c35a7", 0xfc, 0x1ff}, {&(0x7f00000003c0)="e4e3e7e80692668fdf4536c2f9a0a07a725d155f46269bb2e5d6a4644b98b3e53c46", 0x22, 0x100}, {&(0x7f0000000400)="99c3fc84b9bab044bd0f53af216257f15269d150162b25925284e0dcc6f894d2a72ce94eaadaae2104ec6f52c4", 0x2d, 0x4}, {&(0x7f0000000440)="d5ba933944002d8392f3b31f7b95339f9b97b6b31c911de1ead646a270220c2060d0787a90e1166f0edfe6c442dabc8c4da94054373e4b2075c066695e646e", 0x3f, 0xfffffffffffffeff}, {&(0x7f0000000480)="cbb2a3f92d6e59", 0x7, 0x10001}, {&(0x7f00000004c0)="8fb3ec05309089345b58febb21e26a856f2bfa30474387ddc8b9e5c56b121d26c7c11913fdccf75d24854451e762135fff18cd04a33534104a883aae67fa7f368a56aa82bc447470ed52c577658a6c88229ebcd5093543d8e92731effcd6f304dd1b38897ca76c5dcf0c68d56c7ce37f8319e3c8e2f92644cc9de4786e2cd7dc8452d4aa29c5c097a3a36b4b9daf49e0f87b043f129f3b6be1bec19e909645b8c7f5b7a4c10989b27c70dd0ffb8f30df4ca2c58b5a7fff1e5932b23b726ed81846a53ef94a45bc7d295d4db51159c8edb5e4ec07fc8497c1", 0xd8, 0x7}, {&(0x7f0000000640)="0aaddc3ad71cc59b911185503388bc900806c57a7796c04371364ef80b730d71947c0832f0a20b203511535f1b56235fad741648e0593a94654c6422bc3b35478d6e2b83874afa7164ce90015802a3b7179397ce1753b6fab8e2123809deb0984e5ab40adb7e8ac0be0f85716cc89abafbe36f1593eaa9f0d859be16", 0x7c, 0x7}], 0x40040, &(0x7f0000000780)={[{@norgrplvb='norgrplvb'}, {@nobarrier='nobarrier'}, {@norecovery='norecovery'}, {@discard='discard'}, {@norecovery='norecovery'}, {@statfs_quantum={'statfs_quantum', 0x3d, 0x81}}, {@ignore_local_fs='ignore_local_fs'}], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}]}) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000840)={0x3, 0x2, 0x10}) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x40, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @private2, 0x0, 0x48, 0x1}) 23:16:02 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 23:16:02 executing program 1: setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000001c0)=0x20, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x6a901, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10010000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="e71f797bcf09c487eb00c9"], 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4000, 0x0) fsync(r2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x90000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000180)="0fae0dd0ee0f005a850f91d4360f0ff3b63ef0fe4e00660fe30a66b891d7e4700f23c00f21f8663503000a000f23f82e0f1c570f0f30", 0x36}], 0x1, 0x1c, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, &(0x7f00000002c0)=""/84, &(0x7f0000000040)=0x54) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) [ 443.627963] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:16:02 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 23:16:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r2) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000200)={r4, 0xb}) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r5) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f00000003c0)={{r5}, "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"}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) r7 = socket(0x1000000010, 0x80002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$alg(r7, &(0x7f0000000200), 0x4924924924926d3, 0x0) 23:16:02 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 23:16:02 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa008864450000280000002100069078ac1414bbac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c01004ffc54fbffd90090780000"], 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x202002) unlinkat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x200) keyctl$chown(0x4, r5, r3, r4) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x4, &(0x7f0000000180)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x9}}, {@default_permissions='default_permissions'}], [{@uid_gt={'uid>', r6}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@appraise='appraise'}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@appraise='appraise'}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}}) [ 443.902948] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:16:02 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) [ 444.098508] device ipvlan14 entered promiscuous mode 23:16:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x4, 0x4) sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, 0x0) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x6}, 0x0) clone(0x20040103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000002580)={0x0, 0x0, 0x0}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/adsp1\x00', 0x105102, 0x0) 23:16:02 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:16:02 executing program 5: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000200)={{0x2, 0x0, @reserved="b586009229767a8773ad1756e8b6894274a563c334c40d7227625381e754fbe6"}, 0x32, 0x0, [], "0bd37ce9319058e22433981e02e75211f70adc624b4841ea42cf9f16055faac27cd200"/50}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="bc5edef11000050700"/20, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="edad5955f96943d7dd997bc667345195efc85b3e3cc751115b54128a7b734b740cd9ebfa48745619c44d1ad4e5477d6024ab423d60ea811f97faf2412505260f4a478873678c946f8adca0f0a53580d0ac7f131d82ffcc41c8fdb470630faf607cc2790971872635074cc3ae0437e80d4f0769b9e3086d4faa96b561c210", @ANYRES64=0x0, @ANYRES32, @ANYRES64], 0x60}}, 0x0) r1 = socket(0x10, 0x8000000000000003, 0x0) pipe2(&(0x7f0000000000), 0x80800) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) [ 444.317880] audit: type=1326 audit(1598742962.998:253): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=29164 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 23:16:03 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:16:03 executing program 2: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000300)={0x0, 0x800, 0x99, "e544ab4680b7a39e24fb043f37873358b1be540878683ca11816c52f9abae90a4a5230d94954e95b1047a383d01d67c7b666a21a99b9b80c51a173a649e649f613b87c81a8f29ded5adb616a552445704a1dece61d4284ccd2bacd603713204660f4ee30b7ab06681210e6098594cd0ee0c0d116397a804a0125c31ae01e82ef843b5c1eaffc3bd84fb5f103ae0a8a23e0685aa0f45651fc33"}, 0xa1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) pipe(&(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0xb4, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x84, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x74, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x6}}]}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2fc}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0xb4}}, 0x0) 23:16:03 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) write$binfmt_misc(r0, &(0x7f0000000080)={'syz0', "bbdd97b8be1ab9acdc12c54ca0da71597c3bca8b48331b32a084f9f051123d3790d709f5dc79533778326161852f2259bf8a4f9ed251faf4f56ac7f36a083f960b54c495de1f"}, 0x4a) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, &(0x7f0000000000)=0x8001) 23:16:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @dev}}}}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @empty, @remote}, &(0x7f00000000c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000140)={'syztnl0\x00', r1, 0x1, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010100, @loopback}}}}) 23:16:03 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r5, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYRES32=r4, @ANYBLOB="08001f0007"], 0x40}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r9, @ANYBLOB="83080000022d0057459cd9dcf138a200736974000c00028008000100", @ANYRES32=r8, @ANYBLOB="08001f0007"], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf2516000000050004000100000078000180140002006d61637365633000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e31000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="6ecc46a2c719ae40", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002006772653000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="14000180080003000200000008000300030000002800018008000100", @ANYRES32=r9, @ANYBLOB="140002006d61637365633000000000000000000008000300020000000500030000000000"], 0x118}, 0x1, 0x0, 0x0, 0x20014}, 0x8001) r10 = dup2(r1, r0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, r13, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:03 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x308, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) [ 444.828543] device ipvlan14 entered promiscuous mode 23:16:03 executing program 3: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffe58) fallocate(r0, 0x20, 0x2000, 0x102000000) io_setup(0x9, &(0x7f0000000000)=0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="feffffff696c5f3020640bb4c8ff169dd4c00400008e59000092290a7ea290ab0e7446000000"], 0x194) close(r3) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x3, r3, &(0x7f00000000c0)="a228653c22e5d879d8d8e64eb907cf7ee7ec7fae4806561d196f1e88d417b8c9c29020efb172d882135805867ef423ef1893157b95190a6863bdcbd4c9cd06eccad6adf31213f9ff604c491d586577a78fc9a8c5cdd91d60686714542f65299ecb01c9e777e50c50695b3a7e24fa155cf1d49fb4f08a991bd30351ff", 0x7c, 0x5, 0x0, 0x2, r4}, &(0x7f00000001c0)) 23:16:03 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x308, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:16:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x44, 0x31, 0x501, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xfe20}, 0x1, 0x0, 0x0, 0x800}, 0x0) 23:16:03 executing program 2: syz_mount_image$cifs(&(0x7f0000000140)='cifs\x00', &(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x0, 0x1008, &(0x7f00000006c0)='#\x00') creat(&(0x7f0000000000)='./bus\x00', 0x4) 23:16:03 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r5, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYRES32=r4, @ANYBLOB="08001f0007"], 0x40}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r9, @ANYBLOB="83080000022d0057459cd9dcf138a200736974000c00028008000100", @ANYRES32=r8, @ANYBLOB="08001f0007"], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf2516000000050004000100000078000180140002006d61637365633000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e31000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="6ecc46a2c719ae40", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002006772653000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="14000180080003000200000008000300030000002800018008000100", @ANYRES32=r9, @ANYBLOB="140002006d61637365633000000000000000000008000300020000000500030000000000"], 0x118}, 0x1, 0x0, 0x0, 0x20014}, 0x8001) r10 = dup2(r1, r0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, r13, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:03 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x308, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:16:03 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r1 = gettid() process_vm_writev(r1, &(0x7f0000000840)=[{&(0x7f0000000200)=""/108, 0x6c}, {&(0x7f0000000400)=""/208, 0xd0}, {&(0x7f00000002c0)=""/97, 0x61}, {&(0x7f0000000500)=""/246, 0xf6}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f0000000600)=""/158, 0x9e}, {&(0x7f00000006c0)=""/170, 0xaa}, {&(0x7f0000000780)=""/187, 0xbb}], 0x8, &(0x7f0000000dc0)=[{&(0x7f00000008c0)=""/39, 0x27}, {&(0x7f0000000900)=""/126, 0x7e}, {&(0x7f0000000980)=""/70, 0x46}, {&(0x7f0000000a00)=""/212, 0xd4}, {&(0x7f0000000b00)=""/187, 0xbb}, {&(0x7f0000000bc0)=""/217, 0xd9}, {&(0x7f0000000cc0)=""/245, 0xf5}], 0x7, 0x0) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r0) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f00000001c0)={0x1, 0x7f, [{0x0, 0x0, 0x6}]}) 23:16:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x4000000090}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "040000009c1c8b2900"}) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x120, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000580)) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x363) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r4) splice(r4, &(0x7f00000000c0)=0x5, r3, &(0x7f0000000140)=0xa5, 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="5deb907b72948bc8fe9ee3796bb1450eca45fced9ec109", @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100172,user_id=', @ANYRESDEC=0x0, @ANYBLOB="ff010000eb097533643d", @ANYRESDEC=0x0, @ANYBLOB="2c009be5b010143c61c937637689f80bb13d395a33e70bdc634fa312770170af088005c1731c44d8780c3ee09430c75dc6aad81805d2f32def12b8346323fa8efd109047778d7d6d2fc1342679edfe84974d3a43c405e824e0"]) [ 445.259589] device ipvlan14 entered promiscuous mode 23:16:04 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0xfd, 0x16, 0x3, 0x33, @loopback, @private0={0xfc, 0x0, [], 0x1}, 0x91, 0x8, 0xfffffff7, 0x4}}) sendmsg$nl_route_sched(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)=@newqdisc={0x24c, 0x24, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xa, 0x8}, {0xffe1, 0x2}, {0xfff3, 0xc}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa9, 0x50, 0x8000, 0x0, 0x0, 0x9, 0x7, 0x1}}, {0x6, 0x2, [0x1]}}]}, @qdisc_kind_options=@q_prio={{0x9, 0x1, 'prio\x00'}, {0x18, 0x2, {0x3, "6494900fa7b6234b32f2e2aef3778c18"}}}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x41, 0x3, 0x8, 0x0, 0x5, 0x0, 0x7}}, {0x12, 0x2, [0x4, 0x8, 0x0, 0x7fff, 0x5, 0xc86, 0x8]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_STAB={0x8c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x1, 0x5, 0xff, 0x2, 0x3, 0x8, 0x8}}, {0x14, 0x2, [0x7, 0x3, 0xfffa, 0x0, 0x3f, 0x1, 0x14, 0x1ff]}}, {{0x1c, 0x1, {0x81, 0x1, 0x2, 0x3, 0x1, 0x7, 0x0, 0x3}}, {0xa, 0x2, [0x4, 0xb30, 0x1]}}, {{0x1c, 0x1, {0x0, 0x9, 0x3f, 0x3, 0x0, 0x1000, 0x5, 0x7}}, {0x12, 0x2, [0x5, 0xb4f6, 0x7, 0x20, 0x7f, 0x401, 0x7fff]}}]}, @TCA_STAB={0x10c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x3, 0x1, 0x0, 0x0, 0x9ed, 0x9, 0x8}}, {0x14, 0x2, [0xfffc, 0x6, 0xfff, 0xfffa, 0xfc00, 0x2, 0x8, 0x3]}}, {{0x1c, 0x1, {0xc8, 0x0, 0x3, 0x9, 0x2, 0x5, 0x762, 0x6}}, {0x10, 0x2, [0x9, 0x4, 0x0, 0x8710, 0x9, 0xb4]}}, {{0x1c, 0x1, {0x3, 0x0, 0x8001, 0xffffffff, 0x1, 0x80000000, 0x37d5428b, 0x2}}, {0x8, 0x2, [0x0, 0x7]}}, {{0x1c, 0x1, {0xe7, 0x3, 0x2, 0x3, 0x0, 0x54, 0x5, 0x9}}, {0x16, 0x2, [0x4, 0x2, 0xfff, 0x9, 0x9, 0x1, 0x6c33, 0x9, 0x7]}}, {{0x1c, 0x1, {0x2, 0x20, 0xb6d, 0x8c4, 0x1, 0x401, 0xfff, 0x7}}, {0x12, 0x2, [0x0, 0x0, 0x9, 0x7, 0x7ff, 0x9, 0xc119]}}, {{0x1c, 0x1, {0x1, 0x4, 0x9, 0x101, 0x0, 0x0, 0x1ff, 0x2}}, {0x8, 0x2, [0x8, 0x6]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x425}]}, 0x24c}, 0x1, 0x0, 0x0, 0x40000}, 0x880) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:16:04 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:16:04 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r5, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYRES32=r4, @ANYBLOB="08001f0007"], 0x40}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r9, @ANYBLOB="83080000022d0057459cd9dcf138a200736974000c00028008000100", @ANYRES32=r8, @ANYBLOB="08001f0007"], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf2516000000050004000100000078000180140002006d61637365633000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e31000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="6ecc46a2c719ae40", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002006772653000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="14000180080003000200000008000300030000002800018008000100", @ANYRES32=r9, @ANYBLOB="140002006d61637365633000000000000000000008000300020000000500030000000000"], 0x118}, 0x1, 0x0, 0x0, 0x20014}, 0x8001) r10 = dup2(r1, r0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, r13, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:04 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xe1) write$binfmt_script(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="2f66696c653020d414d336b003ea044e3845350000922d0a7ea290ab0e744600000000"], 0x194) close(r3) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x44) read$eventfd(r0, 0x0, 0x0) 23:16:04 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_buf(r0, 0x29, 0x2e, 0x0, &(0x7f0000000040)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) 23:16:04 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:16:04 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:16:04 executing program 1: unshare(0x2a000400) r0 = add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="28edefb98156e1b9bad505ed8185e8867b496037ed114c32a248e0", 0x1b, 0xfffffffffffffff8) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x4, 0x0, r1) keyctl$describe(0x6, r1, &(0x7f00000002c0)=""/145, 0x91) keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0xfffffffffffffffc, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000300)) 23:16:04 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r5, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYRES32=r4, @ANYBLOB="08001f0007"], 0x40}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r9, @ANYBLOB="83080000022d0057459cd9dcf138a200736974000c00028008000100", @ANYRES32=r8, @ANYBLOB="08001f0007"], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf2516000000050004000100000078000180140002006d61637365633000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e31000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="6ecc46a2c719ae40", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002006772653000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="14000180080003000200000008000300030000002800018008000100", @ANYRES32=r9, @ANYBLOB="140002006d61637365633000000000000000000008000300020000000500030000000000"], 0x118}, 0x1, 0x0, 0x0, 0x20014}, 0x8001) r10 = dup2(r1, r0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, r13, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:04 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:16:04 executing program 2: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="696f636861927365743d757466382c00"]) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x240a01, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x15, 0x0, "c45fc012cfb4163e428605e1e8d5ab4fb12347d46c572c90d277496251912a57956bfb66e49ec28f566a60ccf10fb48910126f7adf6c1d8e38ab94b1cab24c614370df7f6ae9fad9896789f8d9307806"}, 0xd8) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x121400, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000100)={0x2, 0x0, 0x10000}) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r3) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000340)=0x5, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$NBD_CLEAR_QUE(r4, 0xab05) write$binfmt_script(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="0000202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r4) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000300), 0x4) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000180)=0x3) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f00000002c0)={0x5}) [ 445.985422] device ipvlan14 entered promiscuous mode 23:16:04 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x0, 0x0) inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x6000040) sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10002, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffd93}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @private2, 0x0, 0x8, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 23:16:04 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x300, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) [ 446.106976] FAT-fs (loop2): Unrecognized mount option "iocha’set=utf8" or missing value 23:16:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setrlimit(0x7, &(0x7f0000000140)={0x10000, 0x800}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r4) r5 = accept4$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c, 0x80000) fsetxattr(r5, &(0x7f00000000c0)=@random={'system.', '\x00'}, &(0x7f0000000100)='\x01\x00\x00', 0x3, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = dup(0xffffffffffffffff) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000005280)={0x7c8e9db0, 0x0, 0x4, 0x2000, 0x7ff, {0x0, 0x2710}, {0x3, 0x9, 0xfa, 0x3f, 0x8, 0x80, "ca1d2e36"}, 0x8, 0x1, @fd=r4, 0x9, 0x0, r4}) sendmsg$netlink(r4, &(0x7f0000005440)={&(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfb, 0x1000000}, 0xc, &(0x7f0000003080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x00h\x00', @ANYRES32=0xee01, @ANYBLOB="0400330008007c00", @ANYRES32, @ANYBLOB="eadae9b1ec5abb0d07040066006512ede014b9dbfc067c9998ba2bd773aa9e1f7be72719ac85723cc2537faf08349b7d93b7d59677d7503b44e561ae85b5c957f788ff74aba399f4593fdbb99d24b99ed4a5b8c5c0a2001ad4ed0293a740f5ac4e294de4a9e6a2b7ef6d59614705beb0cfa8316b7e44a042233a123d80697d4a105b4b72c515bd3267fb04050bba66e36f2d03515fa2aec9ea6b5d080b25e90af0ea64d26bdd75d8d15d2fc49711b33e3d053403bd4ec4c7c9469130679982c7cbffd18ebca6d020d24c562a95855b731775f4dfb170dd20542c414ca3245e50a8acbbc572cf07f865a7049b9e502a18966afb0753dae5255f73860ae1060005007b000000000000"], 0x174c}, {&(0x7f0000001b40)={0x19c, 0x10, 0x4, 0x70bd25, 0x25dfdbfc, "", [@generic="586984ffeec1ba8157f4e046290a338279353e0635680231389e1bf54462a5d198604a0a35aeb49c1bae6824fa7aab8b66a46a631d1cf332eed697ee3490a7fb39f2f2bd163b9925a0a7e90280eb3a006841f898c0ac80988329d7b2c7816d1fed0ec75b8723e292af856b", @generic="67a243f7308538c047d02a854b92b754056f2b9b757f16bf1f54cc12a7062cc742cfceb8699df3db9114b702e38853906fc98a92efe5016379821e1190b56be4d2b1d8c5a4ac64dc55f4bf3ab7d85d392bee069a361dac9daae078509f83ad88577e71edd8aa0835d3c17b5106417c93f7e3b9e06df31d8f3de0a28a9258663e795447e9b2463057a847da42064080d2e6819b328c66d218d551", @nested={0x84, 