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"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 330.429208][T12855] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:02 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x8922, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:02 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x165842, 0x0) 01:36:02 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) [ 331.195119][T12874] ip6_vti0: mtu greater than device maximum 01:36:03 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:03 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/1061], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:03 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x165842, 0x0) 01:36:03 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x8923, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:03 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) 01:36:03 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 332.349847][T12915] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:04 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060040000d0020000d00200000000000000000000d0020000c8030000c8030000c7fc0000c8030000c8030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008802d00200000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036970365f7674693000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000022000000feffffff0000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000900736d000000000000000000010000000000000021390eb8a10d61905c915cd228ca97b5ce382683c91019c72674282bfdd8705b2bec82c7e6a47fe2fa5de4d4cffd0a70df1168448dd67391da71a4d40daaf91ee10181a6e2cc70723760440ff801aab7fdb67e5c1a436e18b54efa66ad91f24342af8e7ae060ed1b7e8abb92cc6d113df52f3c0fd51ae5f7d2fe47330100000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001627071300000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e64000000658181e193800057000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000fcff0000000000000000000000000000000000000030006463637000000000000000000000e600000000000000000000000000000000000000000000000000000000000000300053455400000000000000000000000000000000000000000000000000000200"/1061], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:04 executing program 1: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x165842, 0x0) 01:36:04 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x165842, 0x0) 01:36:04 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x8924, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:04 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) 01:36:05 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:05 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/1061], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:05 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x165842, 0x0) 01:36:05 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) [ 333.945798][T12957] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 333.996699][T12961] FAULT_INJECTION: forcing a failure. [ 333.996699][T12961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.009919][T12961] CPU: 1 PID: 12961 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 334.018334][T12961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 334.028410][T12961] Call Trace: [ 334.031745][T12961] [ 334.034709][T12961] dump_stack_lvl+0xda/0x130 [ 334.039400][T12961] dump_stack+0x15/0x20 01:36:05 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x8927, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 334.043740][T12961] should_fail_ex+0x21f/0x230 [ 334.048518][T12961] should_fail+0xb/0x10 [ 334.052755][T12961] should_fail_usercopy+0x1a/0x20 [ 334.057890][T12961] _copy_from_user+0x1e/0xd0 [ 334.062497][T12961] copy_msghdr_from_user+0x54/0x2a0 [ 334.067815][T12961] __sys_sendmmsg+0x224/0x500 [ 334.072562][T12961] __x64_sys_sendmmsg+0x57/0x60 [ 334.077502][T12961] do_syscall_64+0x41/0xc0 [ 334.081943][T12961] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 334.087993][T12961] RIP: 0033:0x7fd6b246b169 [ 334.092428][T12961] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 334.112070][T12961] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 334.120509][T12961] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 334.128535][T12961] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 334.136510][T12961] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 334.144505][T12961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.152528][T12961] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 334.160522][T12961] 01:36:06 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) 01:36:06 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/1137], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:06 executing program 4: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x8924, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:06 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:06 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x8929, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 335.024899][T12984] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:07 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/1137], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:07 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:07 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (fail_nth: 1) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 336.059861][T13006] FAULT_INJECTION: forcing a failure. [ 336.059861][T13006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.073735][T13006] CPU: 0 PID: 13006 Comm: syz-executor.3 Not tainted 6.3.0-syzkaller #0 [ 336.082155][T13006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 336.092728][T13006] Call Trace: [ 336.096103][T13006] [ 336.099047][T13006] dump_stack_lvl+0xda/0x130 [ 336.103692][T13006] dump_stack+0x15/0x20 01:36:07 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) [ 336.107938][T13006] should_fail_ex+0x21f/0x230 [ 336.112644][T13006] should_fail+0xb/0x10 [ 336.116813][T13006] should_fail_usercopy+0x1a/0x20 [ 336.121958][T13006] _copy_from_user+0x1e/0xd0 [ 336.126623][T13006] move_addr_to_kernel+0x82/0x110 [ 336.131691][T13006] __sys_connect+0x74/0x1b0 [ 336.132436][T13009] FAULT_INJECTION: forcing a failure. [ 336.132436][T13009] name failslab, interval 1, probability 0, space 0, times 0 [ 336.136224][T13006] __x64_sys_connect+0x41/0x50 [ 336.153618][T13006] do_syscall_64+0x41/0xc0 [ 336.158050][T13006] ? irqentry_exit+0x12/0x40 [ 336.162759][T13006] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 336.168715][T13006] RIP: 0033:0x7fd55b7ce169 [ 336.173193][T13006] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 336.192917][T13006] RSP: 002b:00007fd55ab20168 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 336.201412][T13006] RAX: ffffffffffffffda RBX: 00007fd55b8ee050 RCX: 00007fd55b7ce169 [ 336.209389][T13006] RDX: 000000000000001c RSI: 0000000020000180 RDI: 0000000000000003 [ 336.217406][T13006] RBP: 00007fd55ab201d0 R08: 0000000000000000 R09: 0000000000000000 [ 336.225380][T13006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.233538][T13006] R13: 00007ffdfdb991bf R14: 00007fd55ab20300 R15: 0000000000022000 [ 336.241520][T13006] [ 336.244542][T13009] CPU: 1 PID: 13009 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 336.253004][T13009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 336.263127][T13009] Call Trace: [ 336.266430][T13009] [ 336.269369][T13009] dump_stack_lvl+0xda/0x130 [ 336.273974][T13009] dump_stack+0x15/0x20 [ 336.278147][T13009] should_fail_ex+0x21f/0x230 [ 336.282893][T13009] __should_failslab+0x92/0xa0 [ 336.287746][T13009] should_failslab+0x9/0x20 [ 336.292389][T13009] slab_pre_alloc_hook+0x38/0x180 [ 336.297425][T13009] kmem_cache_alloc_node+0x5d/0x2e0 [ 336.302633][T13009] ? __alloc_skb+0x109/0x2e0 [ 336.307353][T13009] __alloc_skb+0x109/0x2e0 [ 336.311802][T13009] alloc_skb_with_frags+0x80/0x3e0 [ 336.316961][T13009] ? handle_mm_fault+0x193d/0x21d0 [ 336.322093][T13009] ? __rcu_read_unlock+0x4d/0x70 [ 