0x70, 0x0, 0x1, [@generic="417b7f6be4346d5014e41d33668ff9143cd9816ec2c6955109e112f8f99e278b989f1aaf088f7dddd577b108ff3d248ef48f9ed10d527e154d3d2c6d75b5463cc644cdc01d3ba1d716631150a385dd", @generic="3561da215fb13c2d10b8e168063641c0074c4d5a1024545a09a35ecc1e87cc6888c5d7d474e09cfeec11e38ae3d8770624"]}]}, 0x19c}, {&(0x7f0000001d00)={0x1338, 0x2e, 0x100, 0x70bd28, 0x25dfdbfc, "", [@generic="beb8bd43745fa2b00f0a6ce87addca2aa23d2fa50964df6b944d7135bb94b68ea4b8b145a54239b61e3b389d6c44431c05130b4f9eb3d9b2b9494824c23c16a2084c46f0e931683edf887dfbcda52aeab3fc4544b5899497346b6eb6257c2270c1c3695d156f62cf3c975a2254b269d41f26b9c73a3158d031ca6b2b2c6d004e", @nested={0x25d, 0x1f, 0x0, 0x1, [@generic="230dc01518267b43d84b921f75fb04a1d356a2c818351aecb99596f274a308f6479cc1a06465ab0a98dc478faabb46fda06ad37ccf65c257", @generic="03eb9db5ebdddbb6b572548bd0e0c1ae0dc2e93b7bfe565e5cc50805879737de04a0a11f729ca6ccfc7f613b7298aec868aa9b4f2fc9de2469b4dac041e543934e17810fcc9a1fb9546f1059205f876b9027e9d0513c13ff285ce1f6429ed0a4da5f82536cc601cd3cbdbb6cfa80145dab", @generic="cc4c546e27cb6f9682d5d930a3beb41dc3ca43d4cdcb0ded1ff7c9afd514a2bcdd71bb075d0347ec27344b50c0b144d1154e2f761ba51d491be7ce02470cd7716a1b9ea5b8ab51b31d9c811a9f4ceec0074ccdb7ff59b47a32bb7444e3032f86a67ffd50c75598f861c5737d1e864713d9f3dd30f990793f5475f6055f02c4e58376b381f60eb4799028cc42d788bef71f7e0f2d9912216ea36906c00f2b763554058ce44532502a0281e8c0eb3251decb19cf63b0dbdb5543b405ad934adc68633f5dc4079d57789e84e9524e46a40a81652ab846c96616ee519e25fb544dc2cfd4e66c14649465b32903e638afaeb538d902ead39d3d7ef5", @generic="2fbd37fa5a91d97faf8cf553b281f126384f86db55c7de5681669f35ed075c962a8fa8bb8df7b346548b84cb3094576b60e51f0fa5584e8531ff40779231982bbc54feb607d0e3e604c05dce8fc02907b96648100fd760e1c1bebe5c03bc4f5acd599636e5ca88e35908a6fa6a1cecdc82c38bac817325273a7a51de3c174e081552f1b6caff6fffa0ba54e39d6ae459d59b9a1e08d7281c5516346d41cb59251308532a234beb107bd5cb879bfe9ac2be3e28", @typed={0x4, 0x6d}]}, @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x94, 0x0, 0x0, @uid=0xffffffffffffffff}]}, @typed={0x8, 0x59, 0x0, 0x0, @fd}, @nested={0x4, 0x45}, @nested={0x1020, 0x34, 0x0, 0x1, [@typed={0x8, 0x44, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1a}}, @typed={0x8, 0x0, 0x0, 0x0, @fd=r6}, @typed={0x1004, 0x75, 0x0, 0x0, @binary="58f4d5a14b51caf1ed207769b5043717449deca80638458501247e34c2fbef4bf1ebb14e2995f07d59373bb6c8dbcb4e9b1a5bd75122ad8f405658a37a5d06eb65a6de5476a76e36695ae05ddc5307218ffd04beb97b8fd0de1679d0ac60bd5dffb7f759085cc7892644fceec370ac7e6e460e36197a679d6eb19219ffd04e2b4ebd2abf903925de7ac913b3863bd4159ecf371e9010bfe4106e853174093ee415f336798b009d3e44864588de61b84a4a8fcebc8e5297db29673a503045036929673ff993ec50970245d9a6f4a4037840728b084b23dba0ef88bf3b8469821f828efccde4ce157f6799e68ed93e0edb6063c9938403f5d0f3db92f577ad2f26ac9258ef04f66337e2406f6b7d6e00041513a793a706da02bba37971b0a62f61581057a3ac7014305d8230dfe35c296c89a209a854e7908022c74555f0a3d2c5c656785b4504d8b709fb77ffa88003403af3a0efd00e5e3c26d9d55a08c675464b5b877edf4baa71c305211d9aafa85e520e6ce3128c6d64c3731285f1f0bcd3a7d95b44117b45b77ef18de444918fc1502ac46f80bf49d58004a53c88419ab346d5d147c62963ff9e23f283075ead4c48fe34301a118c7743a2ef3850d6c135e31e7c2f993759fb0c6ee0d4f1c32c3c8b5dfa4ce327cc0befc6d0517fe15816d4f841d1e520485a9a5036194a401faf81485686c86fe988c35be200b3eb8182eaf57a7041805063b73b74437978dba793f63b6c0664667c0b7169d2118b43bf733cb6c38505c5c745623e5dac609a3b74624e5c15efb1c228717a6c7957401df2c0136f89435f2c6deb476ba6ffdbbe145f191b3e245d9a17b164dcf7b5e15c341094eb419bff4b5c9e428a5f3fdebae338048eb725d0ab96423ae4188afb9949045d96780209c69bff2ada61bc3f57ee03b0ad67be0b860dd69407424b7cf4672f7e3b17eff5b22f6062829090622ab04a948ac255f9411618f49ee3c4bcac033f583d8ce29ab3bb4091b3a9fc552f7cf25596aa01d4c7ad9f88e0a440ee7bfab61c8a85090547d50279578c53f6f6e50c17d1e1a40558c91f82ab22892534a3b8c1e28666ad2d0e09e3c0616c36cc12b9b208c2d95c79caf28ca5897ce2040fd2efcf5857fb69c2e5185e7614038432ff4401e761a5b44f049ec2c72f7f1dca702f332b2a6f185c0eff54aa8733a180bc5397727f14530700e1bf19d52688516d4e1e12a15c3fdb871ce14af7b9f66fdca33bf11b9dbbeed60ff3308fa037cb3adbb1fecc562d2dc7211e4042f6843c53acb27d09832b8ee1541a7e338105ae665ef5b13f75148285d53d88458bb7e8081e4f49752c1c8b04bb6a4905d6ae8637c974d56dc7bc4738368f4d8c230fbb70236ac9f9465e26cec682a465d0fd09d7376611f0b852b93a84cd7233013fa6be259d49cede864c7b3f019826063dccb753ddfa45a4a47cbba2890ad0d56d33d7e8dcf312ddf1d0fe41339622a119ea8fe94c401cd568e8abc67e68b6b86e62091ed3f62563eb2f93369740cf2ad87d73d0292230bb4005861ee803e7de006521f6f8a214b232743e0fb33f2c0a1e96fb2c9517c3e2cb8e7c445a37f57db97e8cd95583791e67b044592e6c8eb72d3326a02941b6e2e21d2d34bc53cbca14991a97f0a0b08e7e9ea8349b768160e84450c236f5dd36f017d64dfb1a59f29665c7829d1a0eda8dc6e661cdf369a2c0c77cf460eb48c189bace8e1aa927c0bae68ac58199a6185efe821c4f1948266c1318079c6dd3c0e25e50a8273fe3bdbe00ba859f251d76c6294d42c618ef28696e25f93d8c3f810de6aefdcf91fb51b78760411633f387bbbc7059864ec77dd9ad8b1575be8dc5993161b1ea30eb521e0c3f25934d14e38207708c6abe5732b2247e93a4dcfc6d38eea9eac2ea36c610e49444b2ce2888855f88324172291c81b826037c5e5041c13c57ff701f75f81dd74803ef6e733dacbd1b21cdd61af98c8b6e5c32ad7fe2e14cc8a3d0437013e92d7728878ae76b32e7bcf0fbebd2e99585c94dc31b0fc9eb8d9efcde23aa22e0a497e835b60a313ef1f89566d140e24403b3e6953e774eb514e3c8acc4ad60119c6ab8e57c8904b05fcac2bfa94a5e8bf4c23cc44df0d4462520a05c910fcc63c0c0ca84a5f0ff4ec3b26b265bc1e96b255faf36de9a32f84cff8bcb0ca4a610718d7543b3b95b0d11a11846d568aad7ef51d51783fbb0cff3f3ffa71271d6394ad0f6de6f04ecec67f7e3555001e85bf543a6378406679dbd8c3efe9ebf96d871491cdd73ba82b9b32dab83e9f17492c737723ff773cc054002113c1147964f59a103f68f3c4112bf7e8b9693c18fe3adc094430b44dc2558839989848e885c95aa415257106a12748260e39f6e48905dfda14bb8462771b805a4f4e2cad34eb67bc1f0d7cd423d2a9c513c0b2ec8b8dcd12d00f898d6bfba3553cd5b4efa61d0dd09690e5ddffffa6d12353b7bda93383c94fa9c5f6c22de9386158b745ff8a68cb3dc74dc6e72ee5abc16ddf2f811b382f7c062dbe1172411ae86804e574e33a7fcca45b928f9dfaecc7e34ae646e8d65ed608c744215dca0bcc26e95229062b4d26fbe9b59af510f4218f039deea51516d63b22fe74a3d101f23390dbfe9157ae2cb55fbcd91ea005257edc62904fd6b86a91cf4c86967b0fc3d7f3aa8fbf3094ea6327e2e8976998860048f2144db6e16c18455d572737069bc82e5df9b23d254e258efc6e496e4ee57e0b640acdb294f1e4fc54958bc5e454a1a657e2d24a2b0707340cb87f9eb46171dfe4c8c75baf82040198f7e94290d70b2044c9f01dfc09b74354594dbdb0329e755da86cf2c0fb6e9f13e2bc89d3d55a54e65070b60c41ee2089153dece8f72e8740ae4c1f34fceec3ec7fc11eb39dfc0ffd39da99bb8adcb9319d210ba777fc763925b02193c3b42946f3cdca75b912b95c000d9464b6ae99025a1df9e60660dcc2117539e79205f92e27fd0f16bd428bd9c9eaa1cd51254b17eabfda9377ae42378e448c5b1c16687f4199176cb5efb94d79a9173ae39627802d90b80f7d2a52911974dc821d1a1e34d227c75419bd1dac86b15d24d86c671413d6a56c6b9bd6b41d5dfca09d8e8c08c8470d4e38c17768fb2f5f706c2d9d27efc8667e22e3c8ef8466497e1a7e33f460c890b28585fb44ea52d78b0885d822b4efd20bfa03241e8f9609623cce0505b9d18746487b76fb17030117f67c75303b2ae2881ddc4eedec305acab7c65097a4a5983c3713cbcc3c16083e4279c2e7bf1996227440e89b8af6ed69cb145a153d3086387d3cdc1c462390c834b98219369aaeedc970c0628f83c6d41e8c955b2033566b4ebdb6cc5c7a3067aeefcce05d0da8c0849c620ce4f21a1dd37ed35c9a3bcab2fb8c83c71ab8c4590f77a8e80d3c85df4000c600265007fd33aaea48edf7ac8436568c8ba734c2038df6dfb929f31be8e31d5afc41abc8236ffb5adbb7e4e897900c67c545750c2955ed4b5527785c32bd052407b8d1d7ca023b7a13ce6ad83a56169e48aeb50b33d142612c8bca6126b2ce780f82a14433a34dd32f59ebe66dc418511dd0ccbb4787cbca735f28206cc453ef81b8c997f30cf2c10acc011f4729b42421b0365b51d1ebd30917335a09ae0708848387b59a325402bad101ba6d3da495a29ba8e2f7210e78b352eae0c8c6f28a847948f48c26d3cd74c5b07e84481e5720d3358018c23f15aa991d2c4d89d60e65086bbf2d5662cc4ca16bc136cc94899bd77ebd94fa8ca0708d95d332bf61b5a9774c5c980d28be9cb5d7a24ee2095cc60dbac4ce9bdcbd4466d7dda2e503289df0d11c64097724f7b63909d92b7ee714e6f3692958ab13458b92785045e233f619d1d0284fce6c8cfe3ee502127652adb0d00ccb6029bb97b4767a5554b8a7a7cd7b47184dff774344531e7ae3d07afec0efc61c900a51f705ff5851f9aadc7e6bdd6d58d603d492ba6c76592e4bccdaa11849f4209a2ab0c3227f322af2a3a89809a475d015e033d1b7f5ef9f994bf2e75b12be100a76c79aa30da46051b31538950b2fc526142294da3139444deda1878a60fb089c03f89fb8389c50870c43513e0037df12d6ba502149536155923a7b109a0197195a8b56479e4577a5301482c4d878a954a1eda113ce506f8b8e0bdd080491419f41f53764c56bbfb26bdc59d49ed35b3127dd87bd432c60abcf75182138cb43c66772055ef99e659d7bcc16f1114ca83c07bd71465573dcc9a95eaeee2adf9ff8b679b9740e3502e87678fdc8dd30665a72998f510aa0bbd1345eec9f7ed51f1da8a136603c01883edcbc9a99133617fae619ebfe96f85e617011e36806c3461168fc1b069f336e525385ac88e24c2f9aade92bab5cd558b93b426d933d75b831326bfe32deb8ae07a8dea42b9eb60be339c0b38110d1ccc17f93d1e3ec82fb8f99635ab536f59d23dfa67b1f8d6dfdd996cff9beff624084b8bc79ac9fd223a22bedfdba3af76a69ea15c220aadc55a9c43b8d00a4cbea0d47cbbd75cbf9771207f4c891dc9542fa0ff744d1943b650f0407a5b5e90d8a06d34f11d9ed510270dbc0eaa3faccf26f00d7e0d75e8f3e100318ddc685c632ef29534ad4860bd958ac8543548904e59273109b0b7638085e956c416bb2f03e5fbe8433b297790d139ee9716d03ffa3d47f252ff8f3784c34056eda403967707f53b3a003b26bd13b4071bc544edcda825789e3c3804681a2ae572af018b1a9b0f01455a9444275eb32526f95f0a18e006108bdb4ab7b653f7486cf1cadc289190669ce7a483ec06dda4fc00bd30a7c993feb713f3cc296d02253cfc11e65415a0e70beb513ae08189a69f278f12a54e42d40c61e226fe803d5fd95f399ca80a66cc160d4eebae6dc616eee9ab5152dad227060b8a5812f8b449ccef9db20d330ab9781a5ccacc77907a3cfee424994865a248d1211cc73e93b3bf234075c2284a97be88ad8f5a8989b69506c0c0d6b6303bc28135d3f507b365da911a4f890639e4028afacb7c74a43ccd106d772a2aa3c0868d295f2aa34f11696b499649b7359975668c4474ea3a61acdd3de9ef4fc3b7aa4b1506a97d8e8b1b801d82b9673d106681ea3204f381c67db39251b9a2039fded32e9ba9cf874b1b36a46ac82c25f4d983c89ca991de0aaf6fb2e360155d5a0f2d1a06039a677c63e5704317becbb2353780272e3ffcc3d5a6ef47cc794dfab0991013338a5f1b6154f5e49e390369ae3f393da912a7fd42074ac37d2398500fcff9aeaae20ad24ffff7c81e6ad40f4645d4ba110b8fe9f5205ff6854a2d726a70f13ca766e390162bf5092ce4d42c3d11cf4356e9fc738e62d2b61c60caa6bac93573eaf6cc4287a0537f61aa32eb121e41cd45158600eff85b6e7f2905ae311ccdb01c6db51e982ba14517985f94de2462398638605ebca91818bd3ac5b4a6eb4e7f25751bc83d1539a018e2e5f864f3acd29b3346e3c064106bdce09947c01ee46ab7ed4a46dc39e39537b58a47db074abf6de2bd1e62eb759ea80f1f77f469bb4d5feae8cbafb20629ea5550985b4b53d71ab7a18241a8d33eec3c376aee6d3ce84258256f72d7310ae3dc7a935544de3872e6b08615c15f0ec5a4498f44f9f7f091a15a13ee0ce372550d893437b453e5b5888707d30c309f92b1688b233911fe271330cce60607b30c2532395ebbaad1bd300d83b8a53e9b586fb9e08e1f37cdc49448d5d2c7fe7bc1832de1b308b4e4e1b10dba2b33f1a65933d239f79d"}, @typed={0x8, 0x6c, 0x0, 0x0, @pid}]}, @nested={0x10, 0x54, 0x0, 0x1, [@typed={0xc, 0x19, 0x0, 0x0, @u64=0xaf3}]}]}, 0x1338}, {&(0x7f00000002c0)={0x84, 0x18, 0x200, 0x70bd29, 0x25dfdbfb, "", [@generic="63bcf4278aab82bf56dea895dd80ad3037994b94a9ec9cf679ae0dfbe47052fc55a942bd035f2b8da6294d9eebd9a041dcc41fa2230528ebace77b586684e08808f932ccbcb92c273aea9923120c95a0816fac0983a0ef4387b368996152bb56801c04eaed4350475d5e649dc3a361403d23d706"]}, 0x84}, {&(0x7f0000003040)={0x10, 0x1e, 0x400, 0x70bd25, 0x25dfdbfd}, 0x10}], 0x5, &(0x7f0000005300)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r2, r4, 0xffffffffffffffff, r7, r1]}}], 0x120, 0x8000}, 0x801) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 446.193628] FAT-fs (loop2): Unrecognized mount option "iocha’set=utf8" or missing value [ 446.209069] device ipvlan14 entered promiscuous mode 23:16:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x18c, 0x32, 0x103, 0x0, 0x0, {}, [{0x178, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x148, 0x2, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0x9, 0x6, 0x3, 0x36}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x101, 0x6, 0x800, 0xd09a}, 0x77}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x4, 0x20000000, 0x5, 0x8}, 0x2c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2ae, 0x8, 0x7, 0x100, 0x1}, 0x44}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x1, 0x0, 0xcb64, 0x9}, 0x64}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0xffffcd02, 0x3, 0x6, 0x8}, 0x63}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff8, 0x81, 0x2, 0x9, 0x40000000}, 0x2e}}]}, {0x58, 0x6, "be231ceaa5f0610a926a5eba7e9840a9e3be0f8e1f4fb8d19a62e912ed615c97655e7c0893dd94b9ed12e8d625586bdba22db1c788e915bcc0508daf09062314d1421fa1dc965b6f632b97bc037a3a4096d6b5df"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x18c}}, 0x0) r1 = accept4(r0, &(0x7f0000000140)=@xdp, &(0x7f00000001c0)=0x80, 0x800) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x3f8, 0x200, 0x70bd28, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc4840}, 0x20000011) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r3) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x4000001) 23:16:05 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x300, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:16:05 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r5, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYRES32=r4, @ANYBLOB="08001f0007"], 0x40}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r9, @ANYBLOB="83080000022d0057459cd9dcf138a200736974000c00028008000100", @ANYRES32=r8, @ANYBLOB="08001f0007"], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf2516000000050004000100000078000180140002006d61637365633000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e31000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="6ecc46a2c719ae40", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002006772653000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="14000180080003000200000008000300030000002800018008000100", @ANYRES32=r9, @ANYBLOB="140002006d61637365633000000000000000000008000300020000000500030000000000"], 0x118}, 0x1, 0x0, 0x0, 0x20014}, 0x8001) r10 = dup2(r1, r0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:05 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="604000001000050700000000000000859b1627ff", @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c000280060001000300000006000100000000002d000000020000000a000500040000000000000011000a004a"], 0x60}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000000)=0xe8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="7300000000000000005524cac10fca710528b3078ceadbae70d8be2a5a4ec84e1fb742d6382898dc14dbae05beeec7fce5edff176ef428e063e1c2a1ff3d396f69c5b82901c66279a701f6ea4497335de305954a96c7766da76ba646c2d59c6bedaa30ff59d5a66e5314d873e6350ca145db5a7081b23995df228c442a0cb84d4b12f5679f35350f78f285ea4038b3d57d00f0d4775535f09c85051ed0d492dac68c73981cc905433e03b56a9dfcda049e3c48e7fc96c1e4e9483cc77c85a2d32bb875463cc0b5581b8e7b953a81e66d8293a3c256", @ANYRES32=r0, @ANYBLOB="7800002000000004000000044ef800380066000080299078e00000020a010102892380640101017f000001ac1414aaac1414aaac1e0001ac141438000000007f00000100"]}) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/35, 0x23}, {&(0x7f0000000300)=""/139, 0x8b}], 0x2, 0x0, 0x0, 0x14}, 0x8045) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x2, 0x4) r1 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:16:05 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x11250c2, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) ftruncate(r2, 0x208200) r3 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x4) sendfile(r0, r1, 0x0, 0x8000fffffffe) bind$can_raw(r1, &(0x7f0000000040), 0x10) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) 23:16:05 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x300, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:16:05 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@local, 0xe5, 0x0, 0x0, 0x1, 0x400}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x4, 0x2, 0x5, 0xdf2}, 0x10) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x1c1880, 0x0) connect$pppl2tp(r1, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @multicast2}, 0x3, 0x0, 0x3}}, 0x26) [ 446.593742] nla_parse: 5 callbacks suppressed [ 446.593750] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 23:16:05 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) [ 446.631986] audit: type=1800 audit(1598742965.308:254): pid=29403 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="bus" dev="sda1" ino=17216 res=0 23:16:05 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r5, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYRES32=r4, @ANYBLOB="08001f0007"], 0x40}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r9, @ANYBLOB="83080000022d0057459cd9dcf138a200736974000c00028008000100", @ANYRES32=r8, @ANYBLOB="08001f0007"], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf2516000000050004000100000078000180140002006d61637365633000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e31000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="6ecc46a2c719ae40", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002006772653000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="14000180080003000200000008000300030000002800018008000100", @ANYRES32=r9, @ANYBLOB="140002006d61637365633000000000000000000008000300020000000500030000000000"], 0x118}, 0x1, 0x0, 0x0, 0x20014}, 0x8001) r10 = dup2(r1, r0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) [ 446.786909] xt_HMARK: hash modulus can't be zero [ 446.858121] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 23:16:05 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup(r1) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0xcc, r3, 0x300, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, [], 0x1}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x35}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400004) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r4) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r7) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000000)=r7) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xda00) write$cgroup_int(r6, &(0x7f0000000200), 0x43400) 23:16:05 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) inotify_init1(0x800) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) [ 447.040604] device ipvlan14 entered promiscuous mode [ 447.149191] device ipvlan14 entered promiscuous mode 23:16:06 executing program 3: getpid() accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) set_thread_area(0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f00000005c0)={@remote, @ipv4={[], [], @loopback}, @local, 0x0, 0x0, 0xfffe}) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000140)=0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000ffffffff00000000080001007462660034000200280001000000000000000000000000000002000000000000d29800000000000000000000000000000800070000000000"], 0x60}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x4, 0x3f, 0xbf, 0xfffffffe, 0x2, @loopback, @remote, 0x0, 0x7, 0x3, 0x1}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, 0x0, 0x4040041) preadv(0xffffffffffffffff, &(0x7f0000000500), 0x37d, 0x0, 0x0) 23:16:06 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:16:06 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r5, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYRES32=r4, @ANYBLOB="08001f0007"], 0x40}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r9, @ANYBLOB="83080000022d0057459cd9dcf138a200736974000c00028008000100", @ANYRES32=r8, @ANYBLOB="08001f0007"], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf2516000000050004000100000078000180140002006d61637365633000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e31000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="6ecc46a2c719ae40", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002006772653000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="14000180080003000200000008000300030000002800018008000100", @ANYRES32=r9, @ANYBLOB="140002006d61637365633000000000000000000008000300020000000500030000000000"], 0x118}, 0x1, 0x0, 0x0, 0x20014}, 0x8001) r10 = dup2(r1, r0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:06 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000580)={0xe, {0x9, 0x59, 0x8, 0x1000, "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"}}, 0x100c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000040)={0x0, 0x9, [0x100, 0x3f, 0x3ff, 0x1, 0x9, 0x400]}) write$P9_RREMOVE(r4, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fdatasync(r4) fchmod(0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x100007, r4, 0x9}) 23:16:06 executing program 2: madvise(&(0x7f0000bdd000/0x1000)=nil, 0x1000, 0x12) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) clone(0x10020000, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYBLOB="aac2e895f276ffd47a475ee23218c742a41fb7db16ee0b616efdebf3c6bce453ef6ab2423f83f72f1c20a637ef46e1ae56aab853c59db4acee8614f804d321fa88f46d18829c8a159b9ea0bb0fddb8fbb547419637439330524ecb87c484df4ec317add63051b6f60101d2c384630da916862b5cdc60cc4a1f6c9bc1e4da927cea915093a67f14eab07bec322ed1af787b3b2133802896cf8920fb1ca0262fca2133ce745e7979b6959161b226e2ccd903b9b831f62b12ffa4f6a35d544002266fdadf37677249a5984d576b753232298c6941b5446e18d7f8663bef5c23fe5b380e1ff6631871b317ad4d41f6f1273ef3d52406611b3eb8966b618d90b967d9f5575e04e9bbd76caf4211180d9692aa66ff8ec0b4953ab9e3c86449330e759f5262895dc1990183b5ac2d9150b337c621364b4f2e49931995875a08743e413f349927819ede70612f5c33bf802ea3d7614361ca27103aa11f76384f5e7fd0428cc68157102330192eccf33d3f7fbfe0b1d3fc69b670827f7e12d98439309db6a0e2e5d37c28d73e5c28508b4baae016172e0f346e2847ad3fb4c0e6b98e085af8e9187b7f8af018b699074cf9f41720074768cb1a332f3b80601fb85aed8b8717c87679c1be333cfd72973c5b6392b5a1a0569cc42aa2380825dbc2e02246ace62a9daac1cce786a2245be098ccd240ccbf602deff587c982cbc1a6e935782fff8f823f9ff14d7b1199c7125024e2632472c20a73c0b50dd33cc955afba34d8e80014bf0328ce9fe1d25a0d787b7f567320b8dba37be8465554deb3670409ee71e4ee447909e2330ab2861d1f33f0a65bed5cf14eff997dd369f2f8ec2ec44e994ad9534126e4b5e97e596a6726c1756244a298461c849f161ac0b9fa24d2ae4a64163cecae9f9fa02549c9cb1adff3615835ab7130d5c5c47020555f6ca5680a854691d1f83de24bdf6fcfc37189bea23a7f4fbf13ba43678221cbd0d842da37b41e991dd02a313d5323a31b6796a10e432453d98e0952a999337c17eddf7d46f133fd1cd91453b3f4570a93909bc1e8075e1dd3579c71a69e40fc06c797f3749b33bea669ab1c5be47de789b60f7ce8b7c0796ab1f0f171b5f61b53524b513d03aa2a7dbd664e5b2aa83f88e2e3c1412ab5592d1b00c7051dc1b73177d6b76592171cf4152ffff3a395d5a58e43fdc495eb4f60b8c1799e6b4017d6870ce5febaf145ad266b48bfe481008e7ed82a4d280b8de97ce0c77d4ec88c79ddc514d7eba26431479f3a4b44ab106d31eaf3e596b3448680c83526fb2ebd080d5a138d89dad38ae1920422f730a183024407ac6b4f6da10b9a5c59842ece4f94b4168523929073f02ce90f5abf614a90b8f4ae341ed509a050a94317d85cd4b91e3784f417a17bb1cc657bfa247e27f704f7ab5526a1256486540774db10989cea94aa0083dda7c370530aaeea3af01ee89e3bdc674ef2d5a52c7d7a9cd8d5153e26445f3082389eeeee6408f2527fe508ecf2949f6f541ff66e7336ec8862ce8fcaecded4762615a1a2eb61fd5a8403b7a277c5bf07117bdfb2cab4497f0a1dbe428c47d58a40ae33d312657e903cb9ea3058c0c4650662333e85893a31bac357c12a62e70fb6b81bc19ad85b4007f93438358fc746e0198ef58e2af8131577205cd8d3da2d4d68b3d2e8ad184ef0f8b3b500ea7b29d3235e656e14f01ccf4750dd5285bf909486c084dbb2ef96f4110a165a28bbd8adf78f4203d014b9851c3e0259c5700b83a840f1cf8de0a377b3ac808fb99f88d2517791d59b4f83ebcc5f0e7cf2e7f79a6246d13377449f82215b8cce2a5043f06206d8d52c79bb1233f920535a75841e1d07e27fa11eb8406cb74c6a69b20a1141f19787978409405f624fde2691bc486972aa63cb408019fd9077d24afca8cec28648402c5d04211bf72b3dab846570bd983a96489cd3361999a6fa4dc13f3c319fa4880981d1e3870a273402ea41236db08e692ec8c2149e8599ebe0bb152ab67f21df5b908db7deb199ca4cacbb5b0f18829824ff9da25874e4f1c3233be50fe2513d28c4efd6fdddb26ff12f284f3e6b1e4af0147e9ba8719e065d13a80d744e3ed2a33f6874b925e102fc8ced204d31db87afe182eb701024980c09f68b4bdd67ecfd4be8b1d2c63a096a8d296964559988063dd2862fd40c79cc60890335bfa056624693333638e0b060bbc3331c4b1632958dc44bcb28a855712f7e256fc64af958fef2715ea33b40810a2dbcdea66c91ab16ab0044560ea404c8b620cebd7a1e3edbd91c03913a775628a46b3e1591f62b664e220ab93208a5f9773b16e915b5322172e87440de052bcff9de2a1f04ad7b5b01b6eb73fdbbd4713e6119db24c555b72a91a3697278c057e12bcc596a82dcb514906f80285e8a54bd373ac1e337e2a309bb609b002cc64e64e918e2f4b7bbb800a8c12e35723456368b827df1a78422cf42f2699c00ee6cca602836e8172ee34662a8f25a71c9426c07ae42c0057fc2f6f90bcce9f77339575f3e1dc514044c3ce16587c6248593604dc8c9c4ae79220d1ad70c2691395df40fc4b99a5245f93aa53e4c92086c3968bbc35f4ee7474f13e18ace816dc67cb327656195d8dafc75a51ede33f5e009dc7f336f7c08e02f01786052d3008cfc6219679ff1f163dd5efb77906065c89919067216eabd70e678811c2a0d8d7e29189442f869b6d3ea61de9fc0aa47b836e13bcfc2a69b31849b60193a51234d90b9a8d3c43fef06d6d028211a3cbd756825a3b1159a96dfe1d730889bbed3e3f0c57bcf75572cd3b5d9225507954ded068a9589bc6bfd388c9b87b3e962375c767aa33b11e61f7046366dc88c557dbc039781e0491543a7bb9b241341bca71d859e7c1f30dbe4051d644f6df0bead1baf1f66428f5bedd8f42239be17f7b754ade29fb8e714b4c2f7bdb68b761383a5e26a695d028c3e91ae6df4cb204e8f955959b5ed9ee6fdc8c93a83f1ae678d76bc08fe04cc4d9323c3ad476b58e89d82097341d5cdf88346b3b6304d6ccc9f60160098d807f65337f61195335841c0208bcd35528849804a343244aac47f7ebcfd4f875b8df2c1b4c55bc081da012b51e6f2bfe23c5352b1dd85e0b728df56eb03b087654de37dcbdff2d4b95c9192e519d364b9430bc5fc2e04e1eabba363cc5a2bdb64e42a8a4d459e4d63340dc11de7e4b5b48d69e659394386fbb0a536a99bd8937f5fd63cd69bd8d9d73a0415d49e2f63da4acbf2f9bc4c0aa53ca047fbdbbcd93e0367be880ed8c4ea6e1c84fb7f993749364717a6d89ce367f4892c0e8a38651caa8e98d6923ab020287601f06f43929f461aba22d81116e6259118d2026007f8ada466c0bfc34550daa6dbc7ce1c461ccae052df5fa412cf317d6d30e3563b0b997b71a553cd8d3d73fe05fc5526c45273593b4d729c4fe2c661adf989469195a17091cf5d15bd122b3145fb6f24b5e9f165ccbd2a6a799eb4cfe1352e65262e5f453481b356e5338a286b524e1c1727563f465b29da6a641ac1592cfe20467ba4017cac75b0200cf748228de5ef6ed4ce9afd75ae243d0e0d7bc5f8ff22b4785b299b6bf59a5dc04cd4f2c76243ab58be4fdc12a6c3f9f313f7797ef941e07874e1abd3d1ecd4a5640f8437c1568b4e96303b7361312ecc80bc0a8a861522f4b4347fa3416050ccca2ce5a3882e747603c9ffdf0d00023c75a5330487f123dbb489c175bdfd2458a3cdaf9d707e8038d492a983240e30360e87c28ae6345fd677b7b94702986329c7e9d11b12820f231f4e3e696309590350f7a4e766be83c7deb1ebeabb67676f3055f606533f33307c9f385b09e1076c79b9a802036e29813684888f6b72d5d2875152eba86f3af326e28be837e3a352ff2a898152e7f51e1daa773d6cbf0dc2a5dae2e5fa3473cfc4244bb0dfba5ae48b76051fdc6c4afbc6904fc3d16fa5180f39cdabebbe04f1cbadda79f0d551859fa3c0f577eaa8f93b3b1abb057a7d5585a5dd93525efb24843aded9d8b3d69049c8dcdf629cbb7078207d8112af9462d941daf16f3ccaaf5d9b8db9e7c85b017101d5817b1cadd44c3f9f9ab7e6d73d418b79d134eacb6da7a6837dc2c8a360f9eac98b594abc83a0921ab85be9f89f52928341231e7d951d8e5e91e3e60058b2f4f85c54779fb9b1b725d0a31329827a51e7142af95ecae199d3c4fbd14d8d014928f8665b38e1d4e25ff71e4f31e2125581761f4a8bf3628964e7347d42074ff5823541e47bd36e9787deb6c52017500526dea71739687859f7ead9bca1d42453d46b2c8bca143f56f3a9c69ccc8516d071744391563b61924e792d4b0d5ae8f16efb1011ec6336002f8dcfd508dcae0bf60f128f11ff39819744966fdf9716dfd2dbb498d99f2500e7538af8bfced86b55c1ced170890b76962ca54fbea2de9e3ad91424b425d8f90682544589a8d563c838c427746b232952455db0d9ea34bb0973131563404f527a5469976d07707d218ae2e59853b4db067ce98ab5785c5d1d0956461232c99d32a0f234b3cb849897808ac8eea283b19732d0a6509f27ae566e054ed41353a20f91c12029f15ab1e69977e7930c737e6584064f853f6ad5df68ab7e2002ab1bd0678097a609f1211094b851079a22ac00eae80fc9710ef4ed8d9d2bdf181a6443b251402cd12a1a5927aa5fbc46b378b1fc8bce08463ebed375e36d138cc0e922b9eb031d95ac3adc176b4a051345c1e9677172280806378d48f608ae2fa9b1be0403a4328571f9c4cc1027679ec371b1c60de4dd4a44de8a322e19cc371a5a39679b4b67cedbab4a2598181580d3b372f657a6cb294b965940236c21b0a73ee557c0da065f90114f5bd10e39e87b2d2c52074027b7cf4d5c84279d561173315d182b7eed8fba364e8d4621f670cd57571a684d3524cc5a19139d389c3be1224b4e18a7e3922aa17f8a59d0bb7cbad720d159648022dc243c40e3346b349f8d36c16dfeeed8d2ed16038628133e910aadb44d81ef59fee97e650c570bb952477da4fe129143c3f6081886fbf5c0b1ee283e849fce2d1b5213c083e24190291270cf4cbcb01b9bbf35f2bf6e61761624d156362d0b6d8b2e701efce61e73abcda09f2c9289790e2d16356030712788a19b98c0a47856d84664f058db3ca6f4b61a7863da69f31bb652cec484552eca68d367b2a9a550bf4aa75a36857c4b81024141cc6082793541a56cd0356c5a313f837cc79f711d3e62ed03f4abad5ee96281b64bc70e0023250f2b5598276188095e0368ea20cb2df41062b1fa46ce69d3d9ab60f2f60b889593de3a12a4c0643468a8fff292184d3415929fbd110bcf342b8a68c76cf1a0fdae1f267c871f10a509204b23774b35f0f76d49995bdddcc4aa9fe8004c74f2956a092dfaf98e6ae9794d4b4fb1b9f11a640e665b0e4963c07fea5fae9029df01ec8ba716efb40f8e96761fd2fc1af17b27e070e0710d92e68c52eedd37fc8f9cc3286f03814020acb788aef503986dfbbbb3613f488b8bcc54edd9ec76a371316e0f501421ef1ea6b3a5466c21a8b2ef2b363cd8111517ec21bf6bd03f528b9b6113a53b98c10c6a69b3b4f46989b1c28a9c757e64150bf0438620f925e316032efe2b5b4971cf9a288f9b281252dead573d4422cf41bbc271f94ed0b8fc767819a87bc77a1a82dcca31512b1b41a1e2d5b64a5bc24cfe4a8b29830551222a9c90e7a1d9a58c38fb8733ca8f7e3b3efc82d6bd7c8dfb506dbe359f39b3318184", @ANYRESHEX, @ANYRES32, @ANYBLOB="08001f0007"], 0x40}, 0x1, 0x0, 0x0, 0x48805}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000940)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="761e61c3ce671acd7a040000", @ANYRES32=r4, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYRES32=r3, @ANYBLOB="08001f0007"], 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @dev}}}], 0x20}}], 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r8, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYRES32=r7, @ANYBLOB="08001f0007"], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="a0000000", @ANYRES16=0x0, @ANYBLOB="100025bd7200fcdbdf250d0000001c000180080003000200000008000300030000000800f979b40bd88da71a0300b65c00000c00018008000100", @ANYRES32=0x0, @ANYBLOB="2400018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=r3, @ANYBLOB="08000300020000004000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=r8, @ANYBLOB="0800030002000000140002006272696467655f736c6176655f310000"], 0xa0}, 0x1, 0x0, 0x0, 0x44000}, 0x4c018) 23:16:06 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) [ 447.533605] xt_HMARK: hash modulus can't be zero [ 447.553496] audit: type=1804 audit(1598742966.228:255): pid=29474 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir883520692/syzkaller.LV7oW2/827/bus" dev="sda1" ino=17257 res=1 [ 447.641854] xt_HMARK: hash modulus can't be zero [ 447.652468] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 23:16:06 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r5, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYRES32=r4, @ANYBLOB="08001f0007"], 0x40}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r9, @ANYBLOB="83080000022d0057459cd9dcf138a200736974000c00028008000100", @ANYRES32=r8, @ANYBLOB="08001f0007"], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf2516000000050004000100000078000180140002006d61637365633000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e31000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="6ecc46a2c719ae40", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002006772653000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="14000180080003000200000008000300030000002800018008000100", @ANYRES32=r9, @ANYBLOB="140002006d61637365633000000000000000000008000300020000000500030000000000"], 0x118}, 0x1, 0x0, 0x0, 0x20014}, 0x8001) r10 = dup2(r1, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:06 executing program 1: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x20880, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) open(0x0, 0x0, 0x0) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000000)="cd8fa98e143160f6ffc2d4d82c39641abf5c403b4e7a4fc59906d6e535e29c5ab70632288814", 0x26) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r3 = open$dir(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) open(0x0, 0x141042, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000580)={{r2}, 0x0, 0x10, @inherit={0x70, &(0x7f0000000200)={0x0, 0x5, 0x3, 0xfffffffffffffffc, {0x11, 0x7ff, 0x7fff, 0x4a6, 0x2000000000000000}, [0x5, 0x0, 0x8, 0x6, 0x2]}}, @name="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"}) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) r4 = signalfd4(r3, &(0x7f0000000140)={[0x9]}, 0x8, 0x0) mmap$snddsp_control(&(0x7f0000254000/0x1000)=nil, 0x1000, 0xd, 0x100010, r4, 0x83000000) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) 23:16:06 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x200e086, &(0x7f0000000240)=ANY=[@ANYBLOB="646f7500020000"]) 23:16:06 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:16:06 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[], 0x60}}, 0x0) r0 = socket(0x22, 0x800, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) recvmmsg(r1, &(0x7f0000002a00)=[{{&(0x7f00000016c0)=@generic, 0x80, &(0x7f0000001740), 0x0, &(0x7f0000001780)=""/210, 0xd2}, 0x7}, {{&(0x7f0000001880)=@phonet, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001900)=""/235, 0xeb}], 0x1, &(0x7f0000001a40)=""/150, 0x96}}, {{&(0x7f0000001b00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001b80)=""/236, 0xec}, {&(0x7f0000001c80)=""/24, 0x18}, {&(0x7f0000001cc0)=""/44, 0x2c}, {&(0x7f0000001d00)=""/125, 0x7d}, {&(0x7f0000001d80)=""/68, 0x44}, {&(0x7f0000001e00)=""/200, 0xc8}], 0x6}, 0x4}, {{&(0x7f0000001f80), 0x80, &(0x7f00000021c0)=[{&(0x7f0000002000)=""/221, 0xdd}, {&(0x7f0000002100)=""/163, 0xa3}], 0x2, &(0x7f0000002200)=""/221, 0xdd}, 0x6a2b}, {{&(0x7f0000002300)=@x25={0x9, @remote}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002380)=""/188, 0xbc}], 0x1, &(0x7f0000002480)}, 0x3f}, {{&(0x7f00000024c0)=@sco, 0x80, &(0x7f0000002880)=[{&(0x7f0000002540)=""/175, 0xaf}, {&(0x7f0000002600)=""/10, 0xa}, {&(0x7f0000002640)=""/218, 0xda}, {&(0x7f0000002740)=""/26, 0x1a}, {&(0x7f0000002780)=""/149, 0x95}, {&(0x7f0000002840)=""/51, 0x33}], 0x6, &(0x7f0000002900)=""/226, 0xe2}, 0x3}], 0x6, 0x40000021, &(0x7f0000002b80)={0x77359400}) r3 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080028bd7000fef001e6da0cf0069fb923ef4ede9edbdf250300000008000200020000000800010002000000080001000000006a000002000000000008000100000000000800010003000009080001000e767300455f8e5764b0abd3ec2eb5f5779a42d21b83b7b0"], 0x4c}, 0x1, 0x0, 0x0, 0x4040884}, 0x4040800) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000002c80)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x2c, r4, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x2c}}, 0x411) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r1) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r5) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000080)={0x31, 0x400, 0x9, 0xb, 0x8, 0x81}) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000000)={0x2, 0x0, [0x12e, 0x7ff, 0x2, 0x200, 0x1, 0x0, 0x8889, 0x67]}) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) [ 447.807857] x_tables: ip_tables: icmp match: only valid for protocol 1 23:16:06 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x5b3}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x10000, 0x0) read$FUSE(r2, &(0x7f0000000740)={0x2020}, 0x2020) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='setgroups\x00') getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000180)) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYRES16=r4, @ANYBLOB="000425bdda3695c03060aef5f15d8e82a428fcdbdf251100000008000600ffff000008000500e800000008000400ff0f00000a34ab1cdacf04c775aa778012bcfc6694764361d7615dd49fe8378659282eca09832c39f42d7c4b985dcb82fdfd"], 0x2c}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xc7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x84) fcntl$getflags(r0, 0x40a) [ 447.883026] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 447.908306] audit: type=1804 audit(1598742966.588:256): pid=29520 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir883520692/syzkaller.LV7oW2/828/bus" dev="sda1" ino=17264 res=1 [ 448.011761] audit: type=1804 audit(1598742966.608:257): pid=29520 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir883520692/syzkaller.LV7oW2/828/bus" dev="sda1" ino=17264 res=1 23:16:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @remote={0xc0}}}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040)="b811be510b74fe4fee734614c86f34be2e7094918febb0fbb31b49ea0ba734ad2b26c1c85f801857b7502a87d5e40deb9bf47d13e05b7e92b07446c36b38ab", &(0x7f0000000080)=""/246, 0x4}, 0x20) 23:16:06 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:16:06 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r5, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYRES32=r4, @ANYBLOB="08001f0007"], 0x40}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r9, @ANYBLOB="83080000022d0057459cd9dcf138a200736974000c00028008000100", @ANYRES32=r8, @ANYBLOB="08001f0007"], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf2516000000050004000100000078000180140002006d61637365633000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e31000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="6ecc46a2c719ae40", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002006772653000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="14000180080003000200000008000300030000002800018008000100", @ANYRES32=r9, @ANYBLOB="140002006d61637365633000000000000000000008000300020000000500030000000000"], 0x118}, 0x1, 0x0, 0x0, 0x20014}, 0x8001) r10 = dup2(r1, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:06 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) socket(0x10, 0x8000000000000003, 0x0) [ 448.051468] audit: type=1804 audit(1598742966.628:258): pid=29520 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir883520692/syzkaller.LV7oW2/828/bus" dev="sda1" ino=17264 res=1 23:16:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x300006c, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001000", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}, 0x1, 0xffffff7f}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x5c5000, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000000c0)={0x1, 0x1, 0x1000, 0xee, &(0x7f0000000240)="c727738cb4be93f8c0d4c5903734a78d78aae94371444aad93b4f57ed1f2a95ff8dacba0d6fedcd3bde22e84ab643a3ec40d75d3dbffefb706d138a65f25585a2ed90d75309106968e29baef522f2ce6964b8b5a1b95e96971a8333cd7bd8a2818c578924330e89cc25169fb7ec4ce043eea52bc691b15efb6332b846746611ed633673aabf15e968969061d909ad46552e4fc2342172e3a66669eaaece1797ac698b68dbe934c16d98ad9fbb3b7157f0d0d6143cfc713ff5d50f25454639a6e5f41246180e6cf3158b44861e4434286d9dbe29f605cc543d1d1abe1152a7784c6cdd2abfb4b172f841e8a1f1076", 0x19, 0x0, &(0x7f0000000040)="41b5daccef8072ada1f4da863472b5bbaf2cd8b43ed092234c"}) [ 448.105128] blktrace: Concurrent blktraces are not allowed on loop0 23:16:06 executing program 2: r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000080)={{r0}, {@val, @actul_num={@void, 0xffff, 0x50}}}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX, @ANYRESDEC=r1, @ANYRES16], 0xfd14) fallocate(r2, 0x100000003, 0x80bf13, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x28120001) 23:16:06 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) [ 448.187902] x_tables: ip_tables: icmp match: only valid for protocol 1 23:16:06 executing program 1: dup(0xffffffffffffffff) chdir(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x16d900, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)={0x3, 'batadv0\x00', {0x1ff}}) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x82) sendfile(r3, r2, 0x0, 0xa198) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x268, 0x0, 0x5, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [{{0x254, 0x1, {{0x3}, 0xcd, 0x8, 0x0, 0x7fff, 0x0, 'syz1\x00', "97ca2e8e6e8d460409a08f7b52e64ca2b4439e2dc2cbbb80eed4866d72640247", "1fa7ad0bd1d06de0da8a526511cf7d28ac5843ae4a6f8c639ae7dcf0222af20e", [{0x0, 0x0, {0x1, 0x6}}, {0xaec3, 0x0, {0x0, 0x2}}, {0x5, 0x2, {0x2, 0x7}}, {0x4, 0x1, {0x2}}, {}, {0x85ea, 0xfff8, {0x0, 0x100}}, {0x0, 0x100, {0x0, 0x69acedb6}}, {0x1, 0x0, {0x3}}, {0xe4a, 0x3, {0x3, 0x6}}, {0x401, 0x0, {0x0, 0x100}}, {0x8, 0x7, {0x3, 0x800}}, {0x3ff, 0x5, {0x2, 0x7f}}, {0x8001, 0x5, {0x0, 0x70}}, {0x9e, 0x20, {0x3}}, {0x400, 0x6, {0x3}}, {0xffff, 0xf9a, {0x0, 0x9}}, {0x0, 0x9}, {0x2, 0x0, {0x2, 0x8}}, {0x1ff, 0x6}, {0x920, 0x0, {0x3, 0x7fffffff}}, {0xde8, 0x3, {0x0, 0x7}}, {0x2, 0x1c3, {0x3}}, {0x4, 0x1, {0x1, 0x21}}, {0x1d81, 0x0, {0x2, 0x6}}, {0x0, 0x0, {0x0, 0x5}}, {0x800, 0x0, {0x3, 0x2}}, {0x8, 0x3f, {0x0, 0x100}}, {0x7, 0x101, {0x0, 0x20}}, {0x0, 0x2, {0x3, 0x401}}, {0x40, 0x0, {0x1}}, {0x0, 0x9, {0x8746d6a1836549a6}}, {0x0, 0x7, {0x1}}, {0x0, 0xe5ed, {0x0, 0x81}}, {0xf310}, {0x0, 0xa4, {0x0, 0x61d}}, {0xd800, 0x0, {0x1}}, {0xfffe, 0xfffc, {0x2}}, {0x5, 0x8, {0x3}}, {0x20, 0x3f2, {0x3, 0x80}}, {0xfd30, 0x0, {0x3, 0x1}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20020050}, 0x40040) write$9p(r0, &(0x7f0000001400)="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", 0x600) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000280)=""/95) sendfile(r0, r1, 0x0, 0x10000) 23:16:06 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r5, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYRES32=r4, @ANYBLOB="08001f0007"], 0x40}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r9, @ANYBLOB="83080000022d0057459cd9dcf138a200736974000c00028008000100", @ANYRES32=r8, @ANYBLOB="08001f0007"], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf2516000000050004000100000078000180140002006d61637365633000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e31000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="6ecc46a2c719ae40", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002006772653000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="14000180080003000200000008000300030000002800018008000100", @ANYRES32=r9, @ANYBLOB="140002006d61637365633000000000000000000008000300020000000500030000000000"], 0x118}, 0x1, 0x0, 0x0, 0x20014}, 0x8001) r10 = dup2(r1, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:06 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) [ 448.236988] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 448.303952] device ipvlan14 entered promiscuous mode [ 448.376009] x_tables: ip_tables: icmp match: only valid for protocol 1 23:16:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000100)) r2 = dup(r1) r3 = accept(r0, &(0x7f0000000140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private1}}, &(0x7f00000001c0)=0x80) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, 0x0, 0x610, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ab12a73178"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "18353fdd32"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e5d94383c9"}]}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "0408508c972ea7d4cca1fe"}]}, 0x88}, 0x1, 0x0, 0x0, 0x8004}, 0x4040840) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1000}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r5) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x140c, 