336.327086][T13009] sock_alloc_send_pskb+0x434/0x4e0 [ 336.332317][T13009] unix_dgram_sendmsg+0x3dd/0x1110 [ 336.337472][T13009] ? unix_dgram_poll+0x3e0/0x3e0 [ 336.342427][T13009] ____sys_sendmsg+0x375/0x4c0 [ 336.347254][T13009] __sys_sendmmsg+0x263/0x500 [ 336.352040][T13009] __x64_sys_sendmmsg+0x57/0x60 [ 336.356936][T13009] do_syscall_64+0x41/0xc0 01:36:08 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x8930, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:08 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (fail_nth: 1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:08 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (fail_nth: 2) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 336.361377][T13009] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 336.367297][T13009] RIP: 0033:0x7fd6b246b169 [ 336.371740][T13009] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 336.391374][T13009] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 336.399819][T13009] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 336.407821][T13009] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 336.415895][T13009] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 336.423924][T13009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.431965][T13009] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 336.439958][T13009] [ 336.820852][T13021] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 336.842168][T13023] FAULT_INJECTION: forcing a failure. [ 336.842168][T13023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.855301][T13023] CPU: 1 PID: 13023 Comm: syz-executor.4 Not tainted 6.3.0-syzkaller #0 [ 336.863637][T13023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 336.873776][T13023] Call Trace: [ 336.877129][T13023] [ 336.880069][T13023] dump_stack_lvl+0xda/0x130 [ 336.884730][T13023] dump_stack+0x15/0x20 [ 336.888900][T13023] should_fail_ex+0x21f/0x230 [ 336.893598][T13023] should_fail+0xb/0x10 [ 336.897811][T13023] should_fail_usercopy+0x1a/0x20 [ 336.902848][T13023] _copy_from_user+0x1e/0xd0 [ 336.907451][T13023] move_addr_to_kernel+0x82/0x110 [ 336.912501][T13023] __sys_connect+0x74/0x1b0 [ 336.917024][T13023] __x64_sys_connect+0x41/0x50 [ 336.921813][T13023] do_syscall_64+0x41/0xc0 [ 336.926334][T13023] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 336.932302][T13023] RIP: 0033:0x7f3dad10a169 [ 336.936777][T13023] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 336.956541][T13023] RSP: 002b:00007f3dac45c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 336.964972][T13023] RAX: ffffffffffffffda RBX: 00007f3dad22a050 RCX: 00007f3dad10a169 [ 336.972946][T13023] RDX: 000000000000001c RSI: 0000000020000180 RDI: 0000000000000003 [ 336.980980][T13023] RBP: 00007f3dac45c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 336.988965][T13023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.996957][T13023] R13: 00007fffdb07e60f R14: 00007f3dac45c300 R15: 0000000000022000 [ 337.004949][T13023] [ 337.299652][T13022] FAULT_INJECTION: forcing a failure. [ 337.299652][T13022] name failslab, interval 1, probability 0, space 0, times 0 [ 337.312603][T13022] CPU: 1 PID: 13022 Comm: syz-executor.3 Not tainted 6.3.0-syzkaller #0 [ 337.320986][T13022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 337.331052][T13022] Call Trace: [ 337.334349][T13022] [ 337.337295][T13022] dump_stack_lvl+0xda/0x130 [ 337.341995][T13022] dump_stack+0x15/0x20 [ 337.346162][T13022] should_fail_ex+0x21f/0x230 [ 337.350869][T13022] __should_failslab+0x92/0xa0 [ 337.355656][T13022] should_failslab+0x9/0x20 [ 337.360170][T13022] slab_pre_alloc_hook+0x38/0x180 [ 337.365200][T13022] kmem_cache_alloc+0x58/0x260 [ 337.370098][T13022] ? __inet_hash_connect+0x5a3/0xf60 [ 337.375399][T13022] __inet_hash_connect+0x5a3/0xf60 [ 337.380540][T13022] ? inet6_hash_connect+0x80/0x80 [ 337.385596][T13022] inet6_hash_connect+0x72/0x80 [ 337.390462][T13022] tcp_v6_connect+0x991/0xc50 [ 337.395163][T13022] __inet_stream_connect+0x15d/0x6e0 [ 337.400482][T13022] ? release_sock+0x108/0x110 [ 337.405167][T13022] ? _raw_spin_unlock_bh+0x36/0x40 [ 337.410420][T13022] ? lock_sock_nested+0x10e/0x130 [ 337.415460][T13022] ? selinux_netlbl_socket_connect+0xea/0x100 [ 337.421615][T13022] inet_stream_connect+0x48/0x70 [ 337.426571][T13022] ? __inet_stream_connect+0x6e0/0x6e0 [ 337.432058][T13022] __sys_connect+0x19b/0x1b0 [ 337.436683][T13022] __x64_sys_connect+0x41/0x50 [ 337.441549][T13022] do_syscall_64+0x41/0xc0 [ 337.446074][T13022] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 337.452003][T13022] RIP: 0033:0x7fd55b7ce169 [ 337.456435][T13022] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 337.476126][T13022] RSP: 002b:00007fd55ab20168 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 337.484660][T13022] RAX: ffffffffffffffda RBX: 00007fd55b8ee050 RCX: 00007fd55b7ce169 [ 337.492661][T13022] RDX: 000000000000001c RSI: 0000000020000180 RDI: 0000000000000003 01:36:09 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (fail_nth: 2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:09 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x8931, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:09 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/1137], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:09 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (fail_nth: 3) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:09 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) [ 337.500707][T13022] RBP: 00007fd55ab201d0 R08: 0000000000000000 R09: 0000000000000000 [ 337.508752][T13022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.516731][T13022] R13: 00007ffdfdb991bf R14: 00007fd55ab20300 R15: 0000000000022000 [ 337.524780][T13022] 01:36:09 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 337.619957][T13049] FAULT_INJECTION: forcing a failure. [ 337.619957][T13049] name failslab, interval 1, probability 0, space 0, times 0 [ 337.632613][T13049] CPU: 0 PID: 13049 Comm: syz-executor.4 Not tainted 6.3.0-syzkaller #0 [ 337.635802][T13040] FAULT_INJECTION: forcing a failure. [ 337.635802][T13040] name failslab, interval 1, probability 0, space 0, times 0 [ 337.640949][T13049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 337.640966][T13049] Call Trace: [ 337.640973][T13049] [ 337.640994][T13049] dump_stack_lvl+0xda/0x130 [ 337.641020][T13049] dump_stack+0x15/0x20 [ 337.641043][T13049] should_fail_ex+0x21f/0x230 [ 337.641073][T13049] __should_failslab+0x92/0xa0 [ 337.641098][T13049] should_failslab+0x9/0x20 [ 337.692742][T13049] slab_pre_alloc_hook+0x38/0x180 [ 337.697793][T13049] kmem_cache_alloc+0x58/0x260 [ 337.702630][T13049] ? __inet_hash_connect+0x5a3/0xf60 [ 337.707938][T13049] __inet_hash_connect+0x5a3/0xf60 [ 337.713117][T13049] ? inet6_hash_connect+0x80/0x80 [ 337.718243][T13049] inet6_hash_connect+0x72/0x80 [ 337.723200][T13049] tcp_v6_connect+0x991/0xc50 [ 337.727909][T13049] ? avc_has_perm+0xdc/0x160 [ 337.732588][T13049] __inet_stream_connect+0x15d/0x6e0 [ 337.737997][T13049] ? release_sock+0x108/0x110 [ 337.743042][T13049] ? _raw_spin_unlock_bh+0x36/0x40 [ 337.748353][T13049] ? lock_sock_nested+0x10e/0x130 [ 337.753407][T13049] ? selinux_netlbl_socket_connect+0xea/0x100 [ 337.760074][T13049] inet_stream_connect+0x48/0x70 [ 337.765115][T13049] ? __inet_stream_connect+0x6e0/0x6e0 [ 337.770649][T13049] __sys_connect+0x19b/0x1b0 [ 337.775374][T13049] __x64_sys_connect+0x41/0x50 [ 337.780176][T13049] do_syscall_64+0x41/0xc0 [ 337.784652][T13049] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 337.790721][T13049] RIP: 0033:0x7f3dad10a169 [ 337.795157][T13049] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 337.814805][T13049] RSP: 002b:00007f3dac45c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 337.823257][T13049] RAX: ffffffffffffffda RBX: 00007f3dad22a050 RCX: 00007f3dad10a169 [ 337.831322][T13049] RDX: 000000000000001c RSI: 0000000020000180 RDI: 0000000000000003 [ 337.839315][T13049] RBP: 00007f3dac45c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 