0x720, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x40040) close(r4) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000380)=0x4, 0x4) [ 448.443191] audit: type=1804 audit(1598742967.118:259): pid=29583 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir883520692/syzkaller.LV7oW2/830/file0" dev="sda1" ino=17273 res=1 [ 448.477014] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 23:16:07 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x308, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:16:07 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f0000000400)='./file0\x00', 0x103, 0x7, &(0x7f0000000480)=[{&(0x7f0000000140)="37038ad960a939b425b67de9495755c7d039a5ac9ade54887bb1206bf19a6eb0e72b259da5325ee8ebb05c7c938f48125ba00d34555e631c6b019835127f53afbe9acaf268fff25211cb941c8d0f399fd0e6e858773ba32f5e275af72deb413a9ad4ef9c51a3cd27cb880a", 0x6b, 0x1}, {&(0x7f00000001c0)="e869a7753f32cf7c1d12b6a00a55e4007ff28e16aceee20ffe97a06466dbcfa2bb48e36926a0e7bee101801bf0af63dc135e62d90f23c64888db885ee8de6ef8fdb4464529661ad9a788d8c3808df96ac5897d48ab3ed6d624adc614895674e2123883151ea9b314902a986fb4cf3e9fa59bfa75a031f1", 0x77, 0x8}, {&(0x7f0000000240)="b48ef8ceefff743204e5afa27cb85c4cd87538bc506a894e71be546bc55c905132561de5fbafa17e852dea636cb329b112d9226f9ac5764052c91579a680daead86cc1a34dae3fb0b640a42be42dc377426c4a9b7d43a7ab5d2682699ded04", 0x5f, 0x80}, {&(0x7f0000000700)="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", 0x101, 0x7c}, {&(0x7f0000000300)="12667135479ee1b23255409a3667d05622599a44913688ed124800f26d8bca6aa473377c8d37d952da24f2cf974d21ab6ac1de6873fc14d0187cde4a81e21beb1dbb6d5c14f09740a86f30381df3cd3fe834e5326e46a1c56d0a3ff2f15916e1a2db56f21c55c56286ade2a92ed72f3eb01346781ad31887fb6a5cec68c696c4278fe544216412851574f6f3eae81f6affb3f433681d3092b6506fd545c1d03e42aa2e83a4dd140fad1a9a3db6a0c2ad7b1e8617a5aaa9ac4554ff9e67243b7b82247573d1466a5fdde8d61f36cc9c1c46b73141cf3cd606593b9762281289f2a810dc99230232a349fa01f2e577", 0xee, 0x80000001}, {&(0x7f0000000400), 0x0, 0x5}, {&(0x7f0000000440)="bfcffdb84a481503bd13081960baf6ca31d60a7e670a6b591e3462f1ef0b8d9f66c2a934252f601e45c18de32fe84ae5c66d99029a9174", 0x37, 0x9}], 0x1020, &(0x7f0000000840)={[{@overriderock='overriderockperm'}, {@hide='hide'}], [{@fsname={'fsname', 0x3d, '\xdc\x13\xd3v\xc1\x95\xe8\x17\b\xf0\xc7v%\xe6U\xa6\x83o\xfe\xd9h\xe5K\xbe\x04\x1bK>\x93\xcb,\x89(\xd2\x15;\xa2\xa9H\xf7\xfb\xf16\xd9_\xeb\xdf\xa3\xde\'O\xb7\xc6b\xd7w\x18b\x04\xd6\x9f\xb1\xe3\xa4\x11\x9fcu\xef\x99\x8b\xc4#-\xb8h\x83\x171]\x91\xcc\xd8X\x03\xd5\aJ\xfd\xbeh#\xf5\'\xca6\xdeY\x0fiaj\xbcx\xf2\x90T\x90\xb3\xa9t&J\x0f\xa1]`\x9di\xb4u8;b\xc4_\x91\xe01Q\xeai\x8a\xcc\x00\x84\xb1o\xb8\xd1\xf7W\x89\xd1K9\xc6\xa3\xb9\xa4\xc2\xc2-\xae\xfbw\xd2\a\xe4\xbe\x15P\xe3'}}, {@permit_directio='permit_directio'}, {@fsname={'fsname', 0x3d, ')'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@dont_appraise='dont_appraise'}]}) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'ip6gre0\x00', 0x2eb}) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:16:07 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb, 0x7fffffff}}, 0x0, 0xd, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6c6e77657264ca024c7764683ab01af61f332a8b1f776f726b6469723d2e2f66696c65312c75707065726469723d2e2f66696c6530b404fd1da81ec4395f1b0cb33fb598b8b676ff1489cf06f9db90f000"/94]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="0b7f43f9097f25469248c45464c6789f5bce1f1408a3", 0x16, 0xbe3}, {0x0}], 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r2) renameat(0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', r2, &(0x7f0000000300)='./bus\x00') sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x40000) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000440), &(0x7f0000000480)=0x4) keyctl$read(0xb, 0x0, 0x0, 0x0) 23:16:07 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r5, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYRES32=r4, @ANYBLOB="08001f0007"], 0x40}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r9, @ANYBLOB="83080000022d0057459cd9dcf138a200736974000c00028008000100", @ANYRES32=r8, @ANYBLOB="08001f0007"], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf2516000000050004000100000078000180140002006d61637365633000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e31000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="6ecc46a2c719ae40", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002006772653000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="14000180080003000200000008000300030000002800018008000100", @ANYRES32=r9, @ANYBLOB="140002006d61637365633000000000000000000008000300020000000500030000000000"], 0x118}, 0x1, 0x0, 0x0, 0x20014}, 0x8001) r10 = dup2(r1, r0) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, r12, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:07 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000070000000000e5ff0000000100000000fe0000000000002e000000"], 0x0, 0x2f}, 0x20) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 23:16:07 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x308, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:16:07 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0xf0ffffff7f0000) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000000)={0x10001, [0xfffffff7, 0x0, 0x800], [{0x23, 0x7, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x1}, {0x1, 0x6519, 0x1, 0x1}, {0x7, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x800, 0x6, 0x1, 0x1, 0x1}, {0x1, 0x4, 0x1, 0x1, 0x1, 0x1}, {0x513, 0x8001, 0x1}, {0x8, 0x1, 0x1, 0x1}, {0x1159527c, 0x400, 0x1, 0x0, 0x1, 0x1}, {0xaab, 0xfff, 0x1}, {0x81, 0xfff, 0x1, 0x1, 0x0, 0x1}, {0x7887, 0x1ff, 0x0, 0x0, 0x1}], 0x3}) 23:16:07 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x308, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) [ 448.769852] device ipvlan14 entered promiscuous mode [ 448.786046] overlayfs: unrecognized mount option "lnwerdÊLwdh:°ö3*‹workdir=./file1" or missing value [ 448.806637] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 23:16:07 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:16:07 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r5, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYRES32=r4, @ANYBLOB="08001f0007"], 0x40}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r9, @ANYBLOB="83080000022d0057459cd9dcf138a200736974000c00028008000100", @ANYRES32=r8, @ANYBLOB="08001f0007"], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf2516000000050004000100000078000180140002006d61637365633000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e31000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="6ecc46a2c719ae40", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002006772653000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="14000180080003000200000008000300030000002800018008000100", @ANYRES32=r9, @ANYBLOB="140002006d61637365633000000000000000000008000300020000000500030000000000"], 0x118}, 0x1, 0x0, 0x0, 0x20014}, 0x8001) r10 = dup2(r1, r0) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, r12, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002880)={[{@fat=@time_offset={'time_offset', 0x3d, 0x600}}]}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x440) write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x2f, 0x9, 0xf0, 0x7, 0x2, 0x6, 0xfffffffb, 0xdf, 0x40, 0x148, 0x5, 0x7fff, 0x38, 0x2, 0x100, 0x1de, 0x8}, [{0x3, 0x8, 0x1, 0x1, 0xffffffffffffffa7, 0x5, 0x8, 0x6}, {0x3, 0x3, 0x7, 0x1, 0x800, 0x9, 0x4, 0xff}], "e9c99611364a5590d5f2b99f6e1fc2149f4bda816c826774407aee1c86af307f128b6ba8e93a203a75321678ce6fb4d720afa36b16da1ba4759287ee5fd3e4ed3a032de901165acf3f0e5f0ec79ed4cda5cc051f94955bdbb70d88c6d1578a9a29bc2dcd1d74e4d0e07f25eb908e6a48513ce989e7", [[], [], [], [], [], []]}, 0x725) [ 448.835330] overlayfs: unrecognized mount option "lnwerdÊLwdh:°ö3*‹workdir=./file1" or missing value [ 448.913463] device ipvlan14 entered promiscuous mode 23:16:07 executing program 1: fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0x49, 0x3, 0x8001, 0x1, @ipv4={[], [], @local}, @mcast2, 0x80, 0x700, 0x1, 0xfd39}}) set_tid_address(&(0x7f00000000c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) r1 = getpgid(r0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x121000, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000280)={0x10, 0xfffffff7, {0x56, 0x8e6, 0x7fff, {0x8}, {0x70, 0x9}, @period={0x59, 0x167, 0x401, 0x1bf1, 0x3, {0x3, 0x9, 0x2, 0x9d0f}, 0x2, &(0x7f0000000200)=[0x5, 0x7f]}}, {0x52, 0x101, 0x3, {0x7, 0xb04d}, {0x70, 0x101}, @period={0x5d, 0x0, 0x4, 0xff, 0x7fff, {0x1ff, 0x0, 0x8000, 0x7}, 0x0, &(0x7f0000000240)}}}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000300)={0x3, 0x8000, 0x1, 0xfffffff2, 0x0}, &(0x7f0000000340)=0x10) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000380)=0x0) getpriority(0x1, r4) r5 = dup2(0xffffffffffffffff, r2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000003c0)={r3, 0x40, 0x7fff}, &(0x7f0000000400)=0x8) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) write$FUSE_WRITE(r6, &(0x7f0000000480)={0x18, 0x0, 0x0, {0x7}}, 0x18) ioctl$TIOCGETD(r2, 0x5424, &(0x7f00000004c0)) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r6, 0xf505, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/key-users\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xf6a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000900) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0286405, &(0x7f0000000640)={0x2, 0x2, {r1}, {0xee00}, 0xadd}) [ 448.941839] ip_tables: iptables: counters copy to user failed while replacing table 23:16:07 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) [ 449.018047] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 23:16:07 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="ee29858859f7d1991dfed2edbdb10bd8b50cb000", @ANYRES16=r1, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="05003e00"], 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x44014) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xc4}, @NL80211_ATTR_REG_RULES={0x2c, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x401}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x94}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x20}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7fff}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4002884}, 0x0) 23:16:07 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r5, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYRES32=r4, @ANYBLOB="08001f0007"], 0x40}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r9, @ANYBLOB="83080000022d0057459cd9dcf138a200736974000c00028008000100", @ANYRES32=r8, @ANYBLOB="08001f0007"], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf2516000000050004000100000078000180140002006d61637365633000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e31000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="6ecc46a2c719ae40", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002006772653000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="14000180080003000200000008000300030000002800018008000100", @ANYRES32=r9, @ANYBLOB="140002006d61637365633000000000000000000008000300020000000500030000000000"], 0x118}, 0x1, 0x0, 0x0, 0x20014}, 0x8001) r10 = dup2(r1, r0) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, r12, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:07 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x141001) openat$vcsa(0xffffffffffffff9c, 0x0, 0x42a041, 0x0) syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x0, 0x0) r1 = dup(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffdffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r2) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x2}, &(0x7f0000000100)=0x8) creat(&(0x7f0000000280)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 23:16:07 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) [ 449.098297] ip_tables: iptables: counters copy to user failed while replacing table [ 449.213746] device ipvlan14 entered promiscuous mode [ 449.219603] ip_tables: iptables: counters copy to user failed while replacing table [ 449.262283] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 23:16:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x440a01, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000240)=0x1f, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) syz_emit_ethernet(0xc3, &(0x7f0000000080)={@random="c57f972605a4", @local, @val={@void, {0x8100, 0x0, 0x1}}, {@x25={0x805, {0x1, 0x1, 0x0, "67e4d8e7168af77062a4bc24630018061dd3f2143d39bef34f431ca80d576c5b6ecf70cd44fed3c2123c67f8f8df3a1a6ff778d7fc2ccd2763bcd2badea71d8c7c6156e68c6d600c69966af204b2788c37693b3ccee5e18c3ff403d4a98bab3ba77c710b9d3a5eb4b78a1b69b3924272e4ba30fb9ba1765994e6042582aebc36df762b76f09377062d5660334da3c4c855542da4d11245130d6d754a59060281926b2f11a362181460c226941982"}}}}, &(0x7f0000000000)={0x0, 0x1, [0x37f, 0x6df, 0x29c, 0x83]}) 23:16:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000140)="0f20e06635002000000f22e02e670f5fb6710000000f53f5f00fab980d0066b8982900000f23c00f21f8663500000f000f23f80f09c4c2a5df3c66b9370900000f32672ef30fa6c8f660fa", 0x4b}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004cb]}) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r3) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f0000000000)={0x2, 0x0, 0x7ff, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:16:10 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:16:10 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r3, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYRES32=r2, @ANYBLOB="08001f0007"], 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r7, @ANYBLOB="83080000022d0057459cd9dcf138a200736974000c00028008000100", @ANYRES32=r6, @ANYBLOB="08001f0007"], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf2516000000050004000100000078000180140002006d61637365633000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e31000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="6ecc46a2c719ae40", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002006772653000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="14000180080003000200000008000300030000002800018008000100", @ANYRES32=r7, @ANYBLOB="140002006d61637365633000000000000000000008000300020000000500030000000000"], 0x118}, 0x1, 0x0, 0x0, 0x20014}, 0x8001) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:10 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockname$netrom(r0, &(0x7f0000000080)={{0x3, @netrom}, [@netrom, @null, @remote, @remote, @netrom, @netrom, @bcast, @rose]}, &(0x7f0000000000)=0x48) 23:16:10 executing program 1: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x54, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x200}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xf8000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x963}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x896}, 0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="e7000404", @ANYRES16=r2, @ANYBLOB="a41d4313d6753b3ffe5d1fe546f2250c000000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x4014}, 0x40014) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r6, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYRES32=r5, @ANYBLOB="08001f0007"], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x22008051) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14, 0x3fa, 0x6}, [], {0x14, 0x3e9}}, 0x28}}, 0x0) [ 451.735093] ip_tables: iptables: counters copy to user failed while replacing table [ 451.740143] device ipvlan14 entered promiscuous mode 23:16:10 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) [ 451.776493] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 23:16:10 executing program 1: write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000780)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x101401) dup(r0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc7ee, 0x4, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r2) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xc) lremovexattr(0x0, &(0x7f0000000100)=@known='security.apparmor\x00') ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r2}) ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000380)={0x1, 'vlan0\x00', {0x72080000}}) 23:16:10 executing program 2: syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f0000000240)='./bus\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='shortname=lower,utf8=0,utf8=1,uni_xlate=0,shortname=lower,utf8=1,nonumtail']) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000000)={0x3, @pix_mp={0x8, 0x3f, 0x59455247, 0x7, 0x8, [{0x9401, 0x8}, {0x0, 0x6004eddb}, {0x57a1, 0x33d6}, {0x8000, 0x8001}, {0x1, 0xdf1}, {0x10000, 0x2593}, {0x7fff, 0xffffffff}, {0x43e2, 0xb9f}], 0x2, 0x5, 0x6, 0x2}}) 23:16:10 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r3, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYRES32=r2, @ANYBLOB="08001f0007"], 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r7, @ANYBLOB="83080000022d0057459cd9dcf138a200736974000c00028008000100", @ANYRES32=r6, @ANYBLOB="08001f0007"], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf2516000000050004000100000078000180140002006d61637365633000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e31000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="6ecc46a2c719ae40", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002006772653000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="14000180080003000200000008000300030000002800018008000100", @ANYRES32=r7, @ANYBLOB="140002006d61637365633000000000000000000008000300020000000500030000000000"], 0x118}, 0x1, 0x0, 0x0, 0x20014}, 0x8001) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:10 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x191800, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000080)=0xbd) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000002c0)={{0x0, 0xffff, 0x0, 0x2}, 'syz0\x00', 0x2e}) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) dup2(r2, r1) [ 451.924609] ip_tables: iptables: counters copy to user failed while replacing table [ 451.950296] FAT-fs (loop2): bogus number of reserved sectors [ 451.967394] FAT-fs (loop2): Can't find a valid FAT filesystem 23:16:10 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:16:10 executing program 2: timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_getoverrun(r0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x100, @dev, 'geneve0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 452.063476] FAT-fs (loop2): bogus number of reserved sectors [ 452.069472] FAT-fs (loop2): Can't find a valid FAT filesystem [ 452.078246] input: syz0 as /devices/virtual/input/input9 [ 452.082293] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 452.102130] ip_tables: iptables: counters copy to user failed while replacing table [ 452.146399] input: syz0 as /devices/virtual/input/input10 23:16:10 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:16:10 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r3, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYRES32=r2, @ANYBLOB="08001f0007"], 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r7, @ANYBLOB="83080000022d0057459cd9dcf138a200736974000c00028008000100", @ANYRES32=r6, @ANYBLOB="08001f0007"], 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="18010000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf2516000000050004000100000078000180140002006d61637365633000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e31000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="6ecc46a2c719ae40", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="140002006772653000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="14000180080003000200000008000300030000002800018008000100", @ANYRES32=r7, @ANYBLOB="140002006d61637365633000000000000000000008000300020000000500030000000000"], 0x118}, 0x1, 0x0, 0x0, 0x20014}, 0x8001) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:10 executing program 1: perf_event_open(&(0x7f0000001040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x4, 0x20, 0x0, 0x0, 0x0, 0x5, 0x81bb2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffff8, 0x0, @perf_bp={&(0x7f0000000240), 0x8}, 0x8222, 0x0, 0x0, 0x5, 0x3, 0x1, 0x8}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000400)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x5, &(0x7f00000019c0)=[{0x0}, {&(0x7f00000004c0)="3fd8a86118f952", 0x7}, {&(0x7f0000000980)="a9fd42035bdaaafa155154217d413d7c59189428406ddf068ad691fdee5a905f8c35fc9f8bb553fff98a8a78d508f8b2360e340ad4cb6e618905dc3f5144991472313c4aeaeb004d48dbe04d939da186f8e85ca0797ccbf403c7f790728582d9dc25e4c011f932b6e922333d1ebbf360b72581702493a39c1fe5a7b2ffd3da10b26657329966c1a9e0b35e3038fdbb5ed77f9f65ecb28dc81728ab4805909954e310519bbfb702df3bbddb3470ea7822f7da29a88b5958f3d78b1914d2a480c59c88771d45e20de345328d1b80fa4000a255d893a55f189e70a1557aed81e61bb33e4562d40faf00f538ae", 0xeb}, {&(0x7f0000000800)}, {0x0, 0x0, 0x3f}], 0x102020, &(0x7f00000006c0)=ANY=[@ANYBLOB="726f6469722c686173642c6f62625f747970653d6f7665726c6179002c000000000400f52d37db692921edb24f7a618a826d3c197d97d9eba661116d823cb8e10775c225e14c995a2237e5bc55a5a538e230b87b92bcf580afc8447d5954ab6c7a87bef65979f3bdbde8929be7c1f80d6b6a48e52dec4da44e98"]) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000640)={0x9, 