337.847303][T13049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.855291][T13049] R13: 00007fffdb07e60f R14: 00007f3dac45c300 R15: 0000000000022000 [ 337.863301][T13049] [ 337.866345][T13040] CPU: 1 PID: 13040 Comm: syz-executor.3 Not tainted 6.3.0-syzkaller #0 [ 337.874800][T13040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 337.885053][T13040] Call Trace: [ 337.888350][T13040] [ 337.891299][T13040] dump_stack_lvl+0xda/0x130 [ 337.895970][T13040] dump_stack+0x15/0x20 [ 337.900230][T13040] should_fail_ex+0x21f/0x230 [ 337.904938][T13040] __should_failslab+0x92/0xa0 [ 337.909718][T13040] should_failslab+0x9/0x20 [ 337.914262][T13040] slab_pre_alloc_hook+0x38/0x180 [ 337.919362][T13040] kmem_cache_alloc+0x58/0x260 [ 337.924160][T13040] ? __inet_hash_connect+0xa38/0xf60 [ 337.929462][T13040] __inet_hash_connect+0xa38/0xf60 [ 337.934661][T13040] inet6_hash_connect+0x72/0x80 [ 337.939598][T13040] tcp_v6_connect+0x991/0xc50 [ 337.944315][T13040] ? avc_has_perm+0xdc/0x160 [ 337.948950][T13040] __inet_stream_connect+0x15d/0x6e0 [ 337.954321][T13040] ? release_sock+0x108/0x110 [ 337.959099][T13040] ? _raw_spin_unlock_bh+0x36/0x40 [ 337.964236][T13040] ? lock_sock_nested+0x10e/0x130 [ 337.969361][T13040] ? selinux_netlbl_socket_connect+0xea/0x100 [ 337.975602][T13040] inet_stream_connect+0x48/0x70 [ 337.980573][T13040] ? __inet_stream_connect+0x6e0/0x6e0 [ 337.986100][T13040] __sys_connect+0x19b/0x1b0 [ 337.990725][T13040] __x64_sys_connect+0x41/0x50 [ 337.995552][T13040] do_syscall_64+0x41/0xc0 [ 338.000075][T13040] ? irqentry_exit+0x12/0x40 [ 338.004674][T13040] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 338.010603][T13040] RIP: 0033:0x7fd55b7ce169 [ 338.015034][T13040] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 338.034734][T13040] RSP: 002b:00007fd55ab41168 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 338.043192][T13040] RAX: ffffffffffffffda RBX: 00007fd55b8edf80 RCX: 00007fd55b7ce169 [ 338.051320][T13040] RDX: 000000000000001c RSI: 0000000020000180 RDI: 0000000000000003 [ 338.059306][T13040] RBP: 00007fd55ab411d0 R08: 0000000000000000 R09: 0000000000000000 [ 338.067360][T13040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.075344][T13040] R13: 00007ffdfdb991bf R14: 00007fd55ab41300 R15: 0000000000022000 [ 338.083409][T13040] [ 338.791976][T13055] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:10 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (fail_nth: 3) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:10 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x8932, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:10 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:36:10 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (fail_nth: 4) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 339.042224][T13067] FAULT_INJECTION: forcing a failure. [ 339.042224][T13067] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 339.055531][T13067] CPU: 1 PID: 13067 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 339.063889][T13067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 339.073964][T13067] Call Trace: [ 339.077264][T13067] [ 339.080213][T13067] dump_stack_lvl+0xda/0x130 [ 339.084830][T13067] dump_stack+0x15/0x20 [ 339.089090][T13067] should_fail_ex+0x21f/0x230 [ 339.093793][T13067] __alloc_pages+0x108/0x340 [ 339.098416][T13067] vma_alloc_folio+0x69d/0x8b0 [ 339.103246][T13067] ? avc_has_perm_noaudit+0x1c2/0x260 [ 339.108764][T13067] ? vm_normal_page+0x199/0x1a0 [ 339.113647][T13067] do_wp_page+0x9dd/0x1fb0 [ 339.115798][T13069] FAULT_INJECTION: forcing a failure. [ 339.115798][T13069] name failslab, interval 1, probability 0, space 0, times 0 [ 339.118101][T13067] ? cgroup_rstat_updated+0x8c/0x1c0 [ 339.118208][T13067] handle_mm_fault+0x64e/0x21d0 [ 339.140914][T13067] exc_page_fault+0x45f/0x640 [ 339.145652][T13067] asm_exc_page_fault+0x26/0x30 [ 339.150572][T13067] RIP: 0010:__put_user_4+0x16/0x20 [ 339.155728][T13067] Code: 89 01 31 c9 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 f3 0f 1e fa 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 70 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 90 f3 0f 1e fa f3 0f 1e fa 0f 01 cb 89 [ 339.175351][T13067] RSP: 0018:ffffc9000d3d7c78 EFLAGS: 00050293 [ 339.181435][T13067] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 00000000200bd038 [ 339.189426][T13067] RDX: 00000000200bd000 RSI: 000000000000009e RDI: 000000000000009f [ 339.197518][T13067] RBP: ffffc9000d3d7ef8 R08: ffffffff83a35bd5 R09: 0000000000000000 [ 339.205520][T13067] R10: 0001ffffffffffff R11: 0001c9000d3d7db8 R12: 0000000000000001 [ 339.213537][T13067] R13: 0000000000000318 R14: 0000000000000000 R15: 0000000000000001 [ 339.221529][T13067] ? __sys_sendmmsg+0x365/0x500 [ 339.226468][T13067] __sys_sendmmsg+0x385/0x500 [ 339.231194][T13067] __x64_sys_sendmmsg+0x57/0x60 [ 339.236120][T13067] do_syscall_64+0x41/0xc0 [ 339.240561][T13067] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 339.246567][T13067] RIP: 0033:0x7fd6b246b169 [ 339.251125][T13067] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 339.270821][T13067] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 339.279252][T13067] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 339.287235][T13067] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 339.295262][T13067] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 339.303257][T13067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.311311][T13067] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 339.319368][T13067] [ 339.322416][T13069] CPU: 0 PID: 13069 Comm: syz-executor.3 Not tainted 6.3.0-syzkaller #0 [ 339.330886][T13069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 339.340995][T13069] Call Trace: [ 339.344293][T13069] [ 339.344931][T13065] FAULT_INJECTION: forcing a failure. [ 339.344931][T13065] name failslab, interval 1, probability 0, space 0, times 0 [ 339.347225][T13069] dump_stack_lvl+0xda/0x130 [ 339.347257][T13069] dump_stack+0x15/0x20 [ 339.368612][T13069] should_fail_ex+0x21f/0x230 [ 339.373350][T13069] __should_failslab+0x92/0xa0 [ 339.378123][T13069] should_failslab+0x9/0x20 [ 339.382648][T13069] slab_pre_alloc_hook+0x38/0x180 [ 339.387684][T13069] kmem_cache_alloc_node+0x5d/0x2e0 [ 339.392890][T13069] ? __alloc_skb+0x109/0x2e0 [ 339.397540][T13069] __alloc_skb+0x109/0x2e0 [ 339.401977][T13069] ? __rcu_read_unlock+0x4d/0x70 [ 339.406922][T13069] tcp_stream_alloc_skb+0x32/0x1c0 [ 339.412046][T13069] tcp_connect+0xbe3/0x1cc0 [ 339.416565][T13069] ? tcp_fastopen_defer_connect+0x72/0x1e0 [ 339.422522][T13069] tcp_v6_connect+0xb86/0xc50 [ 339.427233][T13069] ? avc_has_perm+0xdc/0x160 [ 339.432075][T13069] __inet_stream_connect+0x15d/0x6e0 [ 339.437408][T13069] ? release_sock+0x108/0x110 [ 339.442105][T13069] ? _raw_spin_unlock_bh+0x36/0x40 [ 339.447244][T13069] ? lock_sock_nested+0x10e/0x130 [ 339.452303][T13069] ? selinux_netlbl_socket_connect+0xea/0x100 [ 339.458538][T13069] inet_stream_connect+0x48/0x70 [ 339.463562][T13069] ? __inet_stream_connect+0x6e0/0x6e0 [ 339.469071][T13069] __sys_connect+0x19b/0x1b0 [ 339.473752][T13069] __x64_sys_connect+0x41/0x50 [ 339.478541][T13069] do_syscall_64+0x41/0xc0 [ 339.482991][T13069] ? irqentry_exit+0x12/0x40 [ 339.487612][T13069] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 339.493663][T13069] RIP: 0033:0x7fd55b7ce169 [ 339.498289][T13069] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 339.517974][T13069] RSP: 002b:00007fd55ab41168 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 339.526404][T13069] RAX: ffffffffffffffda RBX: 00007fd55b8edf80 RCX: 00007fd55b7ce169 [ 339.534522][T13069] RDX: 000000000000001c RSI: 0000000020000180 RDI: 0000000000000003 [ 339.542524][T13069] RBP: 00007fd55ab411d0 R08: 0000000000000000 R09: 0000000000000000 [ 339.550501][T13069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.558517][T13069] R13: 00007ffdfdb991bf R14: 00007fd55ab41300 R15: 0000000000022000 [ 339.566513][T13069] [ 339.569537][T13065] CPU: 1 PID: 13065 Comm: syz-executor.4 Not tainted 6.3.0-syzkaller #0 [ 339.577931][T13065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 339.588016][T13065] Call Trace: [ 339.591835][T13065] [ 339.594774][T13065] dump_stack_lvl+0xda/0x130 [ 339.599380][T13065] dump_stack+0x15/0x20 [ 339.603564][T13065] should_fail_ex+0x21f/0x230 [ 339.608265][T13065] __should_failslab+0x92/0xa0 [ 339.613131][T13065] should_failslab+0x9/0x20 [ 339.617642][T13065] slab_pre_alloc_hook+0x38/0x180 [ 339.622707][T13065] kmem_cache_alloc+0x58/0x260 [ 339.627497][T13065] ? __inet_hash_connect+0xa38/0xf60 [ 339.632791][T13065] __inet_hash_connect+0xa38/0xf60 [ 339.638079][T13065] inet6_hash_connect+0x72/0x80 [ 339.642958][T13065] tcp_v6_connect+0x991/0xc50 [ 339.647782][T13065] ? avc_has_perm+0xdc/0x160 [ 339.652412][T13065] __inet_stream_connect+0x15d/0x6e0 [ 339.657745][T13065] ? release_sock+0x108/0x110 [ 339.662460][T13065] ? _raw_spin_unlock_bh+0x36/0x40 [ 339.667586][T13065] ? lock_sock_nested+0x10e/0x130 [ 339.672634][T13065] ? selinux_netlbl_socket_connect+0xea/0x100 [ 339.678727][T13065] inet_stream_connect+0x48/0x70 [ 339.683861][T13065] ? __inet_stream_connect+0x6e0/0x6e0 [ 339.689359][T13065] __sys_connect+0x19b/0x1b0 [ 339.693992][T13065] __x64_sys_connect+0x41/0x50 [ 339.698824][T13065] do_syscall_64+0x41/0xc0 [ 339.703269][T13065] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 339.709210][T13065] RIP: 0033:0x7f3dad10a169 [ 339.713670][T13065] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 339.733377][T13065] RSP: 002b:00007f3dac47d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 339.741813][T13065] RAX: ffffffffffffffda RBX: 00007f3dad229f80 RCX: 00007f3dad10a169 [ 339.749963][T13065] RDX: 000000000000001c RSI: 0000000020000180 RDI: 0000000000000003 [ 339.757982][T13065] RBP: 00007f3dac47d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 339.765980][T13065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.773956][T13065] R13: 00007fffdb07e60f R14: 00007f3dac47d300 R15: 0000000000022000 [ 339.781967][T13065] 01:36:11 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (fail_nth: 5) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:11 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (fail_nth: 4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:11 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 5) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:36:11 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:11 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/1175], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 339.968924][T13090] FAULT_INJECTION: forcing a failure. [ 339.968924][T13090] name failslab, interval 1, probability 0, space 0, times 0 [ 339.981616][T13090] CPU: 0 PID: 13090 Comm: syz-executor.4 Not tainted 6.3.0-syzkaller #0 [ 339.989875][T13087] FAULT_INJECTION: forcing a failure. [ 339.989875][T13087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.989979][T13090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 340.013085][T13090] Call Trace: [ 340.016367][T13090] [ 340.019305][T13090] dump_stack_lvl+0xda/0x130 [ 340.023939][T13090] dump_stack+0x15/0x20 [ 340.028124][T13090] should_fail_ex+0x21f/0x230 [ 340.032864][T13090] __should_failslab+0x92/0xa0 [ 340.037640][T13090] should_failslab+0x9/0x20 [ 340.042150][T13090] slab_pre_alloc_hook+0x38/0x180 [ 340.047201][T13090] kmem_cache_alloc_node+0x5d/0x2e0 [ 340.052426][T13090] ? __alloc_skb+0x109/0x2e0 [ 340.057035][T13090] __alloc_skb+0x109/0x2e0 [ 340.061547][T13090] ? __rcu_read_unlock+0x4d/0x70 [ 340.066584][T13090] tcp_stream_alloc_skb+0x32/0x1c0 [ 340.071720][T13090] tcp_connect+0xbe3/0x1cc0 [ 340.076266][T13090] ? tcp_fastopen_defer_connect+0x72/0x1e0 [ 340.082151][T13090] tcp_v6_connect+0xb86/0xc50 [ 340.086921][T13090] ? avc_has_perm+0xdc/0x160 [ 340.091528][T13090] __inet_stream_connect+0x15d/0x6e0 [ 340.096944][T13090] ? release_sock+0x108/0x110 [ 340.101649][T13090] ? _raw_spin_unlock_bh+0x36/0x40 [ 340.106769][T13090] ? lock_sock_nested+0x10e/0x130 [ 340.111919][T13090] ? selinux_netlbl_socket_connect+0xea/0x100 [ 340.118031][T13090] inet_stream_connect+0x48/0x70 [ 340.123133][T13090] ? __inet_stream_connect+0x6e0/0x6e0 [ 340.128612][T13090] __sys_connect+0x19b/0x1b0 [ 340.133278][T13090] __x64_sys_connect+0x41/0x50 [ 340.138080][T13090] do_syscall_64+0x41/0xc0 [ 340.142509][T13090] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 340.148514][T13090] RIP: 0033:0x7f3dad10a169 [ 340.152937][T13090] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 340.172642][T13090] RSP: 002b:00007f3dac45c168 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 340.181144][T13090] RAX: ffffffffffffffda RBX: 00007f3dad22a050 RCX: 00007f3dad10a169 [ 340.189208][T13090] RDX: 000000000000001c RSI: 0000000020000180 RDI: 0000000000000003 [ 340.197246][T13090] RBP: 00007f3dac45c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 340.205291][T13090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.213444][T13090] R13: 00007fffdb07e60f R14: 00007f3dac45c300 R15: 0000000000022000 [ 340.221430][T13090] [ 340.224454][T13087] CPU: 1 PID: 13087 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 340.232881][T13087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 340.242959][T13087] Call Trace: [ 340.246260][T13087] [ 340.249206][T13087] dump_stack_lvl+0xda/0x130 [ 340.253826][T13087] dump_stack+0x15/0x20 [ 340.258089][T13087] should_fail_ex+0x21f/0x230 [ 340.262838][T13087] should_fail+0xb/0x10 01:36:11 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (fail_nth: 6) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:11 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (fail_nth: 5) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 340.267118][T13087] should_fail_usercopy+0x1a/0x20 [ 340.272171][T13087] _copy_from_user+0x1e/0xd0 [ 340.276794][T13087] copy_msghdr_from_user+0x54/0x2a0 [ 340.282115][T13087] __sys_sendmmsg+0x224/0x500 [ 340.286955][T13087] __x64_sys_sendmmsg+0x57/0x60 [ 340.291839][T13087] do_syscall_64+0x41/0xc0 [ 340.296275][T13087] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 340.302259][T13087] RIP: 0033:0x7fd6b246b169 [ 340.306694][T13087] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 340.326676][T13087] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 340.335109][T13087] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 340.343175][T13087] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 340.351207][T13087] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 340.351695][T13100] FAULT_INJECTION: forcing a failure. [ 340.351695][T13100] name failslab, interval 1, probability 0, space 0, times 0 [ 340.359187][T13087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.359202][T13087] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 340.359268][T13087] [ 340.393109][T13100] CPU: 0 PID: 13100 Comm: syz-executor.3 Not tainted 6.3.0-syzkaller #0 [ 340.401480][T13100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 340.411598][T13100] Call Trace: [ 340.414894][T13100] [ 340.417841][T13100] dump_stack_lvl+0xda/0x130 [ 340.422492][T13100] dump_stack+0x15/0x20 [ 340.426693][T13100] should_fail_ex+0x21f/0x230 [ 340.431401][T13100] __should_failslab+0x92/0xa0 [ 340.436207][T13100] should_failslab+0x9/0x20 [ 340.440733][T13100] slab_pre_alloc_hook+0x38/0x180 [ 340.445779][T13100] kmem_cache_alloc+0x58/0x260 [ 340.450831][T13100] ? __nf_conntrack_alloc+0xcd/0x280 [ 340.456208][T13100] __nf_conntrack_alloc+0xcd/0x280 [ 340.461515][T13100] init_conntrack+0x1f2/0x920 [ 340.466315][T13100] nf_conntrack_in+0x7a7/0xd30 [ 340.471185][T13100] ? ipv6_conntrack_in+0x30/0x30 [ 340.476227][T13100] ipv6_conntrack_local+0x1d/0x30 [ 340.481345][T13100] nf_hook_slow+0x6b/0x150 [ 340.485879][T13100] ip6_xmit+0xb32/0xb70 [ 340.490069][T13100] ? NF_HOOK+0x120/0x120 [ 340.494328][T13100] ? inet6_csk_route_socket+0x280/0x3d0 [ 340.499981][T13100] inet6_csk_xmit+0x1cf/0x210 [ 340.504734][T13100] __tcp_transmit_skb+0x1165/0x16c0 [ 340.510049][T13100] tcp_connect+0x1265/0x1cc0 [ 340.514746][T13100] tcp_v6_connect+0xb86/0xc50 [ 340.519448][T13100] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 