0xffffffff, {}, {0xee00}, 0x6, 0x4}) mount$9p_xen(&(0x7f0000000040)='syz\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x2000, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=xen,mmap,msize=0x0000000000000000,afid=0x0000000000000002,version=9p2000', @ANYRESDEC, @ANYBLOB=',dont_appraise,dont_hash,dont_appraise,dont_hash,\x00']) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20040014) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000280)={0x0, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r2, @ANYBLOB="ddffffffffffffff140012000c0001006272696467650000040002004a7bcdad645e2b4f436b014dbe92b4940b521b6a238e3c4ad8aaf50c71b4eda0845e96c6f1a4b95135215b33bebcd52d2c8c10c2989b510bf0b2e2e1023adf69af88eb65891e54fc924d05f040d90cc24cc8e8c641a13163577024341c4b"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000500)={'syztnl2\x00', r2, 0x5e, 0x8, 0x1, 0xb2f2, 0x0, @remote, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2d}}, 0x8000, 0x80}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={0x0, 0x3728}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 23:16:10 executing program 2: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r1) ioctl$CHAR_RAW_BSZSET(r1, 0x40081271, &(0x7f0000000000)) open$dir(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa, 0x1, 'vxcan\x00'}, {0x18, 0x2, 0x0, 0x1, @val={0x58}}}}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r3) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb8, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x7}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x87a}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3f}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x94}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xb00}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x48000}, 0x20048000) 23:16:10 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x5], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x2000040) inotify_rm_watch(r1, r2) inotify_rm_watch(r0, r2) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x3, 0x40000) 23:16:10 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000200)={r0, 0x1ff}, &(0x7f0000000240)=0x8) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xe0}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x4d5, 0x33}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x4, 0x9}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r2) accept$alg(r2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'ip_vti0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="6772c06e9024c9397332000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000024897002000685d00380490780a0101020a010101860c00000003060200020702d077b7bcfeca744b01b1042626e98d07dc56cc87a2d5a588a74fad2fa2e6b2e52a0855bba6ddae588cd2028c8ea0c0a36778b9c9595c42c9be6fa33d411e1bf40200000000000000c9475511ed3a7c93f33a2f1919b63daeab0ffd29fd9ca55e76801eadcad94650dbc7c7bbcf15d1828d8ff9a9b6851e1f67f033c2ced3a341fc3cd13ecf801cd54264cd6a2eddd1fba4b546095d5868ab4cc587872c025f4847bed7e5f87fea3558f9040d37e2ab71b990a4012bf94f84452bc5d4f95fda5cbc023ae30e50618831a9aa"]}) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r5) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, [], 0x1}, @in=@multicast2, 0x4e22, 0xffff, 0x4e20, 0x8000, 0xa, 0x80, 0x80, 0x21, 0x0, r5}, {0x200, 0xe, 0x81, 0x1, 0x9, 0xee, 0x9, 0x3f}, {0x100, 0xff, 0x7, 0x1}, 0xddaa, 0x6e6bb7, 0x0, 0x1}, {{@in=@private=0xa010101, 0x4d4, 0x3c}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3501, 0x3, 0x2, 0x9, 0x3ff, 0x40, 0x100}}, 0xe8) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(0xffffffffffffffff) read$alg(0xffffffffffffffff, &(0x7f00000002c0)=""/123, 0x7b) [ 452.311640] ip_tables: iptables: counters copy to user failed while replacing table [ 452.429309] device ipvlan14 entered promiscuous mode 23:16:11 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="0438d7d13200027400f8", 0xa, 0x4}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x1200001, &(0x7f0000000340)=ANY=[]) [ 452.509151] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 23:16:11 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) [ 452.549695] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 23:16:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r3) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r4) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000000)=0x2) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000200)={{r2}, 0x0, 0x4, @inherit={0x50, &(0x7f0000000100)={0x0, 0x1, 0xfffffffffffffff8, 0x8, {0x28, 0x5c5, 0x7, 0x6, 0x100}, [0xfffffffffffffff0]}}, @name="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"}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000080)="66b9800000c00f326635001000000f303666260f35f3aa0f005608bad00466b80000000066ef66b9800000c00f326635000800000f30260f01c3640f200167260fc770000f01cb", 0x47}], 0x1, 0x7d, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000001200)) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, &(0x7f0000001400)={0x0, &(0x7f00000013c0)=[&(0x7f0000000180)="e6"]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:16:11 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r5, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYRES32=r4, @ANYBLOB="08001f0007"], 0x40}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r9, @ANYBLOB="83080000022d0057459cd9dcf138a200736974000c00028008000100", @ANYRES32=r8, @ANYBLOB="08001f0007"], 0x40}}, 0x0) r10 = dup2(r1, r0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, r13, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) [ 452.694647] ip_tables: iptables: counters copy to user failed while replacing table 23:16:11 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x859, 0x2, 0x2], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x6}}, 0x10) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000200)={0x8000000, 0x0, "87809310429e0e920d48d5fa65746e9abc121dc85ed8c33641b66cc4f185b39d"}) 23:16:11 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) [ 452.798995] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 452.858943] device ipvlan14 entered promiscuous mode 23:16:11 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) semop(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) io_setup(0x8, 0x0) io_submit(0x0, 0x0, 0xffffffffffffffff) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 23:16:11 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r5, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYRES32=r4, @ANYBLOB="08001f0007"], 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r7 = dup2(r1, r0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r10, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:11 executing program 3: ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)=0x43f4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000001c0)='system_u:object_r:shell_exec_t:s0\x00', 0x22) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x0) 23:16:11 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[], 0x60}}, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0xd04, 0x2, 0x4, 0x400, 0xfffffff8, {r1, r2/1000+60000}, {0x4, 0x1, 0x40, 0x7f, 0x6e, 0x0, "4738fd92"}, 0x4, 0x3, @offset=0x5, 0x3, 0x0, r0}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r3, 0x7c80, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)) r4 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) [ 452.894502] ip_tables: iptables: counters copy to user failed while replacing table 23:16:11 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:16:11 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRESHEX=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}, 0x1, 0x0, 0x0, 0x8008}, 0x4000000) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) r2 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0xc0000000000000, 0x40002) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r3) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x80800) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x440002, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r6) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x233c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r1}, {0x8, 0x1, r5}, {0x8, 0x1, r1}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r6}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x20000002) close(r1) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x4, 0x9394, 0x6}) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:16:11 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r5, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYRES32=r4, @ANYBLOB="08001f0007"], 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = dup2(r1, r0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r10, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) [ 453.078288] ip_tables: iptables: counters copy to user failed while replacing table 23:16:11 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:16:11 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r2 = open(&(0x7f0000000100)='./bus\x00', 0x1141042, 0x0) r3 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r3, 0x208200) sendfile(r0, r2, 0x0, 0x8000fffffffe) 23:16:12 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:16:12 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r5, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYRES32=r4, @ANYBLOB="08001f0007"], 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r7 = dup2(r1, r0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r10, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:12 executing program 5: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r4) r5 = getegid() r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r9 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x202002) keyctl$chown(0x4, r9, r7, r8) getresgid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f00000003c0)) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000400)={{}, {0x1, 0x4}, [{0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x1}, {0x2, 0x8}, {0x2, 0x4, r0}, {0x2, 0x2}, {0x2, 0x1, r2}, {0x2, 0x4}, {0x2, 0x2, r4}], {0x4, 0x2}, [{0x8, 0x2, r5}, {0x8, 0x1, r8}, {0x8, 0x1, 0xee00}, {0x8, 0x1, r10}], {}, {0x20, 0x1}}, 0x84, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) r11 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r11, 0x6, 0x21, &(0x7f0000000000)="0e021def92b88f4678c5ffc272b034e9", 0x10) 23:16:12 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:16:12 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) bind$inet(0xffffffffffffffff, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000080)=r0) unshare(0x2a000400) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f0000000280)='0', 0x1}], 0xa) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000002c0)={0xfffffffa, {{0xa, 0x4e22, 0x1, @loopback, 0x10000}}}, 0x88) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) socket$inet(0x2, 0x0, 0x0) [ 453.483167] device ipvlan14 entered promiscuous mode 23:16:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000340), 0x0) ftruncate(r1, 0x80079a0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x20, 0x88180) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000000c0)) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xa601, 0x2012, r1, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890b, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea2ecb1b27f46"], 0x194) close(r3) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800050, 0x2) 23:16:12 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r5, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYRES32=r4, @ANYBLOB="08001f0007"], 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r6 = dup2(r1, r0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r9, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:12 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:16:12 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="6000cc001000c8ea80c7fc3b2e0507200400e800", @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = getpgrp(0x0) prlimit64(r1, 0x9, &(0x7f0000000000)={0x0, 0x46a}, &(0x7f0000000080)) 23:16:12 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000440), 0x8}, 0x40000, 0x0, 0x0, 0x6, 0xbac, 0x9}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000480)=0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1af5eff2530000c060d7f77959af48ba8a8d24a25bf5f947d295fb747f57b749d9a5ff3ada239f3b62d2e25f348b72fc8bdd0190bdc3259c6867a9e6d3616c829a9eb1c09f0794b0d3760f6b00000094265b0b98f61ede62c498599b7f0d4f7c6706b5d2ee45cb52d0648d67a9f42784ecafa7bb8494a3011d8698d045ff392dd140d7b94188be865ea4d6573230aa94549c3b64bfb80599126af61f8a7dc0846802296cefa83384f2", @ANYRES16=r5, @ANYBLOB="02002bbd7000ffdbdfa06b00000c080002149ae1b57c95a5296bc6be1198ca3bb9cecf49543cdaee7c82016091cc5c1822671f0b7bcacfea594778a16487b0567ae48cf99915dc82bdee1938ef2a6dc1e483e153ecc825605a3faa189a9ebc6e6b263a74e07097fa058082518ffc70a3848fd396a8d59415cb123e978c1b4ad1b44d4dbf9dbf798e1e819c99abeaa821d3162891f25c2e83ba59ce16b33d6552713a90e0f4829484923068a1f41cf6b2d27f671e546c84ebcfb8ad7c409eebb530831729ad6956861df5f4964df0d9949426fcddfe4284dfc8baac117b3346a7bbd064000641183911cd7d578be871229cb8ab146f5a6e7244"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="300427bd70002501000000dc53d6b3e992e61397d171"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x880) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='$\b\x00\x00', @ANYRES16=r5, @ANYBLOB="000828bd7000fddbdf250200000008000100ffffffff240004800500030007000000050003000700000005000300000000000504030007000000a8000c803c000b8008000a0079e8000008000a0070dc000008000900defd202f08000a00ed2c000008000900feffffff08000a0074e60000080009003876576b2c000bb71b10325fcfbfdcf2b75d94802352248008000900283d8b1008000a002870000008000900ded0380f08000a001566000008000a008a7200003c000b8008000a00e60d0000080009003b5c9c3208000a0056f7000008000900754ca76308000a006cc60000080009008a3409750800090009058a693c000480050003000000000005000300020000000500030005000000050003000000000005000300070000009a23be1fbf2592edce70459ece7d57a47dd40746c5a6f65d87a445e67bba391907c01b832f533af6a75eb404a371968d8a71"], 0x124}, 0x1, 0x0, 0x0, 0x4000}, 0x1c) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xfffffffffffffffc) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x0) 23:16:12 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:16:12 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000a54b2875f3060001000000000006000100020000000a0005000400002a9f57a5f054205ebddcd1850e9e586b08000000000c6ffceab8a1f394f34fbdddd4126e5b1657af30777793c4cd258e8232c6306cc6bfccf77187952a534b5884b8791d74436968f8a3dbfab4af40ead66b741798811c"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000000)={{0x2, 0x0, @reserved="28142b1e9de504e0e42f1e4b1a3aa7154de05208cab1275fcefe1305188ab75f"}}) 23:16:12 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, 0x0, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:16:12 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r5, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYRES32=r4, @ANYBLOB="08001f0007"], 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = dup2(r1, r0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r9, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) [ 453.921621] Y­4`Ò˜: renamed from lo [ 453.947287] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 453.969303] net_ratelimit: 5 callbacks suppressed [ 453.969309] ip_tables: iptables: counters copy to user failed while replacing table [ 453.990086] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 23:16:12 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x5, 0x81) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r1) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, @hci={0x1f, 0x2, 0x4}, @sco={0x1f, @fixed={[], 0x11}}, @ax25={0x3, @null, 0x7}, 0x20, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='gre0\x00', 0x8, 0x1, 0x8}) 23:16:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) fstatfs(r0, &(0x7f0000000080)=""/211) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x195affd, 0x0, &(0x7f0000000040), 0x0, 0x0) 23:16:12 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, 0x0, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) [ 454.189660] ip_tables: iptables: counters copy to user failed while replacing table 23:16:13 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010008", 0x10, 0x21, 0x0, @dev, @mcast2, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x4, {0xa, 0x4e21, 0x87, @dev={0xfe, 0x80, [], 0x15}, 0x9}}}, 0x38) r0 = add_key$fscrypt_provisioning(&(0x7f0000000100)='fscrypt-provisioning\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)={0x3, 0x0, "0a83a8f17f5c44ce5ce135dceb7dfde6035f0929b13a268a6755b8f895674b10a0399743f68174326608558bba227f7fb7e7d460426183abd96ad0183370e98bd35586c9ae418696cbcfee8ce04a9163579aae8451d194c6410e1b0540ef0c08be480f616df295d1e3ff8b48f3d93fe631fef20095a4ed61e9b53f1710eaf4ceaef653343c58f1db0af46a55f1f8d8ec8984f217de5fc2472c1e183af42339c2da42f4f70b057698c7cab4d7469dc98f56"}, 0xb9, 0xfffffffffffffff8) keyctl$chown(0x4, r0, 0xffffffffffffffff, 0x0) 23:16:13 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r5, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYRES32=r4, @ANYBLOB="08001f0007"], 0x40}}, 0x0) r6 = dup2(r1, r0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r9, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:13 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000188cba83450188f3202214ba2f2b2103aa00100005070000000000000000", @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001000002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a000000000000000000"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:16:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000800)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/64, 0x40}}, {{0x0, 0x0, 0x0}, 0x7}], 0x3, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x1ff}, &(0x7f0000000180)=0x8) fcntl$setpipe(r3, 0x407, 0x0) lchown(&(0x7f0000000200)='./file0\x00', 0xee01, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0xfffffffc, 0x6}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) sendmmsg$inet(r4, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/2079], 0x18}}], 0x1b1, 0x0) 23:16:13 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, 0x0, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) [ 454.871757] ip_tables: iptables: counters copy to user failed while replacing table 23:16:13 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = dup2(r1, r0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:13 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 23:16:13 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = dup2(r1, r0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) [ 455.252132] ip_tables: iptables: counters copy to user failed while replacing table 23:16:14 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000140), 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x3ff, @any, 0xbf, 0x1}, 0xe) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r2) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x6, 0x401, 0x8}}, 0x28) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r1) flistxattr(r1, &(0x7f0000000700)=""/4096, 0x1000) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000080)=0x1) 23:16:14 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r3 = dup2(r1, r0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:14 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x5) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r1) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f00000000c0)="53000000fcffffff770000000000004000"/36, 0x24}], 0x2) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000080)={0xfc, 0x0, 0x9, 0x304}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="607f0000000005070000fdc200"/22, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c00028006000000000006000100020000000a00050061df24700000000008000a004a"], 0x60}}, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:16:14 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:14 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) inotify_init() openat$vim2m(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vim2m\x00', 0x2, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000100)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1fd, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) dup(0xffffffffffffffff) 23:16:14 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b00010007000000616e04001c0002800600010003000000060006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x3, 0x1, 0x801, 0x0, 0x0, {0xe, 0x0, 0x1}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7fffffff}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x182c}]}, 0x38}}, 0x50) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f0000000180)={0xa7, 0x4}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x40400, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x441c, 0x5, 0x400], 0x3, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000280)=0xab2, 0x4) 23:16:14 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:14 executing program 2: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$read(0xb, r0, 0xfffffffffffffffe, 