340.525629][T13100] __inet_stream_connect+0x15d/0x6e0 [ 340.530932][T13100] ? release_sock+0x108/0x110 [ 340.535625][T13100] ? _raw_spin_unlock_bh+0x36/0x40 [ 340.540773][T13100] ? lock_sock_nested+0x10e/0x130 [ 340.545811][T13100] ? selinux_netlbl_socket_connect+0xea/0x100 [ 340.551910][T13100] inet_stream_connect+0x48/0x70 [ 340.556867][T13100] ? __inet_stream_connect+0x6e0/0x6e0 [ 340.562356][T13100] __sys_connect+0x19b/0x1b0 [ 340.567014][T13100] __x64_sys_connect+0x41/0x50 [ 340.571880][T13100] do_syscall_64+0x41/0xc0 [ 340.576327][T13100] ? irqentry_exit+0x12/0x40 [ 340.580957][T13100] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 340.586880][T13100] RIP: 0033:0x7fd55b7ce169 [ 340.591831][T13100] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 340.611626][T13100] RSP: 002b:00007fd55ab41168 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 340.620060][T13100] RAX: ffffffffffffffda RBX: 00007fd55b8edf80 RCX: 00007fd55b7ce169 [ 340.628100][T13100] RDX: 000000000000001c RSI: 0000000020000180 RDI: 0000000000000003 [ 340.636161][T13100] RBP: 00007fd55ab411d0 R08: 0000000000000000 R09: 0000000000000000 [ 340.644268][T13100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.652263][T13100] R13: 00007ffdfdb991bf R14: 00007fd55ab41300 R15: 0000000000022000 [ 340.660256][T13100] 01:36:12 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060040000d0020000d00200000000000000000000d0020000c8030000c8030000c7fc0000c8030000c8030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008802d00200000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036970365f7674693000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000022000000feffffff0000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000900736d000000000000000000010000000000000021390eb8a10d61905c915cd228ca97b5ce382683c91019c72674282bfdd8705b2bec82c7e6a47fe2fa5de4d4cffd0a70df1168448dd67391da71a4d40daaf91ee10181a6e2cc70723760440ff801aab7fdb67e5c1a436e18b54efa66ad91f24342af8e7ae060ed1b7e8abb92cc6d113df52f3c0fd51ae5f7d2fe47330100000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001627071300000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e64000000658181e193800057000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000fcff0000000000000000000000000000000000000030006463637000000000000000000000e60000000000000000000000000000000000000000000000000000000000000030005345540000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000e5ffffff00000000feffffff"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:12 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x8937, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:12 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (fail_nth: 6) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:12 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 6) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) [ 340.862605][T13115] FAULT_INJECTION: forcing a failure. [ 340.862605][T13115] name failslab, interval 1, probability 0, space 0, times 0 [ 340.875299][T13115] CPU: 1 PID: 13115 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 340.883685][T13115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 340.893836][T13115] Call Trace: [ 340.897128][T13115] [ 340.900065][T13115] dump_stack_lvl+0xda/0x130 [ 340.904675][T13115] dump_stack+0x15/0x20 [ 340.908910][T13115] should_fail_ex+0x21f/0x230 [ 340.913600][T13115] __should_failslab+0x92/0xa0 [ 340.918383][T13115] should_failslab+0x9/0x20 [ 340.922927][T13115] slab_pre_alloc_hook+0x38/0x180 [ 340.927976][T13115] kmem_cache_alloc_node+0x5d/0x2e0 [ 340.933258][T13115] ? __alloc_skb+0x109/0x2e0 [ 340.937970][T13115] ? __mod_lruvec_page_state+0xfe/0x1d0 [ 340.943553][T13115] __alloc_skb+0x109/0x2e0 [ 340.948086][T13115] alloc_skb_with_frags+0x80/0x3e0 [ 340.953245][T13115] ? __rcu_read_unlock+0x4d/0x70 [ 340.958216][T13115] sock_alloc_send_pskb+0x434/0x4e0 [ 340.963675][T13115] unix_dgram_sendmsg+0x3dd/0x1110 [ 340.966449][T13118] FAULT_INJECTION: forcing a failure. [ 340.966449][T13118] name failslab, interval 1, probability 0, space 0, times 0 [ 340.968807][T13115] ? unix_dgram_poll+0x3e0/0x3e0 [ 340.986360][T13115] ____sys_sendmsg+0x375/0x4c0 [ 340.991552][T13115] __sys_sendmmsg+0x263/0x500 [ 340.996296][T13115] __x64_sys_sendmmsg+0x57/0x60 [ 341.001176][T13115] do_syscall_64+0x41/0xc0 [ 341.005601][T13115] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 341.011599][T13115] RIP: 0033:0x7fd6b246b169 [ 341.016058][T13115] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 341.035715][T13115] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 341.044179][T13115] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 341.052159][T13115] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 341.060176][T13115] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 341.068208][T13115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.076186][T13115] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 341.084165][T13115] [ 341.087209][T13118] CPU: 0 PID: 13118 Comm: syz-executor.4 Not tainted 6.3.0-syzkaller #0 [ 341.095563][T13118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 341.105617][T13118] Call Trace: [ 341.108960][T13118] 01:36:12 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 341.111901][T13118] dump_stack_lvl+0xda/0x130 [ 341.116585][T13118] dump_stack+0x15/0x20 [ 341.120860][T13118] should_fail_ex+0x21f/0x230 [ 341.125606][T13118] __should_failslab+0x92/0xa0 [ 341.130427][T13118] should_failslab+0x9/0x20 [ 341.135020][T13118] slab_pre_alloc_hook+0x38/0x180 [ 341.140098][T13118] kmem_cache_alloc+0x58/0x260 [ 341.144942][T13118] ? __nf_conntrack_alloc+0xcd/0x280 [ 341.150271][T13118] __nf_conntrack_alloc+0xcd/0x280 [ 341.155465][T13118] init_conntrack+0x1f2/0x920 [ 341.160181][T13118] nf_conntrack_in+0x7a7/0xd30 [ 341.165007][T13118] ? ipv6_conntrack_in+0x30/0x30 [ 341.169982][T13118] ipv6_conntrack_local+0x1d/0x30 [ 341.175048][T13118] nf_hook_slow+0x6b/0x150 [ 341.179632][T13118] ip6_xmit+0xb32/0xb70 [ 341.183822][T13118] ? NF_HOOK+0x120/0x120 [ 341.188079][T13118] ? inet6_csk_route_socket+0x280/0x3d0 [ 341.193669][T13118] inet6_csk_xmit+0x1cf/0x210 [ 341.198481][T13118] __tcp_transmit_skb+0x1165/0x16c0 [ 341.203765][T13118] ? mem_cgroup_charge_skmem+0xba/0x1c0 [ 341.209338][T13118] tcp_connect+0x1265/0x1cc0 [ 341.214005][T13118] tcp_v6_connect+0xb86/0xc50 [ 341.218714][T13118] ? avc_has_perm+0xdc/0x160 [ 341.223359][T13118] __inet_stream_connect+0x15d/0x6e0 [ 341.228695][T13118] ? release_sock+0x108/0x110 [ 341.233415][T13118] ? _raw_spin_unlock_bh+0x36/0x40 [ 341.238553][T13118] ? lock_sock_nested+0x10e/0x130 [ 341.243611][T13118] ? selinux_netlbl_socket_connect+0xea/0x100 [ 341.249717][T13118] inet_stream_connect+0x48/0x70 [ 341.254690][T13118] ? __inet_stream_connect+0x6e0/0x6e0 [ 341.260179][T13118] __sys_connect+0x19b/0x1b0 [ 341.264873][T13118] __x64_sys_connect+0x41/0x50 [ 341.269681][T13118] do_syscall_64+0x41/0xc0 [ 341.274129][T13118] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 341.280101][T13118] RIP: 0033:0x7f3dad10a169 [ 341.284587][T13118] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 341.304300][T13118] RSP: 002b:00007f3dac47d168 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 341.312784][T13118] RAX: ffffffffffffffda RBX: 00007f3dad229f80 RCX: 00007f3dad10a169 [ 341.320836][T13118] RDX: 000000000000001c RSI: 0000000020000180 RDI: 0000000000000003 [ 341.329107][T13118] RBP: 00007f3dac47d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 341.337150][T13118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.345131][T13118] R13: 00007fffdb07e60f R14: 00007f3dac47d300 R15: 0000000000022000 [ 341.353276][T13118] 01:36:13 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/1175], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 341.362164][ T23] audit: type=1400 audit(1682300173.094:161): avc: denied { unlink } for pid=2728 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 341.460615][T13132] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:13 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0x2, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:13 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:13 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:13 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 7) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) [ 342.171075][T13147] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:14 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0x3, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:14 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/1175], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:14 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0x2, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:14 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x8942, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:14 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xd, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:14 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:14 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0x3, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:14 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xd, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:14 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xe, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 343.603945][T13192] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:15 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:36:15 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xe, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:15 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/1194], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:15 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0x10, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 343.847538][T13199] FAULT_INJECTION: forcing a failure. [ 343.847538][T13199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.860697][T13199] CPU: 1 PID: 13199 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 343.869044][T13199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 343.879112][T13199] Call Trace: [ 343.882411][T13199] [ 343.885441][T13199] dump_stack_lvl+0xda/0x130 [ 343.890043][T13199] dump_stack+0x15/0x20 [ 343.894210][T13199] should_fail_ex+0x21f/0x230 [ 343.899052][T13199] should_fail+0xb/0x10 [ 343.903292][T13199] should_fail_usercopy+0x1a/0x20 [ 343.908341][T13199] _copy_from_user+0x1e/0xd0 [ 343.912987][T13199] copy_msghdr_from_user+0x54/0x2a0 [ 343.918215][T13199] __sys_sendmmsg+0x224/0x500 [ 343.923012][T13199] __x64_sys_sendmmsg+0x57/0x60 [ 343.927975][T13199] do_syscall_64+0x41/0xc0 [ 343.932443][T13199] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 343.938440][T13199] RIP: 0033:0x7fd6b246b169 01:36:15 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4002, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 343.942875][T13199] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 343.962607][T13199] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 343.971038][T13199] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 343.979110][T13199] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 343.987107][T13199] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 01:36:15 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0x10, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:15 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x8943, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 343.995102][T13199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.003110][T13199] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 344.011168][T13199] 01:36:15 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4002, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:16 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:16 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4003, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:16 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4003, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:16 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4004, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:16 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4004, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:16 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 9) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) [ 344.712627][T13256] FAULT_INJECTION: forcing a failure. [ 344.712627][T13256] name failslab, interval 1, probability 0, space 0, times 0 [ 344.725339][T13256] CPU: 1 PID: 13256 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 344.733679][T13256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 344.743898][T13256] Call Trace: [ 344.747222][T13256] [ 344.750160][T13256] dump_stack_lvl+0xda/0x130 [ 344.754974][T13256] dump_stack+0x15/0x20 [ 344.759228][T13256] should_fail_ex+0x21f/0x230 [ 344.763954][T13256] __should_failslab+0x92/0xa0 [ 344.768733][T13256] should_failslab+0x9/0x20 [ 344.773414][T13256] slab_pre_alloc_hook+0x38/0x180 [ 344.778554][T13256] kmem_cache_alloc_node+0x5d/0x2e0 [ 344.783777][T13256] ? __alloc_skb+0x109/0x2e0 [ 344.788397][T13256] __alloc_skb+0x109/0x2e0 [ 344.792886][T13256] alloc_skb_with_frags+0x80/0x3e0 [ 344.798019][T13256] ? avc_has_perm+0xdc/0x160 [ 344.802644][T13256] ? __rcu_read_unlock+0x4d/0x70 [ 344.807621][T13256] sock_alloc_send_pskb+0x434/0x4e0 [ 344.812852][T13256] unix_dgram_sendmsg+0x3dd/0x1110 [ 344.818035][T13256] ? unix_dgram_poll+0x3e0/0x3e0 [ 344.823096][T13256] ____sys_sendmsg+0x375/0x4c0 [ 344.827881][T13256] __sys_sendmmsg+0x263/0x500 [ 344.832675][T13256] __x64_sys_sendmmsg+0x57/0x60 [ 344.837652][T13256] do_syscall_64+0x41/0xc0 [ 344.842103][T13256] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 344.848157][T13256] RIP: 0033:0x7fd6b246b169 [ 344.852620][T13256] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 344.872355][T13256] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 344.880856][T13256] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 344.888843][T13256] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 344.896874][T13256] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 344.904946][T13256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 01:36:16 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4005, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:16 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4005, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:16 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x8946, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:16 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060040000d0020000d00200000000000000000000d0020000c8030000c8030000c7fc0000c8030000c8030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008802d00200000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036970365f7674693000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000022000000feffffff0000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000900736d000000000000000000010000000000000021390eb8a10d61905c915cd228ca97b5ce382683c91019c72674282bfdd8705b2bec82c7e6a47fe2fa5de4d4cffd0a70df1168448dd67391da71a4d40daaf91ee10181a6e2cc70723760440ff801aab7fdb67e5c1a436e18b54efa66ad91f24342af8e7ae060ed1b7e8abb92cc6d113df52f3c0fd51ae5f7d2fe47330100000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001627071300000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e64000000658181e193800057000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000fcff0000000000000000000000000000000000000030006463637000000000000000000000e600000000000000000000000000000000000000000000000000000000000000300053455400000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800"/1194], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 344.912929][T13256] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 344.921008][T13256] 01:36:16 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4006, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:16 