0x0) keyctl$invalidate(0x15, r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.stat\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0xffffff7f, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000100)=[@window, @mss, @window={0x3, 0x0, 0x401}, @window={0x3, 0x1, 0x7}, @timestamp, @sack_perm, @sack_perm], 0x7) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x2000000000000, 0x40, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendto$inet(r1, &(0x7f0000000240)='\b', 0x1, 0x4004001, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000000)=""/11, 0xb, 0x0, 0x0, 0x0) [ 455.764418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=30166 comm=syz-executor.5 23:16:14 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) [ 455.814482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=30171 comm=syz-executor.5 23:16:14 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='p\x00'/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c000280060096f503000000060001000000000026000100020000006afb9076257a4c9131f190860e01bfd70ae105000400e2ffffffffff07000a004aa23e67f2e87c43031edb72122a681558bcd3c551642a1303a600fa443a81379d6800000000a2e0335ac4efe1072de1c427c7b7e6238a2dca7f57e3de331187751638f6c27d4188e6aadc108c2f4453cdbdbd3ef75f03d8b30c714af48f6161d4b8640827287ff4044b76408446ee59a7ba9b43cbb9895fbe1d1b7e49b463ff2ca55dfd"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f00000006c0)={0x40, 0xf2b, 0xc4, 0x8f58, 0x5, 0x2}) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x118, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xf}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2={0xfc, 0x2, [], 0x1}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2d}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000}, 0x4049851) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000740)={{{@in=@initdev, @in6=@empty}}, {{@in6=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004000) [ 455.953401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5134 sclass=netlink_route_socket pid=30184 comm=syz-executor.5 23:16:14 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 23:16:14 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:14 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000140)) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:16:14 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) [ 456.104121] ip_tables: iptables: counters copy to user failed while replacing table [ 456.162090] device ipvlan14 entered promiscuous mode 23:16:14 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) [ 456.236673] device ipvlan14 entered promiscuous mode 23:16:15 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c040000000001006970736c616e00001c0002800600010003000000060001000000000006000100020000000a000500040062f77d006949059d0a004a0ee7646d72d45c8673e2ab2c30e20ce8a91bbd786264a4f78bb53a7f41e15692bc7b0daa4ca28828a545bceaf471e07558c1889f901fe651c8b586e1a4ca1a6dcb69b7ef2c8191a0d91ec61d26996038806572d521282f5759b80b04bcfc7930d4f1fcd5d533665936ed6b23c1755e8b4bd24c7ca5063c3beb9491d02f68cdf4295661437dfde8bd638e668beb4666862246691b57d0a9c5289dfd2b502dcb1202db6f7dceac73212c48981b7a6d500f08e49dd0f25879af6a89703d000025347d77aa4678f5088b1d6cd6d068657cfe"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$SNDCTL_DSP_GETCAPS(0xffffffffffffffff, 0x8004500f, &(0x7f0000000000)) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f00000000c0)=0x6, 0x4) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r2) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000080)={0xff}) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) [ 456.414209] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. 23:16:15 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970996c616e00001cf101800600010003000900060da3b6c5bb0000000a00050004001000006b6b9a6d000a004a9981a9dbe1df7451ac415fefec1418907d23cbf77a2cc2b5f22768b010c013a31339d3bfea863888bba68e0123047be73cb0a12eea1715a3d341af847ce648772c0e6ff6edf3ec8889e4ec0d7825b27a8ba626462dc6897ecea2f2f5d5b80f29a076541c728d92d737c204636b7cbb69b8300700d25d7f113ba57abffd8ace8911db7743494ec7c9aa2c9df6e901195492c4eee208845a88b35f4103b83c664a6564e90c86ed0c2ba3afa0c24ebb24711da8632e00210c3475401cc7a61de68803463ebf14d79e82821f3e00000000"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:16:15 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000600)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}}, 0x4000800) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x40440c0) write(r2, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000440)=0x7bdc, 0x4) timer_getoverrun(0x0) recvmmsg(r2, &(0x7f0000000400)=[{{&(0x7f0000000140)=@generic, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/212, 0xd4}, {&(0x7f0000000200)=""/98, 0x62}, {&(0x7f0000000680)=""/134, 0x86}], 0x3, &(0x7f0000000740)=""/229, 0xe5}, 0x1}], 0x1, 0x880e, &(0x7f00000001c0)={0x77359400}) 23:16:15 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendfile(r1, r0, 0x0, 0x80000000) keyctl$set_reqkey_keyring(0xe, 0x1) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) 23:16:15 executing program 3: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x82) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000340), 0xc) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x2d1, 0x24200) chdir(&(0x7f0000000140)='./bus\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='./file1\x00') 23:16:15 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 457.084097] ip_tables: iptables: counters copy to user failed while replacing table [ 457.107237] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 23:16:15 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:15 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x27930}}, 0x50) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f00000000c0)={0x1, "1bcc56e1b8a189f39b64aef3fd143fcb40a5d9e313edd6371076c346ce1e4ad8", 0x0, 0x1}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00(`qH\x00', 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="f0010000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000080000000000000067726f75705f6964060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000080000000000000067726f75705f6964030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/31], 0x0, 0x0}) getdents(r4, &(0x7f0000000000)=""/139, 0x8b) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x163a, @private0={0xfc, 0x0, [], 0x1}, 0xff}}, 0xffff, 0x5}, 0x90) [ 457.131102] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 457.159285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30258 comm=syz-executor.1 [ 457.183999] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 457.212288] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 23:16:15 executing program 5: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r0) write$P9_RSYMLINK(r0, &(0x7f0000000080)={0x14, 0x11, 0x2, {0x8, 0x4, 0x4}}, 0x14) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) ptrace$setopts(0x4206, r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x200000, 0x0) ioctl$FICLONE(r2, 0x40049409, 0xffffffffffffffff) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:16:15 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) [ 457.249315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30271 comm=syz-executor.1 23:16:16 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x746, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a000000}]) copy_file_range(r0, 0x0, r0, 0x0, 0x200, 0x0) r3 = dup3(r1, r0, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r3) finit_module(r4, &(0x7f0000000040)=')\x00', 0x3) 23:16:16 executing program 5: getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRESDEC=0x0, @ANYBLOB, @ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x5f670f9e7db37900}, 0x40040) r0 = socket(0x27, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000001200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x35ce36f74e88bcc0) 23:16:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r1) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000000)={0x1, 0x3, 0xffffffff, 0x3e06}) 23:16:16 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:16 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:16 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="2321205cfa7c350bebcea96c5130202a7163e20000000000000800d33de9fb95e370a217f724f4de04a902d82b9040000092290a7ea290"], 0x194) close(r1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYRESDEC=r1], 0x60}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) r2 = socket(0x10, 0x8000000000000003, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x1052c0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getqdisc={0x38, 0x26, 0x400, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6, 0xd}, {0xb, 0x5}, {0x2, 0x1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000800}, 0x40003) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f00000004c0)=0xfffffbff, 0x4) ptrace$setopts(0x4206, r4, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xa, 0x2, 0x1, 0x0, '\x00', 0x100}, 0x5, 0x100, 0x8, r4, 0x9, 0x3, 'syz1\x00', &(0x7f00000002c0)=['.#-]\x00', '/proc/vmallocinfo\x00', '/proc/vmallocinfo\x00', '/dev/full\x00', '/dev/full\x00', '/proc/vmallocinfo\x00', '/dev/full\x00', '/proc/vmallocinfo\x00', '/dev/full\x00'], 0x75, [], [0x80, 0x100, 0x8]}) [ 457.490020] audit: type=1400 audit(1598742976.168:260): avc: denied { module_load } for pid=30283 comm="syz-executor.1" path="/root/syzkaller-testdir883520692/syzkaller.LV7oW2/841/file0" dev="sda1" ino=17322 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=system permissive=1 23:16:16 executing program 3: perf_event_open(&(0x7f0000001040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, @perf_config_ext={0x4, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0x81bb2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffff8, 0x0, @perf_bp={&(0x7f0000000240), 0x8}, 0x8222, 0x0, 0x0, 0x0, 0x3, 0x1, 0x8}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000400)='vfat\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x5, &(0x7f00000019c0)=[{0x0}, {&(0x7f00000004c0)="3fd8a86118f9", 0x6}, {&(0x7f0000000980)="a9fd42035bdaaafa155154217d413d7c59189428406ddf068ad691fdee5a905f8c35fc9f8bb553fff98a8a78d508f8b2360e340ad4cb6e618905dc3f5144991472313c4aeaeb004d48dbe04d939da186f8e85ca0797ccbf403c7f790728582d9dc25e4c011f932b6e922333d1ebbf360b72581702493a39c1fe5a7b2ffd3da10b26657329966c1a9e0b35e3038fdbb5ed77f9f65ecb28dc81728ab4805909954e310519bbfb702df3bbddb3470ea7822f7da29a88b5958f3d78b1914d2a480c59c88771d45e20de345328d1b80fa4000a255d893a55f189e70a1557aed81e61bb33e4562d40faf00f538ae", 0xeb}, {&(0x7f0000000800)}, {0x0, 0x0, 0x3f}], 0x102020, &(0x7f0000000840)=ANY=[@ANYBLOB="732edfe07da8654e517893353b18eaf5e3ebfaa6e0ab22b2574681e8d5fe9d6fc22d45d5fb76127a6e3ec125b1cb960a0b3e43bacc9d1ca833587a6c3b50c2a4d5020e47dccbbc606a6cb7e050117e591db9a8f7571e88680decdc246fa3f889df891a3f67fa3d6bd665a132de3eedbcb3509de9c0cde22f6b97804faf3a4d6186e71e62541da8691f"]) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="2e2f66696c65302c6c6f7765726469723d2e3a66696ce28230ef4e40e09069723d2e2f66696c65310000007653880000000000003299d5d6ffa77c6990a80befed1bda131013bb84b1995396aebe238785372fb6717ea6fea263fc35f5f5a172f5e44865ebb9b3942739c669c260c61f72193da1bf75a1f8fb332d795f1f7c3a9d79"]) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000640)={0x9, 0xffffffff, {}, {0xee00}, 0x6, 0x4}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20040014) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000280)={0x4, 0x1}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000500)={'syztnl2\x00', r1, 0x5e, 0x8, 0x1, 0xb2f2, 0x0, @remote, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2d}}, 0x8000, 0x80}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={0x0, 0x3728}, 0x1, 0x0, 0x0, 0x4080}, 0x0) [ 457.684418] overlayfs: failed to resolve './file0': -2 23:16:16 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, 0x0, 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:16:16 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:16 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_PID={0x8, 0x52, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}]}, 0x34}}, 0x20008084) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) sched_setscheduler(0xffffffffffffffff, 0x3, &(0x7f0000000000)=0x4) [ 457.938121] overlayfs: unrecognized mount option "./file0" or missing value [ 457.973607] ip_tables: iptables: counters copy to user failed while replacing table [ 457.984493] device ipvlan14 entered promiscuous mode 23:16:16 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) [ 458.073587] device ipvlan14 entered promiscuous mode [ 458.080693] overlayfs: unrecognized mount option "./file0" or missing value 23:16:16 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:16 executing program 5: lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0x9e, 0x1, 0x0, "e8979606b95db4af8073e58540febeeb", "ce89a08e26bac3a9f9600ab4cbf54418ee4157fec7bd316492b001e81d6c1cdb0b0d2adb2a1135219886b23af44a66df8847d0ddece2dd112b1eda63a3f1dd99e60d81897e753cfe5dbbedc0d683b55b2ee7e4f4feafc42a146275adbc0cb44185e28151de13768e4e53ccef1b12fe311acf996494099ff10a4199d30de639d05cd18931edaf903ba9"}, 0x9e, 0x1) renameat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='.\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:16:16 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) [ 458.306202] device ipvlan14 entered promiscuous mode 23:16:17 executing program 3: setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x6}, 0x8) r0 = dup(0xffffffffffffffff) write$P9_RVERSION(r0, &(0x7f0000000240)={0x13, 0x65, 0xffff, 0x800, 0x6, '9P2000'}, 0x13) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) recvfrom(r1, &(0x7f0000000100)=""/1, 0x1, 0x60, &(0x7f00000001c0)=@nfc_llcp={0x27, 0x1, 0x2, 0x3, 0x7f, 0x30, "121f94926a535cf47b3c09952af11de2fd9147fa0767a12140809e0d7a259892f6129aa80494af696e88f59e2e60cecc99431d7f47bc7d9b8596ec88d51e24", 0x1a}, 0x80) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="040800090000ff01e66174000410090a0200027400f8", 0x16, 0x101}, {&(0x7f00000004c0)="8400ac170000", 0x6, 0xf}], 0x91002, &(0x7f00000002c0)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) 23:16:17 executing program 1: socket(0x1, 0x5, 0x7e) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000440)={0x38, 0x2, 0x10000019, 0x3, 0x8, 0x0, 0x800000000000, 0x0, 0x1000}, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002200)=[{{&(0x7f0000001540)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000b00)=""/117, 0x75}, {&(0x7f00000008c0)=""/48, 0x30}, {&(0x7f0000000900)=""/247, 0xf7}, {&(0x7f0000000a80)=""/100, 0x64}, {&(0x7f0000001ec0)=""/94, 0x5e}, {&(0x7f0000001f40)=""/248, 0xf8}, {&(0x7f0000000c00)=""/142, 0x8e}, {&(0x7f0000001700)=""/130, 0x82}, {&(0x7f0000001000)=""/160, 0xa0}, {&(0x7f0000000e00)=""/78, 0x4e}], 0xa, &(0x7f0000002040)=""/214, 0xd6}, 0xb}, {{&(0x7f0000001600)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000001180)=""/193, 0xc1}, {&(0x7f0000001280)=""/184, 0xb8}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000001340)=""/195, 0xc3}], 0x5}, 0x5}, {{&(0x7f0000002a00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001980), 0x0, &(0x7f00000017c0)=""/175, 0xaf}, 0xfffffdff}, {{&(0x7f0000004cc0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000640)=[{&(0x7f00000010c0)=""/184, 0xb8}, {&(0x7f0000004e00)=""/250, 0xfa}, {&(0x7f0000001d00)=""/205, 0xcd}, {&(0x7f0000005000)=""/151, 0x97}, {&(0x7f0000005700)=""/36, 0x24}, {&(0x7f0000000f40)=""/138, 0x8a}, {&(0x7f00000051c0)=""/23, 0x17}, {&(0x7f0000005200)=""/33, 0x21}, {&(0x7f00000005c0)=""/74, 0x4a}], 0x9, &(0x7f0000000700)=""/260, 0x104}, 0xffff}, {{&(0x7f00000053c0)=@ipx, 0x80, &(0x7f00000054c0)=[{&(0x7f0000000540)=""/89, 0x59}], 0x1, &(0x7f0000005500)=""/112, 0x70}, 0x2f4}, {{&(0x7f0000001a00)=@sco, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000240)}, {&(0x7f0000001440)=""/93, 0x5d}, {&(0x7f0000000d40)=""/192, 0xc0}, {&(0x7f0000005740)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/111, 0x6f}, {&(0x7f0000007740)=""/4111, 0x100f}, {&(0x7f0000001880)=""/213, 0xd5}, {&(0x7f0000001a80)=""/177, 0xb1}, {&(0x7f0000001980)=""/122, 0x7a}, {&(0x7f0000000240)=""/13, 0xd}], 0xa, &(0x7f0000000840)=""/80, 0x50}, 0x1}, {{&(0x7f0000001680)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000001b80)=""/246, 0xf6}, 0xd9}], 0x7, 0x20, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x1ffe, 0x3, 0xfffffffffffffffe}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000280)='encrypted\x00', &(0x7f00000002c0)=@builtin='builtin_trusted\x00') keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000180)={r4, 0xbe, 0x1006}, &(0x7f00000000c0)=ANY=[@ANYRESDEC], &(0x7f00000002c0)="afa956f99fd5ca40a2a1515e0d4bba7d88a39d6919ef447e8984c7e0cd4407af0aed3a82dc305722365fc3188e138c41acd2c584ddd617254db80f19a6dae9d7585a00bb7a94c78069051dbbbb88ebde2a6e5b6b75df1a0ce8c65323f27c5b4c2f9a3177e57ddb7135da90f1784d0bf29366e0f2c970aea6115c47b75127e0ef73d614fc9e4a1c750cfaddf118b1f06ddfdf96531ed1ae7a89b3976c09fc52aff0f7effdf05e750548608ee8181e8a64ec66cec78f7b3fc33b37ef434288", &(0x7f0000003a80)=""/4102) listen(r3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x4cb62, 0x0) perf_event_open(&(0x7f0000001c80)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffff749, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xfffffffffffffd, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x1fc}) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) 23:16:17 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) [ 458.376500] device ipvlan14 entered promiscuous mode 23:16:17 executing program 5: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r1) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x6, 0x6, 0x8}}, 0x30) prctl$PR_SET_PTRACER(0x59616d61, r0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x60}}, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x140a, 0x10, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0xc880) statx(r1, &(0x7f0000000140)='./file0\x00', 0x0, 0x20, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r3) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:16:17 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) [ 458.519569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5130 sclass=netlink_route_socket pid=30409 comm=syz-executor.5 [ 458.590999] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5130 sclass=netlink_route_socket pid=30409 comm=syz-executor.5 23:16:17 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, 0x0, 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:16:17 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:17 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r1) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x9) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:16:17 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) [ 458.881938] ip_tables: iptables: counters copy to user failed while replacing table [ 458.909415] device ipvlan14 entered promiscuous mode 23:16:17 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) close(0xffffffffffffffff) r1 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c8ee660f38826f3cf30f01e80f69e866f20f38f015650f01c883dd000f0131baf80c66b87aa1cc8b66efbafc0ced", 0x36}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x8, &(0x7f0000000040)=0x0) io_getevents(r4, 0x1, 0x1, &(0x7f0000000140)=[{}], &(0x7f00000002c0)={0x0, 0x3938700}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) io_cancel(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x4, r5, &(0x7f0000000080)="fc575e6ca040c9dd74622ebe3f55", 0xe, 0x4, 0x0, 0x2, r1}, &(0x7f0000000180)) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x200000000000203, 0x0, 0x4ca], 0x10000}) truncate(&(0x7f0000000000)='./file0\x00', 0x9) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:16:17 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) [ 459.048707] device ipvlan14 entered promiscuous mode 23:16:17 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x40085}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x8) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000000c0)) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x8, 0x5, 0x6}) 23:16:17 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:18 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:18 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = open(&(0x7f0000001940)='./file0\x00', 0x0, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001a40)) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, &(0x7f0000000140)="96c41ea58076e9e174d755aeb66ab16c66f420dac04200b382afc9f134a6805cd64c495f2b8f99583c51b0f9d3ddee4ad661173c978121cd03ebcfbf6347361846babf3d09833fe830c8b30183e6e97de77e88ddec9dc46310ecec0308f559ba371ee2de9f632d50d98cf4e686aca1e6bfbb35a9ff3193d110b7d0e8698e4f628528eca186fb48e6fb33cadabf4623d2f80eba78ca5e9cca3390eb539c39c461d34b4795858618bc", 0xa8) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000000)={0x5, 0x0, 0x1}) 23:16:18 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:18 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) [ 459.580736] device ipvlan14 entered promiscuous mode [ 459.632468] audit: type=1800 audit(1598742978.308:261): pid=30472 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.3" name="bus" dev="sda1" ino=17203 