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4006, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:17 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:17 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:36:17 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x8947, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:17 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/1194], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:17 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4007, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:17 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4007, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:18 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:18 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x8948, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:18 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 11) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:36:18 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 347.056212][T13326] FAULT_INJECTION: forcing a failure. [ 347.056212][T13326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.069366][T13326] CPU: 1 PID: 13326 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 347.077795][T13326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 347.087921][T13326] Call Trace: [ 347.091216][T13326] [ 347.094233][T13326] dump_stack_lvl+0xda/0x130 [ 347.098844][T13326] dump_stack+0x15/0x20 [ 347.103009][T13326] should_fail_ex+0x21f/0x230 [ 347.107740][T13326] should_fail+0xb/0x10 [ 347.111923][T13326] should_fail_usercopy+0x1a/0x20 [ 347.116976][T13326] _copy_from_user+0x1e/0xd0 [ 347.121605][T13326] copy_msghdr_from_user+0x54/0x2a0 [ 347.126876][T13326] __sys_sendmmsg+0x224/0x500 [ 347.131601][T13326] __x64_sys_sendmmsg+0x57/0x60 [ 347.136471][T13326] do_syscall_64+0x41/0xc0 [ 347.140986][T13326] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 347.146899][T13326] RIP: 0033:0x7fd6b246b169 [ 347.151322][T13326] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 347.171026][T13326] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 347.179506][T13326] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 347.187543][T13326] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 347.195524][T13326] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 347.203504][T13326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 347.211568][T13326] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 347.219552][T13326] 01:36:18 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4008, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:18 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4008, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:19 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:19 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x8949, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 347.946552][T13342] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:19 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:20 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4009, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:20 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4009, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:20 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 12) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:36:20 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x894a, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 348.914633][T13367] FAULT_INJECTION: forcing a failure. [ 348.914633][T13367] name failslab, interval 1, probability 0, space 0, times 0 [ 348.927318][T13367] CPU: 1 PID: 13367 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 348.935670][T13367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 348.945735][T13367] Call Trace: [ 348.949026][T13367] [ 348.952031][T13367] dump_stack_lvl+0xda/0x130 [ 348.956638][T13367] dump_stack+0x15/0x20 [ 348.960811][T13367] should_fail_ex+0x21f/0x230 [ 348.965513][T13367] __should_failslab+0x92/0xa0 [ 348.970307][T13367] should_failslab+0x9/0x20 [ 348.974830][T13367] slab_pre_alloc_hook+0x38/0x180 [ 348.979869][T13367] kmem_cache_alloc_node+0x5d/0x2e0 [ 348.985089][T13367] ? __alloc_skb+0x109/0x2e0 [ 348.989720][T13367] __alloc_skb+0x109/0x2e0 [ 348.994224][T13367] alloc_skb_with_frags+0x80/0x3e0 [ 348.999428][T13367] ? avc_has_perm+0xdc/0x160 [ 349.004045][T13367] ? __rcu_read_unlock+0x4d/0x70 [ 349.009096][T13367] sock_alloc_send_pskb+0x434/0x4e0 [ 349.014320][T13367] unix_dgram_sendmsg+0x3dd/0x1110 [ 349.019714][T13367] ? unix_dgram_poll+0x3e0/0x3e0 [ 349.024682][T13367] ____sys_sendmsg+0x375/0x4c0 [ 349.029490][T13367] __sys_sendmmsg+0x263/0x500 [ 349.034206][T13367] __x64_sys_sendmmsg+0x57/0x60 [ 349.039108][T13367] do_syscall_64+0x41/0xc0 [ 349.043542][T13367] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 349.049549][T13367] RIP: 0033:0x7fd6b246b169 01:36:20 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:20 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x400a, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:20 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x400a, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 349.054031][T13367] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 349.073743][T13367] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 349.082188][T13367] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 349.090175][T13367] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 349.098180][T13367] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 349.106259][T13367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 01:36:20 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 349.114269][T13367] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 349.122361][T13367] 01:36:20 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x400b, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:20 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x400b, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 349.229590][T13389] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:21 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x400d, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:21 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x400d, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:21 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 13) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:36:21 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:21 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x400f, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:21 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x8970, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:21 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:21 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4010, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:21 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:21 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:21 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 350.818162][T13449] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:23 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x3, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:23 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x8971, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:23 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 14) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:36:23 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 351.521323][T13463] FAULT_INJECTION: forcing a failure. [ 351.521323][T13463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.534589][T13463] CPU: 0 PID: 13463 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 351.543183][T13463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 351.553388][T13463] Call Trace: [ 351.556683][T13463] [ 351.559699][T13463] dump_stack_lvl+0xda/0x130 [ 351.564323][T13463] dump_stack+0x15/0x20 [ 351.568527][T13463] should_fail_ex+0x21f/0x230 [ 