res=0 23:16:18 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, 0x0, 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) 23:16:18 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = dup2(r1, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) [ 459.712577] device ipvlan14 entered promiscuous mode 23:16:18 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = dup2(r1, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) [ 459.767328] audit: type=1804 audit(1598742978.448:262): pid=30488 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir513425050/syzkaller.7YaSlu/405/file0" dev="sda1" ino=17061 res=1 23:16:18 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYRES16, @ANYRES16, @ANYRES32], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048080) r0 = socket(0x10, 0x8000000000000003, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x4, 0x6, 0x86, 0x1302, 0x20, @mcast2, @private2={0xfc, 0x2, [], 0x1}, 0x80, 0x10, 0x5, 0x7}}) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) [ 459.820150] ip_tables: iptables: counters copy to user failed while replacing table 23:16:18 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xb) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0xe35, 0x0, 0x1007, 0xffffffff, 0xd67b, 0x7, 0x5}) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000), 0x4) 23:16:18 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = dup2(r1, r0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:18 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x3a000, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000140)={0x0, 0x8, 0x1f8}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000700)={0x0, 0x7fff, @start={r1, 0x1, "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", "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"}, [0x6f, 0x7ff, 0x80, 0x9, 0x6, 0x4, 0x400, 0x1, 0x400, 0xaac5, 0x100000000, 0xfffffffffffffbff, 0x0, 0x1000, 0x0, 0x2, 0xfffffffffffffff8, 0x3ad, 0xa9f, 0x1f, 0x40, 0x3424, 0x7ff, 0xffffffffffffffff, 0x2, 0x2f, 0x49, 0x0, 0x5, 0x101, 0x80, 0x4, 0x1, 0x12, 0x5, 0x836f, 0x3, 0x8, 0x2, 0x4, 0x9, 0x118000000000, 0x2, 0xfffffffffffffff8, 0x3000000000000, 0x200, 0x3, 0x1000, 0x80000001, 0x3, 0x7da, 0xfffffffffffffeff, 0xffffffff, 0x7ff, 0xbdd0, 0x401, 0x1, 0x800000, 0x8000, 0x2, 0x1f, 0x1ff, 0x100000000]}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e3d66696c653020f014d336b003ea04000090ab0e7446000000000000000000"], 0x194) ioctl$PPPIOCDISCONN(r2, 0x7439) close(r2) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={'batadv_slave_0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r3 = socket(0x10, 0x8000000000000003, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x81) getsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000540)=""/111, &(0x7f00000005c0)=0x6f) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:16:18 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:19 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:19 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:19 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_SET_PDEATHSIG(0x1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@secondary='builtin_and_secondary_trusted\x00') keyctl$search(0xa, 0x0, &(0x7f0000000040)='rxrpc\x00', 0x0, r1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000001c0)) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b00100000000000b2140e000a0002000000dc2976d153b4", 0x2e}], 0x1}, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000200)={0x3, 0x9, 0xdb4d, @broadcast, 'vlan0\x00'}) keyctl$invalidate(0x15, 0x0) 23:16:19 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r0, &(0x7f0000000500)=ANY=[], 0xd) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x19404, 0x0) 23:16:19 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) [ 460.668771] ip_tables: iptables: counters copy to user failed while replacing table 23:16:19 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r0, &(0x7f0000000500)=ANY=[], 0xd) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x19404, 0x0) 23:16:19 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) [ 460.823593] ip_tables: iptables: counters copy to user failed while replacing table 23:16:19 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r0, &(0x7f0000000500)=ANY=[], 0xd) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x19404, 0x0) 23:16:19 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) [ 460.989436] ip_tables: iptables: counters copy to user failed while replacing table 23:16:19 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) 23:16:19 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) [ 461.138283] ip_tables: iptables: counters copy to user failed while replacing table 23:16:19 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) 23:16:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) [ 461.372064] ip_tables: iptables: counters copy to user failed while replacing table 23:16:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:20 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) 23:16:20 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0xe0000000, @private1}}}, 0x84) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r3, 0xffffffffffffffff, 0x0, 0x0, {0x3, 0x60}}, 0x14}}, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x4c, r3, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, [], 0xb}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2b}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_AF={0x5, 0x2, 0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004814}, 0x240008d4) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:16:20 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) 23:16:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) 23:16:20 executing program 1: getpid() setsockopt(0xffffffffffffffff, 0x10e, 0x0, &(0x7f0000000000), 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0xa, 0x6e1) close(r1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') sendfile(r1, r2, 0x0, 0x80001d00c0d0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x1008}, 0x0, 0xfffffffffffffffd, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000800)={0x0, "d3f3c1dbbf6be848939a7a9d1bf6e10b"}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000000)={0x0, 0x8, 0x5}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000400)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23:16:20 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x0, 0x0) 23:16:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) [ 462.099401] ip_tables: iptables: counters copy to user failed while replacing table [ 462.117660] kvm: vcpu 0: requested 128 ns lapic timer period limited to 500000 ns 23:16:20 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600080001000050500"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b003ea0400000000000092290a7ea290ab0e7446"], 0x194) close(r2) ioctl$TCSBRK(r2, 0x5409, 0x0) ioctl$sock_ifreq(r1, 0x78, &(0x7f0000000000)={'veth0\x00', @ifru_mtu=0x1}) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)) 23:16:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) [ 462.248897] ip_tables: iptables: counters copy to user failed while replacing table 23:16:21 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x0, 0x0) 23:16:21 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYBLOB="4ae0c1d22d8f1266d1b556624cfcf80211cbf287571bd0b021e8c4a878", @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x800) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 23:16:21 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 462.414758] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. [ 462.426783] ip_tables: iptables: counters copy to user failed while replacing table [ 462.481434] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. 23:16:21 executing program 3: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0xff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002cbd7000ffdbdf250800000008000700e000000106000b000400000014000600fc01000000000000f9ff0000000000018f9d0493ae83b5b476a10a538bc86816d66f3d26911cbb074a9f850a08669a7fa238444a42e98b05ad949e76e7b0703544e76797e7dd750275ceafd97d347c01e31f5e0c3817b28d517118cd661ca72c9e35aad430dfaab49310663d704849cdab32c65301d2233b0953723c2721b758d803bc492a11b4b29b38d26d2d90e111b7dce8cfe73ed10034cd2294c7af48f39da8fa7f1a152e5a21c08c9860"], 0x38}, 0x1, 0x0, 0x0, 0x4041}, 0x2000) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self\x00', 0x418000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000580)={{}, "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"}) open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) 23:16:21 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x0, 0x0) 23:16:21 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000940)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000100039040000de000000000000000000", @ANYRES32=r5, @ANYBLOB="83080000000000001800128008000100736974000c00028008000100", @ANYRES32=r4, @ANYBLOB="08001f0007"], 0x40}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @dev}}}], 0x20}}], 0x2, 0x0) sendmmsg(r0, &(0x7f0000004f40)=[{{&(0x7f0000000080)=@in={0x2, 0x4e21, @local}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)="0cdf38b4c053ee5b31d68175006ac68311232a31f8ca8c1cccf8866ae80dbbc192f2aee5f9011ea269d054348622cf680d236b945f0beda63cf16e35d4174ec142c196bdad8149351572f92ab339a2eda305127eae2e1efaef5f1a857753c1b971b5d80e0bfafb8ccaf72088f237fdfa33817687a9413c1871e91df48c1f8cf7b3d85ac9e268fec44165878054de95fadb932283f19db9c931e6d5d844a647c3934e4bdc9601dace20e360a5635ebe", 0xaf}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="d381835170bdd52b638d49aaf08b5a53f00b7aac98930e467ddfdcee5fac1b046e31226d4bc351dcee119e3886a229cb54d44ec40d17957d727ee454c199e618c554cb6272378fe7d15269d12ab2861819a4285b85566ffcd4d01a8fd438a4afe7f4206c8982e18e174acf6b821d8d9bcd06f6720d0d0c736876326fb82292017810d3a20b5a174ec351e5d8cdfe2b3f36f5d850d99e25ad66e1f5595b5e39aeab26c0d3b0ecf932220fa07f028849e6b88e7d2287cd0af388317ee6b83e1883e2000e0e6a62315f7d20a5f0aef18219646fd3f25ec8383980ea585e4d032865448fbadc23b5ae069807332c0b14ea36822d04b3a2afbf71cb4a650557b36ba02282407aba291d318485de6bcff08cbf5811bd6e6d4e52f71a1a6f614f5203b718036140d1fd97893bc59a909bebea41160ec61eda605f8c36fc50bbb477b37ce7180997f82bf44586e4afd7587ead2e55b0ed52d3a8e47c7cf5913cb6e7cfefac2b2bccad20099f1c10b2d36189fc7abcd26a4a5c62003fb391144203baa2a4f2397135635af87d155db33085e62ceea361cae9cfc446c104d885ca8e0dc6705d86c2bdc276503a9e98e1aeded6108a418088cdb15989654853b2359ac3432f9be9ca79b0ecdcefcbba4c23f410a7451d65360c1563f65d374d0d24a9dbde72022f106040bc0afd3b8b4da8eabb6227ae28ed08450f210c4055a0faa8e9e9d90161909d9cff52058c1687370185aaf6013956b543e6ffa05b88f62b609d0a4198a620555a76d685a803abd391da3696bd7f739b10e8fb50d9aaa6abe9c6d8f0f0792d1f6739458aab9f10a8343a87deb56365061401d8ef063413ca4cbdce80afd8025e10a9d4470ac6a081c8103bc0fa27d8c35fbc66867ff9fe12807d8e6aabde40b50eae3eef5152c99ae42d85f67840fd7f4cf8d76bfcf9b275c96bfff1436ec43d215eab18146daab07c1525e01586e148143273250bb828b5e78386f87e62ed124f92e7a1af18bf3452275f1035925cd786bd604466fe29044687111f56f10841662cb2baaf1c25db22d41b1567db7feafe656a71de30e5a907236a0d4e6efc9ef43e42431be1d4a382f2cfa2677e83186ba6f2db370bfd407619088df60f48c11774467cc10179a41de3b76fb06b997f1e92b0566f0161f8d7ba3f7a26785b9751beee94570cd6b2bfd3fc5a1ef52dcfcf27aa11d511a5685b9fdaa961f6dd203032335d74e59fe2bad87d27916d466fac63a1ee627a28efd4cbc853c35c67a9c1f745a24b19899afd6bbea47972fc1b156e3a74eba10d7e1297a96c0f81d8f6aa413e5d4fabd10bf3769a54a231c197e505db280ea5aa60984c04d20c40528f681dd18f35bd8c893fe3fd42cbe9ad4a7450d19b32c45bc3eef4cb524aa7c7c0317f3b75a2192eaeea7375b58120dbd706adeeb69235e7b4e9e945799b2a9842604fa00809bfdec38017aeab8dd73badf87ea38a96cd166e67c5216b8c31f733054895be95832ff1501d5f26f22c1b5d250ed27dcacf252280fb55b99ec0cbd93c288febe2bda94bb439e1eea31480a0a672ca2fe9f8067f9ba9adfebbaf92c9cf212d37275c49a6ed0595dce3b8ab20072fd38ee66b110080c51915ceb2c2a0e683e84af10d4db9ca0a6185d237f77792bd471e4cf2c47360d55caf1ea69264545bf8e613fc4942b899765fd07488edf78230459263761ec9c2f74a2ca48fd241b94de5eeae277271d30dfff9e404b24ccfa4508934cf0c06cd4da9200b9fbbf8b34022edfb5f3ff074eb4493472614b909ea376f548ff71aea65b823455efc35b2c502243de664ca0ec95a007d72ad74d375acc13275c54706102d0e7ae98b40e02053a356016895c6d657fde9097ef1658dfbbcbe877579623db517fa6e8289d7c8819aefaa47f79b10bd941eabca3fa69a6e1cc867b16f1e47305d9fb275dfe8b6e510bd9b88716b4c147c3fc7fe6fc2fd6443249cbfc0f6928cec2b79c3954dac948f5f0f2ee33734ca816732e03396da584b520625740a8487fd2dce493680519f2b23a484475d307aa44b76618cff6ccdf8b864a5e19342d856ad95b81f2ae0a52a314530f646ea89b773143b35e3a7af60169efb3d3926d15b618ec6aa9172f06a13cfcd77c572c61b1d26b52932272bc3fb7971d799e1fac56b3dd055f76739e34160826eb43e07e9e5dd430211dad3a8ce9e7eb1cee1d69a530cdbca4663ab694ebbb4a84448db17bbc45edc117c5218fe19f05d611820ffc5a93afd2cda3015ea6d72e9ef17bfd6f3d2742f788e5bb782a493313c15ace72d600b1ae0afa42dfa8be7c81ecad507994daaf383734cb3262c024e92d6d9467372cc47058092e77216ecdd1f1d85b807889ed267cb7663b4828f2a39f1d38b4d406f09c281bd16f59eba5e56f8279b7ece75bb01b03b9732a2402ef45bec2a37144583b9379429415f52ab776f259102ce9ce8f2b9c7103b32c6f6105cb83b7914fabf1e2d99bdaed069069fbff80853d82083f1b0bfe22f862fa2d375906dae827b1021183b270d3d320a4ef9b16f4e583553863cf99c595f294565fe6bab78b71efc4ff7c982d0410f51becedbbb9e0559ab6f97ede0395ac282f6ed69e6b677bd111c34694e773e096548a5ab6825d96244e7644a85a4e1875c4ea83b0434ef0827f47bb2989de66ea2fb96152959dad5df8f8c71d6a2c0d2eed94cd850f0248d8b14d716a3b58fc1c924ead4c24ff26432d4013c516fe8904f1bd5347f278a12769be966660efc7a2b3bf686f236178016a3309d857da60ed9a68656c74ef3ae5d71e7c0f932ba13ab7a09d82bf2368408801d7ab8c5001f483d035c500bc564e9958649271f6a15fd2adadd1f6e594790997779ecc3d344738b27bc26d79c0fa1d590dce287b4ce8dd34e19dce3100e7a7cee11f48cb21fc64d274f5f04067760342b672ae28a556f2feeb5dfc0b4ec01a4ff57e021cc7f48778f2a3d4a65afea1d5f0100af06d288f4bd09870d6ba1ef3847f865c8e915a346436a17a5f62f5aab20478be527503c9b559220e277f11901c82481371b983d84d131683635a51c423af6bf9257691736b46394154f019e0766ef15bca5ec22e144e9996c8aef900c051626bfe2d18066daac28529cb98a04f7a0e80aa22db641e7ddb353423161c5485e9811656f2ca37b8def14f9e732d0be9ae7253509a68154504c9ebe7d8a881305edcfb2dd3f65c3bc64d9aa98cbb50ceafea9af954feffe662a60dd620a11578d6e8a7e329b6cb3c23af44c58105111270e84c7e2c2e9bf7851f12993c8b110185253de5d963672b8512ea0ef6a19fb3ba25da88066cbe82a2ef3ba740b2f3dbc05b18ad21e0770987d156be8a19bdc423187dea9a6fd842bb809887bc208736f05a3fbf4639cf7b2b970da4ab596a4bda1ea0e6cb53a06010ad700744110cb4bf4c3466c560c608dd06e8fe014b32f1a301a55d96005a09a190bd2601dd371b56753c50b35c78dad0f73ceced6f5578abb08473e1f28a1dfe0175ac3ae06b7903dcf7944294d5611378e2821c1ed371e0159e45348787ccb7e14a284fb09e7624f76e7fe2d9156169f3e02f0528bc56575d56001f8159a43e3eeeb2033b51b72f8fb23dad04575f09d42e1f3063bafdc0b149957d821c27a112ea3aacaf7120a5ac998725dcbc1ea6a87763114e62bc9de5272279b9a92c3c317928a84f063225b0d73a6ab41a90899883b4a0e82a82980d8f6fd5d45c496701a250cbe3177bfc9e5556c7cf517600fc81803f8b11968fcb7c2c1418aeb56b7bfe83b7ee0fecf9f2c407d9ca4f0e6c1bfc402184067ab6cc0428fe4e6369dd7351e7afe74b530c937edddcd1e0f28a885acc19965cbd67d506969517932a55206a22979f73ce26fe25883da75bac1c1580973c4772a39c75967b6c9fa7ebf486d334564fbe3f7b158c3fc8afcdc11e0cd15418b62f9fd1ef56309e0727bef822a2d93fd57a2ec2457a7e068d3c1c2957fa776252a55037d9a28da1bb8232944df7342b94e9a47ee7184c6fb53afb28f0a15d57b8991f92f8fd23ef4b11c0d89290500ba27ec18999130b28c5e57f69d6daf5d3f90db61cc0aa2c295aaa7d36876eb465c650f17b4fe0b916a1008ff8bbc73355ecf59854390c718553c6e6852385ce0b409ca6cbbdb1559f7b4433d8458af52547a1ca12c48ada74985cf1fd97b34cf3256fd6d5cf6936197547eb4b3421ebf15dbb6e6b8a8e094da524ac73131016fca0dd5d07a7844cd05492ceb152d5057bf1db5decd7d4f0ebde176c599c2cc4b8390c21ffd0dc6bdc229874e2dd84e48f994161412063224012b97f61cb22e3314fc176050e40099d16d1f8a6251f8048854e25ef56b96c70809b2a2daef43567cdcba93d3f7df512772c95bb76d00352ff16d9ba1d2c5cc3f771e2ec7318e10de62ebe170168d00cf4ac8bb4b8b1a588c7f8c61eefa9329c727a13ae4888de3125b03d35cf0e572070b9b44154a6af1820c421b2c4e55e3b32d8b192d2e673d2d70d9b44edb0325e41626d9f0c86a70c7e0d2a8bf2e02b0f48978075417e23443b79c78ae9fee59e8f28d69a715c64251db7f7d4653f4f0a75beaeeced84fdcf18d9a80cb0d145d89f2b359904a34fa21e475d1883d3a8658f19fe3abfd68cf38bded550a0dfbecb3aec737855dc4e58ceb3b2edf3f9daaa3f9c75e834b524cbdaec4e04bffe3ff4211533f7bc974c798dfd394b1ba4d511204137291057a72fcc53751404dee713cc3cb73fae46208cda61682ec3aada94ca63111c8ebb2653113e81ff464ce4fc81b88fffbdc731a72d8600ad6d4206d734a3a4be5791f18b02f6bb1b995dafbfc88e936ba8cffb30e685f816e85ca002a2b34df24898c23401c54308cb014503762df1a244303e2c7bf6a0944211af8d70023b003f5c82497b3f96c39efe18e0f4b801574047422c51e1968825061840390c6f6df925b23a861f2347b51e45f01b05b75ab420eadac4b13de1193266a99f85a0591ec2be903eb5030ac9e97313a9b2e243b5b50bd49555f199db8b4447183cda1b3b92df73b8958982573a134fe22ad7aa1a10a682774957c882c94be528cd985717c393ed46db04d0df687539a3ef028a0e15d3a90b1a304ce905cac52b3886435c72fe6988fc6138fb2f870d2d4f45fe91634abf94727fa252688d07b6011a5b12a1087168a38b1eed66df1db93d59d9dde7da76c928d601c505de305ae2ac426fde27b8fc9fc32784dd7f273f486ec4c24bebc14aeb8f503517c53c85590a74cb353e245b2a0db1fd221ea439fbc6f3b1d4e55a32415e766cc19a8b6b186659e02e8877dc9f1755967c3698f9fd4db404a84dd2fea7d1e82d134978c8cca88a413803b1e86ff61ba14b80a80c0d14acdfb5df2c9d6940f5fae4e8bbbb3a2833b1e8f9375e6cd0db88b119d37feec74b67afb7fd2bb069eec1a634890e9117c52f07efcf5c1f4618a9d891db005e569cfa5765b23493f398a477cdf443a229c2609b196f87d06ae12c97c0f5a19eb0dc2faacbbd2d4bea5532d5d9c69993378ab3c63f25abd2773fa0926cbe1cea08c6f26f1a867e91eea6b3b2880f6ee0566a21850796ca4e3ceae0bc199a6d02225a88805af22a64be96c26f62498a4064fd8fe89f0cffdcdac59d2a1456e50558c83c0cdc6baa5bc77af404094357deba1e85a36ff840fd5ce7d41c81631a0e740f19db5f7f0dc4a5ffb2368ee95c47ef865cc6ec5fa841b09ce96216cfa6ca7eecba7f547fa898f4382d40d900ba470d4", 0x1000}, {&(0x7f0000000000)="f5a6c342ceff403d5ed73cc81788b04054b18e4f505e1a10142dfdf5cc07129d", 0x20}, {&(0x7f0000000200)="ef82f0d07965f8eb5ebdbe609e2b4708a005f4b10723150b0a7756fb8e7a46737aecd72179b77a735f5ef776c6fbeb5796a366c70eee9328bb9ec6eff1e7452a6de419f4615bbe1714d41ab6a58a66ef3ab09f8ec77858ba531109a864c51618372ce0f28fc3bfe617a648ff52e12b10a8b25f0bb8134c2e3557ecd86f9e3fe8b9db9b6497c9f88d03f0660daa8337f7f8f3d3e2a21ca580f606b69347e350f356ab4e1d321b270b1a88806602a2911270f21eda24cdc55c640d3ed41945c0ec0ec3add2", 0xc4}, {&(0x7f0000002700)="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", 0x1000}, {&(0x7f0000000300)="dd8fc4d7fe15bc8ca98a929e819243cdf6c4b6b9640f5c298b01e41b36d3934cc36ee390e3f37c1c18e8661aeb5fc7697558fa444a16038982f2f6ec24212580d84362f3770cbdc4", 0x48}], 0x7, &(0x7f0000000400)=[{0x28, 0x102, 0x7, "43acb4d7d8f46bc5e585bd6f826308b620b53a98"}, {0xa8, 0x88, 0x6, "5c802cb4f31e4c9950d150c0e6f4892553d9cf5c746e52380371b526c36690372429dccfc2f9ea455a373e5713b99e08cda2a0bd709d4af4863d6e3a86af97125c596349202c61a01131e754d61b93f00612062bc72da1d2b056a97fe49dfa20b63f8a6c2e4d67650e47af3ac59e9276487d47d54848de3c1808ed188f3f4ee4ce9c3521d8e52a38d5bf030c1de4ef3a1127fa00209b"}, {0x20, 0x88, 0x8, "1aec84ff0281fc7296a47273957b662c"}, {0x98, 0x84, 0x1000, "ec1080697b7ea23cac740dc14b6bbc4668938a14aafeb1a38ac0b80dfa8a14bec83a6e41b5b9a2d8054c05c8270789dfcce639f4d25a5fc7a70e12458b0d56edaae85b826b014536c1c4657bfa3bf40f8211348b7ff90a70c5071ccf4ba2bc7ead67f7d8d2b629d56ca42e1555c1067b6090dc4f2900dd4d8de72cee74d021fd1a21169075635e"}], 0x188}}, {{&(0x7f00000005c0)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f0000000640)=[{&(0x7f0000003700)="3889f846529d2e0a1a822b0209d451360c8150514e7799a30b8272566fbd39b18e97e0504524b78d1caec22fb9d317388ae01eeb9efe0d373a5dfaa8467742d3a944d8bd8ad33f28b90b752834f343fcf2eef0e9eb4690e0d1b7457ead6a6def28cab998da8c0972bf6cc348d5c51597dfb4366d650ecd4e58bd96d26baac9", 0x7f}, {&(0x7f0000003780)="2c850555cb0652b419b9478e334e98b722b616bd485bd8f0d4f887989dbb066ad8833115e0b10170c865a723358a9ff63908296fd6110347e2326bba8fbc09b091fec5760178fe58aca579e3b328fb94dc0966e578a425901e76d9f56bd66081381fb461c5c1a85a636cac9224", 0x6d}, {&(0x7f0000003800)="b45a56df6d9c851f46961899ecf3fbb705423c221b7b36e5010ac5ad90ad18885a49063991b7306e5cfa5e7e43a46e0ff2057712dd29da2fac4f2531b624f7e8cf1ea859dd5596ea5162ec2a71612c101e8c2624aea54a97b75ef266a4a374bb76c01260eed218bf1d7b53fb21e5cfa2459969cfe48a0087f7d0eadcb7d455371168d2a02a9be907ea0a1d1e0df3d4f7bd2485f44e1c3327", 0x98}], 0x3, &(0x7f00000038c0)=[{0x50, 0x110, 0x0, "bb4064dc14b96729a4825a5a9cc1d8c06c6cf2dc59f88919992e9c0e4bf7c69047dd18bc105c51c44fc8555d258f157f577a7ec5846f182f9c7e"}, {0x68, 0x10b, 0x2, "5e4904a46b35f51ef0c82f1fe6e6db4ac04fde41709f8888c2fe8147ffb57ab4c33353a137ab68a50a4800c7c81ff0208bccda5e526ef6f3f951be334f06b5df0c7a8ab5ac7d642a17c7b4a18990032485d0cb2271b9"}], 0xb8}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000004440)="b97904308a9cb219e3136cb8e60b4eb0b6cc9dfc57e386c09798c4372727a771d053e5dd2d6c01c95e416b095543c12750a5322d661ff393100273f00d73de678d248e456c3688578c892d474aab36a4de355698d4f2e35b23932b88792dd0a04336183a385e2cb704d04bf4c6b58c1007fd631b92734445e352b89124b2718ac365794264e734e9d700394fb4a16092d572e9a404fec2c2345d64d8150000000000", 0xa2}], 0x1, &(0x7f0000004500)=ANY=[@ANYBLOB="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"], 0x3a0}}, {{&(0x7f0000003e40)=@l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x4}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000003ec0)="34c2a368c543feb11041913c3c40e8717e1bb7f5e94a4be25ae2d233c6b795afb3cfd543a5aeac3807a86574c2edcb167cbd4742aa7d23abe0af", 0x3a}, {&(0x7f0000003f00)="922daf2308e2b6e3550cf6a8e2766ef6cf5873ab2b9c4d3329588424675e20189206c6f6c806944dd31fa6abde2a3d5edc95a8a30375accdd0f123bd7d2c95cc974ebb2d2cbc1de604bd0fe2f480791ad444a2f51f5e5ab3832827ea4eb0ce7d266cd70ecb28aba53649fccea2a07d2639f255df47", 0x75}, {&(0x7f0000003f80)="75f4f3c5aea804cc5a14e78ae72388ced99cfb82dcb5774244efa1f8743b5f5689", 0x21}], 0x3, &(0x7f0000004000)=[{0xc8, 0xff, 0x7, "13e786ad9cbbe9f479c44f046b9c0e7ce4cccaa69f0c99590d6f5d40d727793f16a5a8b8e56ae7720c46f5d044fd0c83696866ec5af0e97266f127f102441a1f73adc5fc0ea1bf916984845ceefcf22d1e14314b4640bd746fb1c4ad62566f066219cae86048ded0638833d281441d502ecae151822c7299ee737e8a70aa38edd638e9f5fda9ac756e203d3bd5b741f727f8b0553467aaa8034c570a190a6bcd2ef5799ffd78e259d61b1b7020ddc8e9d2"}, {0x48, 0x111, 0x7, "a20d39ed6e07eb544c6e7f76224a25cd0bc77cd81729b9e5630b4f8426857e487511df2447fec428866cc0eff7e9c3e704559ea7428582"}, {0x20, 0x119, 0x1, "8019352d2e9b0b5b9102"}, {0xa0, 0x10e, 0x1f, "4dccc33f04ea7c34f33a26913bf7eef83224a1ad295e70aa792d4b1f0b2c1f1314a3d36da9368127ced4ab21e882231812963ddd0a2187f222a0b8bf51bd3e5b4f1207a6bd7003258fffb305ffe42ec625bf326d6425fd4764da421df0b1070db9ecf312ebf06e0744e7851671c99361c3bdaed52e5bf0098c612ed72183cb50e07be03b25b6edeea58c"}], 0x1d0}}, {{&(0x7f0000004200)=@ll={0x11, 0x8, r4, 0x1, 0x3, 0x6, @local}, 0x80, &(0x7f0000004380)=[{&(0x7f00000043c0)="a2053be70611cec80ccabb317c0df1891555f7e3cff4f378c2940fd37557e587b6a848e26d6e9622a47de1e072b970ca17ede25e5f3367a3fad9ca5a9c7ada26ab9513ba93e807", 0x47}, {&(0x7f0000004300)="2bc89f6b88518823e8b215f0092a75c6875988cdf1c6436689253132fb3728c2e2ba0d4745adf02d0467eae6", 0x2c}, {&(0x7f0000004340)="6cc9e88b295ad4fbf589386db1845a4777ec93887f3d8912c814a742b042db660ff93712aad12dbae6763e0fa23032b227ba29cdf06f777e", 0x38}], 0x3, &(0x7f0000005140)=[{0xe8, 0x100, 0x0, "b71c5a21ea57d86067f083a8d56c97507722b281c97ce1cfcc229275db8e974afaca97b629bb4fda9fbe77963fb99787dec267dfc3ad5b1ee8b9bf6d55052731c6de4d1be00d32c783ee2bba6ee5c7d5f76d417bec30c5e78ac48331c6f7fc35f6d946c77ce48b2b74bbaa468d4782bd480d5124149109bbb6abb5e6c22a41afa3a19af4b5e836031b495f0203b5ccb5facd5895d09d106c5db0b74e04fb6ccaff174863ad6e5e83b14dc6d8fd307e30bc21462b01736f53b3cd0dca01e7eab310a1b3249eac0e868c0fb12be6be3e099df5"}, {0xf8, 0x131, 0x7, "af597163b439937f107752003bbd0f03f783a6046c716e219e6b5f57622109a421c183a5c0b86946901bcb975bbcdbef21e61a15c16231430935b194cfaaab23c6351ed994abd864fdbff0b2aa365f90edffbebd991833b8e069617e4e5c7ad1c7b95aff38974db6772b83abd66dd494b056c746aa1c253ace0174fb56a59663fa8cf67e3634125eb74d538608f4c2ad24244e4e229ff4557bac7437fc77a3381fad725bf824e2b79ef2b2829f5d378e285716a6451379287b4cd5fc9dd2937dd7aedf34697b737f81095e54146c3f467c6252fb73e1d6ac728864b872c98f0d6fe20675574aefaa"}, {0xf8, 0x105, 0x6fbc, "7c8583381930488bfd04468a1fce46b9854605feea6b06ac250ffda0639bd87bc0ed07de681943a24734342a7fdd2c2f54292ee5b10c488f26718e084ef0de2c8151d2b9769f925045135cd36a745d394ec4cc89723ba797be52667777fa40a3a40f76a7901d6d91ad9ea08f30f16fc1d35d86d0d8d8fd5f7cf046c9869b29cf570bc349e3a006f7582c6c11bdb7ca53f191d11e7997aed86f1245c9581911ab10a1f601481e1dbe1d7efdfec30dc5b8dfadec028b369fdc3a51933d962c1a667ae8decfb890cfba3d44c1efda05d100825ff05044433d18bfc443be39a3b89b416a7cb600379adc"}, {0x40, 0x112, 0x3, "2e30d07198c4e6ecfd658aff86d95579045c342f0996de21172b99b12a3d0d1aec2244fd171d447eba01fcbf89"}, {0x70, 0x107, 0x4, "9a14b3e7d08695be81b2cffd01b3695a936d8051b062b178f16b389a895f6fa4baa487dd4cebf6303b13e1f652c06d2dd38015945da209133f90dc576c89dc02e82bd95bf7cdda9ee126e507fa79037f6eacd7da2c33d323b587c9a8"}, {0xd8, 0x3a, 0x5381, "e5283bfa07039db1ca6e47539315e8278ee13e5de1e67a1286267f1afc97fbc783b3484159fb354863a3edc4e9100d60e7b4f2557c4f0b7ebcbc5d25f871bf174d81da931aad020aee3ccec4681df113627b8ffea44fee9a88368521f63a5061644c9be9d47cb950393d6fd8cbf9f8b8d03c082c5d890d4820f6f9ac9a0feacaa368cde9adcefdcf898692d50df5ab0c9ea5e35a4eac6cd6d0a741d303b1677e2734d1b81c5c3349f4e7514bf9153f8a1024126ef3b0d7f6c07cc592385dea7ad0f00c53ef7c139d"}, {0xf8, 0x104, 0x1ff, "56f02bb3f6401b461e8e9678a90ca0f786e049724ba8a2b15321a3df10510ea79e137d0f0f73b3a7f3c12a93f0e3ec6e22b2c8cfa024bfccb70611577af270ca217892a500bb4c73d5e5e7a29e2d748ea3f5434d7dfa83b868c0638439bf5ae000ac62adc05de39168f987b5f1042283021bf09aaead2b1ef856f790f0267f390f0af4cb9189669d1b74e03af702818757d0bbff584001d913880c6edafcfa7358e6c183a9534e1be86cf0fa00ee59c74adc870c0c2dbcb28b47fcec55d907a924fe623b65b5a1f84ff5d47bc52e749e98936d5cb1d579415563a1b7c36b72e978e0"}], 0x558}}, {{&(0x7f0000004940)=@l2={0x1f, 0x0, @none, 0x8, 0x1}, 0x80, &(0x7f0000004ec0)=[{&(0x7f00000050c0)="a4f48cc7206c763c26d5aa2db0b6caa43250e0ceac90947e5321f5fc5a1b2e3770d4d473dd120578013280fe60c0d5641fe52c632d79425b12dc5650aced0fb6fcf21af24ecdb2def8f4f8a83a5e5d55871475c3f90ab751918b201ca874c85e574ae6498b34385e5f6f593a87ed90b7b41e", 0x72}, {&(0x7f0000004a40)="bedf9f18a73d362e4b1009016a1edcb82b21863cadbcbf3ad8dcfab3049b6e1c3560636dd1e34226d75afd700e4f8f22223d546f8e2f25279617382bf6cdd7aef243d617555a43c86a53b5234b5f4a6e2f6d21572609507834790a164009", 0x5e}, {&(0x7f0000004ac0)="2d18ed862df59237f76f7ca5c406035e5446653131d92ff1706be6861c613393741c786561a276c77abd8feb202f82182ba77230e01dc5c83136684f002a6c04c7c5e893ab7bd4f189cd5599ce08027d49b1da86", 0x54}, {&(0x7f0000004b40)="ab66274cb05ee498ef80f828d829407a26520ec10a5ffc543acd32d8267a004ee184ea56a1cf8a516eaf09ce24a8efe855a57be41d8d1fd099013d31dafe6cc44b261b80fb2af69a9adbd771dd7e68ad3b948478dfb170344a2c0151e076de5bee17c71012c298ce29f643ffcf52bc7a864cb2df9ba6399c90c30358b11f603da990c3bdd492884f7d023e01d13bef820b278031b3acbfdcd07645f107ef08f0f4894c0b1adb4f71ed687d2b4cf29bd9dfd2957ef67b013978db84e9a985863693100af888149e02fed1ac2c27b5da2c7d0c59d8d6801c508c5abff9ff716dd032790505", 0xe4}, {&(0x7f0000004c40)="098ac24fa6d46c46d267c1802c3ccac659e1a25f5856ef5d504d33df31f75092747466c1927a78ed828498f48cdea6e92d57ded910aa58f70e9da653644d25aa3e4edd00436c65b05c765428dee368eff7c8abd5de795158a5b2f9d7cbc5eb39af6518555e27d75887f38297ef546f07099f12dc0af2", 0x76}, {&(0x7f0000004cc0)="839fb46aa542dfea77a63fdea73122cb6ba414ba2b0510658007ee38f8778d1bd8dcd3c7545f9f4353", 0x29}, {&(0x7f0000004d00)="79cdc8d50508e80da41d1ebc87db62ad5a0bc3dc13c2db9eb1050a7dbc708eec2f3e1e5401fe8ab629f6947a9374a52ae70b2d73b6d98699196498369adb4956ccebab5e90918018471837c14052413a5c4cdc7143b53850a6ae2f0f9363711453433ad823e79c5164d646a576ab1a76af24e57a4c71d7c13673c01a86fa90e5864c819448bdb085f5fd54f0c8bb", 0x8e}, {&(0x7f0000004dc0)="53a7dff3f07e7aa840d97ca273563e714dcebf885a353f857ca8c369f64f3123892b798dadbd78df0dd4f4be8d94698af4254a2f804f709aceeeb6f816f3dcc911bb04ee1bcf474e3907f78a983bb4333357057c9161bec9a2971ab8aa7e6659a87f044f55fab589b5567f158ad613e1e75fe2c053c1f054742f394591132f8de59213fb2188e3389bb8b8985f4d402bc3b9fe71983bba50223a55aabdc16f630d990c6bc80e9d79c2c5be71d673747da486b3c068b8213f530129fa9d33fa752c2855", 0xc3}], 0x8}}], 0x6, 0x0) 23:16:21 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 462.672873] ip_tables: iptables: counters copy to user failed while replacing table 23:16:21 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000100)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32, @ANYBLOB="1f00000000421800280012800a00010076786c616e00000018000280140010"], 0x3}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000040)='ip6erspan0\x00') write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 23:16:21 executing program 0 (fault-call:6 fault-nth:0): r0 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000a40)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:16:21 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0xa, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r1}, &(0x7f0000000100)=""/98, 0x62, 0x0) keyctl$search(0xa, r1, &(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="06e56d86959311dc523fa457cb7469401c0aec3c9e2502e0fd300db2fbea9c69a086d904b07f8239a2892846c6600e6bec0abf5e90942f0d80df97", 0x3b}, {&(0x7f0000000080)="2cacc83e022e5ed661f372c98df090272cae1f3a28e3aa746398f208e3467014c684b722b0352dec261cadc12edba8b41ebf7296beb49ed37b0833d66d47133f62b025176a13a6256bfd52d15540a4", 0x4f}, {&(0x7f0000000140)="40850fc3db259d6e032ad424ca4975c099eab841e7d5dfc3985da1fcde9f2f4c4982e4a90313d00f6d03c0eeaf27036d36da7b8d312f94a644151d0b1eeaac6cc0fc9687", 0x44}, {&(0x7f00000001c0)="4fedc8b409d22ca11b33dbeaca4ee10f7b2b8c374adc47e91174f78392a316f014ebf26d6bacbe54f3448a84bd932b08b955ca441cab4476b94dc2ea5ca165da5f1559372ef006299c73731068cdffe4cb83954ac55c7951f511208a28", 0x5d}, {&(0x7f0000000240)="0beef9093ed09c73ef534cec80b152858381b018dce51f7fb9915b51fe50e6ba9a8f2a82254fdd675771d838997be62fb3bb2c5d8d", 0x35}], 0x5, r1) 23:16:21 executing program 4 (fault-call:9 fault-nth:0): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x4, 0x330, 0x1c0, 0xd8, 0xd8, 0x0, 0x0, 0x288, 0x298, 0x298, 0x298, 0x288, 0x4, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {}, 0x1}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "bd38"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'vxcan1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000840)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xd) splice(r0, 0x0, r3, 0x0, 0x19404, 0x0) [ 463.045368] FAULT_INJECTION: forcing a failure. [ 463.045368] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 463.047612] kasan: CONFIG_KASAN_INLINE enabled [ 463.073275] FAULT_INJECTION: forcing a failure. [ 463.073275] name failslab, interval 1, probability 0, space 0, times 0 23:16:21 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="91990600000000002c0012800b0001006970766c616e00001c0002800600010003000000060001000000000006000100020000000a000500040000000000000008000a004a"], 0x60}}, 0x0) r0 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) [ 463.095045] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 463.108294] CPU: 1 PID: 30766 Comm: syz-executor.4 Not tainted 4.14.195-syzkaller #0 [ 463.116202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 463.125551] Call Trace: [ 463.128146] dump_stack+0x1b2/0x283 [ 463.131777] should_fail.cold+0x10a/0x154 [ 463.135922] should_failslab+0xd6/0x130 [ 463.139893] kmem_cache_alloc+0x40/0x3c0 [ 463.143959] dst_alloc+0xed/0x6d0 [ 463.147471] rt_dst_alloc+0x6b/0x430 [ 463.151223] ip_route_output_key_hash_rcu+0xab7/0x2990 [ 463.156532] ip_route_output_key_hash+0x195/0x2a0 [ 463.161372] ? ip_route_output_key_hash_rcu+0x2990/0x2990 [ 463.166910] ? _copy_from_iter_full+0x1c7/0x690 [ 463.171582] ip_route_output_flow+0x22/0xb0 [ 463.175964] raw_sendmsg+0x7ae/0x2210 [ 463.179774] ? raw_ioctl+0x190/0x190 [ 463.183484] ? perf_trace_lock_acquire+0x510/0x510 [ 463.188462] ? ima_match_policy+0x85a/0x10e0 [ 463.192927] inet_sendmsg+0x11a/0x4e0 [ 463.196730] ? security_socket_sendmsg+0x83/0xb0 [ 463.201479] ? inet_recvmsg+0x4d0/0x4d0 [ 463.205447] sock_sendmsg+0xb5/0x100 [ 463.209162] sock_no_sendpage+0xe2/0x110 [ 463.213215] ? __sk_mem_schedule+0xd0/0xd0 [ 463.217461] inet_sendpage+0x3c1/0x590 [ 463.221347] ? inet_getname+0x3a0/0x3a0 [ 463.225314] sock_sendpage+0xdf/0x140 [ 463.229142] pipe_to_sendpage+0x226/0x2d0 [ 463.233287] ? sockfs_setattr+0x140/0x140 [ 463.237432] ? direct_splice_actor+0x160/0x160 [ 463.242155] __splice_from_pipe+0x326/0x7a0 [ 463.246514] ? direct_splice_actor+0x160/0x160 [ 463.251098] generic_splice_sendpage+0xc1/0x110 [ 463.255756] ? vmsplice_to_user+0x1b0/0x1b0 [ 463.260080] ? rw_verify_area+0xe1/0x2a0 [ 463.264138] ? vmsplice_to_user+0x1b0/0x1b0 [ 463.268456] SyS_splice+0xd59/0x1380 [ 463.272167] ? SyS_write+0x14d/0x210 [ 463.276046] ? compat_SyS_vmsplice+0x150/0x150 [ 463.280621] ? SyS_clock_settime+0x1a0/0x1a0 [ 463.285020] ? do_syscall_64+0x4c/0x640 [ 463.288986] ? compat_SyS_vmsplice+0x150/0x150 [ 463.293567] do_syscall_64+0x1d5/0x640 [ 463.297576] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 463.302757] RIP: 0033:0x45d5b9 [ 463.305936] RSP: 002b:00007f7422875c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 463.313635] RAX: ffffffffffffffda RBX: 0000000000033980 RCX: 000000000045d5b9 [ 463.320896] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003 [ 463.328170] RBP: 00007f7422875ca0 R08: 0000000000019404 R09: 0000000000000000 [ 463.335437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.342719] R13: 00007ffc6b622cbf R14: 00007f74228769c0 R15: 000000000118cf4c [ 463.352220] CPU: 0 PID: 30760 Comm: syz-executor.0 Not tainted 4.14.195-syzkaller #0 [ 463.360131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 463.369469] Call Trace: [ 463.372043] dump_stack+0x1b2/0x283 [ 463.375657] should_fail.cold+0x10a/0x154 [ 463.379790] __alloc_pages_nodemask+0x22c/0x2720 [ 463.384529] ? perf_trace_lock+0xf7/0x490 [ 463.388658] ? perf_trace_lock_acquire+0x510/0x510 [ 463.393566] ? _copy_from_user+0x96/0x100 [ 463.397696] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 463.402533] ? get_pid_task+0x91/0x130 [ 463.406404] ? __lock_acquire+0x5fc/0x3f20 [ 463.410630] ? proc_fail_nth_write+0x7b/0x180 [ 463.415127] alloc_pages_vma+0xd2/0x6d0 [ 463.419089] __handle_mm_fault+0x25fa/0x4620 [ 463.423482] ? vm_insert_page+0x7c0/0x7c0 [ 463.427609] ? lock_downgrade+0x740/0x740 [ 463.431740] ? vfs_write+0x35d/0x4d0 [ 463.435447] handle_mm_fault+0x306/0x7a0 [ 463.439489] __do_page_fault+0x578/0xb50 [ 463.443531] ? spurious_fault+0x640/0x640 [ 463.447659] ? do_page_fault+0x60/0x4f2 [ 463.451613] ? page_fault+0x2f/0x50 [ 463.455219] page_fault+0x45/0x50 [ 463.458662] RIP: 0000:0x1 [ 463.461396] RSP: 118cf40:00007feb2bfc2ca0 EFLAGS: 00000000 [ 463.470019] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 463.481873] Modules linked in: [ 463.485063] CPU: 1 PID: 30765 Comm: syz-executor.1 Not tainted 4.14.195-syzkaller #0 [ 463.492931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 463.502277] task: ffff88804bf1a240 task.stack: ffff888017368000 [ 463.508415] RIP: 0010:__vxlan_dev_create+0x5d6/0x970 [ 463.513507] RSP: 0018:ffff88801736f178 EFLAGS: 00010a02 [ 463.518860] RAX: dffffc0000000000 RBX: 1ffff11002e6de31 RCX: ffffc90008372000 [ 463.526124] RDX: 1bd5a00000000040 RSI: ffffffff83e97c74 RDI: ffff88808bb95288 [ 463.533392] RBP: 0000000000000000 R08: ffffffff8a09f530 R09: 0000000000000000 [ 463.540660] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000fffffff0 [ 463.547928] R13: ffff88808bb95280 R14: dead000000000200 R15: ffff88804ece5200 [ 463.555197] FS: 00007f6cea492700(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 [ 463.563423] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 463.569299] CR2: 00007f6a37a29008 CR3: 0000000084889000 CR4: 00000000001426e0 [ 463.576569] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 463.583836] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 463.591620] Call Trace: [ 463.594221] ? vxlan_fdb_add+0x2e0/0x2e0 [ 463.598277] ? vxlan_setup+0x460/0x460 [ 463.602170] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 463.607185] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 463.612465] vxlan_newlink+0xa3/0xe0 [ 463.614640] syz-executor.0 invoked oom-killer: gfp_mask=0x0(), nodemask= [ 463.616174] ? __vxlan_dev_create+0x970/0x970 [ 463.616195] ? rtnl_create_link+0x129/0x890 [ 463.630419] (null) [ 463.631829] rtnl_newlink+0xf88/0x1830 [ 463.631850] ? __lock_acquire+0x5fc/0x3f20 [ 463.638401] , order=0, oom_score_adj=1000 [ 463.642066] ? __vxlan_dev_create+0x970/0x970 [ 463.642076] ? rtnl_dellink+0x6a0/0x6a0 [ 463.642088] ? trace_hardirqs_on+0x10/0x10 [ 463.656228] syz-executor.0 cpuset= [ 463.658973] ? lock_acquire+0x170/0x3f0 [ 463.659006] ? lock_acquire+0x170/0x3f0 [ 463.667242] / [ 463.670427] ? lock_downgrade+0x740/0x740 [ 463.673795] mems_allowed=0-1 [ 463.676266] ? rtnl_dellink+0x6a0/0x6a0 [ 463.676277] rtnetlink_rcv_msg+0x3be/0xb10 [ 463.676290] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 463.676302] ? perf_trace_lock+0xf7/0x490 [ 463.681628] CPU: 0 PID: 30760 Comm: syz-executor.0 Not tainted 4.14.195-syzkaller #0 [ 463.683344] netlink_rcv_skb+0x125/0x390 [ 463.687549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 463.692022] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 463.696132] Call Trace: [ 463.703990] ? netlink_ack+0x9a0/0x9a0 [ 463.708025] dump_stack+0x1b2/0x283 [ 463.717357] netlink_unicast+0x437/0x610 [ 463.721822] dump_header+0x178/0x82f [ 463.724379] ? netlink_sendskb+0xd0/0xd0 [ 463.728239] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 463.731837] netlink_sendmsg+0x62e/0xb80 [ 463.735869] ? ___ratelimit+0x2cd/0x522 [ 463.739555] ? nlmsg_notify+0x170/0x170 [ 463.743588] oom_kill_process.cold+0x10/0xa69 [ 463.748665] ? security_socket_sendmsg+0x83/0xb0 [ 463.752702] ? lock_downgrade+0x740/0x740 [ 463.756646] ? nlmsg_notify+0x170/0x170 [ 463.760595] out_of_memory+0x2dc/0x1190 [ 463.765062] sock_sendmsg+0xb5/0x100 [ 463.769789] ? pagefault_out_of_memory+0xaa/0xc9 [ 463.773911] sock_no_sendpage+0xe2/0x110 [ 463.777857] ? oom_killer_disable+0x1c0/0x1c0 [ 463.781815] ? __sk_mem_schedule+0xd0/0xd0 [ 463.785502] ? mutex_trylock+0x152/0x1a0 [ 463.790235] ? __sk_mem_schedule+0xd0/0xd0 [ 463.794261] ? pagefault_out_of_memory+0xaa/0xc9 [ 463.798728] sock_sendpage+0xdf/0x140 [ 463.802935] pagefault_out_of_memory+0xbb/0xc9 [ 463.806992] pipe_to_sendpage+0x226/0x2d0 [ 463.811201] ? out_of_memory+0x1190/0x1190 [ 463.815927] ? sockfs_setattr+0x140/0x140 [ 463.819704] ? lock_downgrade+0x740/0x740 [ 463.824258] ? direct_splice_actor+0x160/0x160 [ 463.828377] mm_fault_error+0xad/0x2c0 [ 463.832584] __splice_from_pipe+0x326/0x7a0 [ 463.836711] __do_page_fault+0x9d1/0xb50 [ 463.840843] ? direct_splice_actor+0x160/0x160 [ 463.845399] ? spurious_fault+0x640/0x640 [ 463.849262] generic_splice_sendpage+0xc1/0x110 [ 463.853553] ? do_page_fault+0x60/0x4f2 [ 463.857588] ? vmsplice_to_user+0x1b0/0x1b0 [ 463.862143] ? page_fault+0x2f/0x50 [ 463.866278] ? rw_verify_area+0xe1/0x2a0 [ 463.870916] page_fault+0x45/0x50 [ 463.874870] ? vmsplice_to_user+0x1b0/0x1b0 [ 463.879160] RIP: 0000:0x1 [ 463.882760] SyS_splice+0xd59/0x1380 [ 463.886791] RSP: 118cf40:00007feb2bfc2ca0 EFLAGS: 00000000 [ 463.890227] ? compat_SyS_vmsplice+0x150/0x150 [ 463.911121] ? SyS_clock_settime+0x1a0/0x1a0 [ 463.915532] ? do_syscall_64+0x4c/0x640 [ 463.919590] ? compat_SyS_vmsplice+0x150/0x150 [ 463.924172] do_syscall_64+0x1d5/0x640 [ 463.928073] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 463.933257] RIP: 0033:0x45d5b9 [ 463.936438] RSP: 002b:00007f6cea491c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 463.944141] RAX: ffffffffffffffda RBX: 0000000000033980 RCX: 000000000045d5b9 [ 463.951402] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 463.958666] RBP: 000000000118d038 R08: 000000000004ffe2 R09: 0000000000000000 [ 463.965932] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cfec [ 463.973204] R13: 00007ffda5ac33af R14: 00007f6cea4929c0 R15: 000000000118cfec [ 463.980514] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 09 03 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 75 08 4c 89 f2 48 c1 ea 03 <80> 3c 02 00 0f 85 dd 02 00 00 49 89 2e 4d 8d 7d 10 48 85 ed 0f 23:16:22 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1000000, 0x7, 0x40}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) r3 = creat(&(0x7f0000000380)='./file1\x00', 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x9}, 0x8) write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) write(r2, &(0x7f0000000100), 0x2c9f9de1) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0xa8aeff620f290a70, 0x0, 0x3, 0x0, 0x3fc, 0xfffffffffffffffd, 0x0, 0x4}, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) openat$cgroup(r1, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) fcntl$setpipe(r1, 0x407, 0x0) r5 = memfd_create(&(0x7f00000003c0)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xfbmZ\x84~\x9e\xf6\xb7\xc0\x8ac\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vn\xe0\x8d\x8a\xf2g\xeb\xa2q\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xab\xecoB\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4{\xdd~\xe5\xbf\xc0]l\xf7\x00'/151, 0x0) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="2b6d65576f7279202b70696473202d696f202b63707279202b7069647320006d656d6f227920f0c788a22c08bc03b92a48914612bf"], 0x2d) pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000007c0)="cdfdfdae56b8", 0x6}], 0x1, 0x48180a, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000003) [ 463.999728] RIP: __vxlan_dev_create+0x5d6/0x970 RSP: ffff88801736f178 [ 464.230514] Mem-Info: [ 464.239373] active_anon:167664 inactive_anon:28599 isolated_anon:0 [ 464.239373] active_file:33175 inactive_file:93588 isolated_file:0 [ 464.239373] unevictable:5632 dirty:532 writeback:0 unstable:0 [ 464.239373] slab_reclaimable:18695 slab_unreclaimable:127445 [ 464.239373] mapped:61649 shmem:4322 pagetables:3169 bounce:0 [ 464.239373] free:947431 free_pcp:487 free_cma:0 [ 464.414092] ---[ end trace 92831493981b743a ]--- [ 464.486092] Node 0 active_anon:690740kB inactive_anon:96372kB active_file:132564kB inactive_file:374084kB unevictable:22528kB isolated(anon):0kB isolated(file):0kB mapped:246696kB dirty:2424kB writeback:0kB shmem:20888kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 346112kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 464.508155] Kernel panic - not syncing: Fatal exception [ 464.522430] Kernel Offset: disabled [ 464.526050] Rebooting in 86400 seconds..