351.573241][T13463] should_fail+0xb/0x10 [ 351.577457][T13463] should_fail_usercopy+0x1a/0x20 [ 351.582507][T13463] _copy_from_user+0x1e/0xd0 [ 351.587115][T13463] copy_msghdr_from_user+0x54/0x2a0 [ 351.592425][T13463] __sys_sendmmsg+0x224/0x500 [ 351.597148][T13463] __x64_sys_sendmmsg+0x57/0x60 [ 351.602138][T13463] do_syscall_64+0x41/0xc0 [ 351.606584][T13463] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 351.612569][T13463] RIP: 0033:0x7fd6b246b169 [ 351.617017][T13463] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 351.636734][T13463] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 351.645244][T13463] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 351.653244][T13463] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 351.661232][T13463] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 01:36:23 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 351.669239][T13463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 351.677312][T13463] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 351.685291][T13463] 01:36:23 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x4, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:23 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:23 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x3, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:24 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x8990, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:24 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 15) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:36:24 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:24 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 352.870741][T13505] FAULT_INJECTION: forcing a failure. [ 352.870741][T13505] name failslab, interval 1, probability 0, space 0, times 0 [ 352.883482][T13505] CPU: 1 PID: 13505 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 352.891815][T13505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 352.901883][T13505] Call Trace: [ 352.905207][T13505] [ 352.908148][T13505] dump_stack_lvl+0xda/0x130 [ 352.912761][T13505] dump_stack+0x15/0x20 [ 352.916930][T13505] should_fail_ex+0x21f/0x230 [ 352.921710][T13505] __should_failslab+0x92/0xa0 [ 352.926559][T13505] should_failslab+0x9/0x20 [ 352.931105][T13505] slab_pre_alloc_hook+0x38/0x180 [ 352.936156][T13505] kmem_cache_alloc_node+0x5d/0x2e0 [ 352.941386][T13505] ? __alloc_skb+0x109/0x2e0 [ 352.946062][T13505] __alloc_skb+0x109/0x2e0 [ 352.950508][T13505] alloc_skb_with_frags+0x80/0x3e0 [ 352.955737][T13505] ? avc_has_perm+0xdc/0x160 [ 352.960417][T13505] ? __rcu_read_unlock+0x4d/0x70 [ 352.965426][T13505] sock_alloc_send_pskb+0x434/0x4e0 [ 352.970643][T13505] unix_dgram_sendmsg+0x3dd/0x1110 [ 352.975882][T13505] ? unix_dgram_poll+0x3e0/0x3e0 [ 352.980839][T13505] ____sys_sendmsg+0x375/0x4c0 [ 352.985633][T13505] __sys_sendmmsg+0x263/0x500 [ 352.990341][T13505] __x64_sys_sendmmsg+0x57/0x60 [ 352.995223][T13505] do_syscall_64+0x41/0xc0 [ 352.999665][T13505] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 353.005687][T13505] RIP: 0033:0x7fd6b246b169 [ 353.010118][T13505] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 353.030186][T13505] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 353.038668][T13505] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 353.046738][T13505] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 353.054773][T13505] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 353.062779][T13505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 01:36:24 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 353.070821][T13505] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 353.078810][T13505] 01:36:24 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x4, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:24 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x6, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:25 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x8991, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:25 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060040000d0020000d00200000000000000000000d0020000c8030000c8030000c7fc0000c8030000c8030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008802d00200000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036970365f7674693000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000022000000feffffff0000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000900736d000000000000000000010000000000000021390eb8a10d61905c915cd228ca97b5ce382683c91019c72674282bfdd8705b2bec82c7e6a47fe2fa5de4d4cffd0a70df1168448dd67391da71a4d40daaf91ee10181a6e2cc70723760440ff801aab7fdb67e5c1a436e18b54efa66ad91f24342af8e7ae060ed1b7e8abb92cc6d113df52f3c0fd51ae5f7d2fe47330100000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001627071300000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e64000000658181e193800057000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000fcff0000000000000000000000000000000000000030006463637000000000000000000000e60000000000000000000000000000000000000000000000000000000000000030005345540000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000e5ffffff00000000feff"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:25 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:25 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 16) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:36:25 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060040000d0020000d00200000000000000000000d0020000c8030000c8030000c7fc0000c8030000c8030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008802d00200000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036970365f7674693000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000022000000feffffff0000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000900736d000000000000000000010000000000000021390eb8a10d61905c915cd228ca97b5ce382683c91019c72674282bfdd8705b2bec82c7e6a47fe2fa5de4d4cffd0a70df1168448dd67391da71a4d40daaf91ee10181a6e2cc70723760440ff801aab7fdb67e5c1a436e18b54efa66ad91f24342af8e7ae060ed1b7e8abb92cc6d113df52f3c0fd51ae5f7d2fe47330100000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001627071300000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e64000000658181e193800057000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000fcff0000000000000000000000000000000000000030006463637000000000000000000000e60000000000000000000000000000000000000000000000000000000000000030005345540000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000e5ffffff00000000feffffff"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:25 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x7, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:25 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x6, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:26 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x8992, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:26 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x7, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:26 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x8, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:26 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:27 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(0xffffffffffffffff, r3, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:27 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 17) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:36:27 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x8, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 355.781674][T13586] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:27 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x8993, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:27 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 355.962265][T13591] FAULT_INJECTION: forcing a failure. [ 355.962265][T13591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.975469][T13591] CPU: 1 PID: 13591 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 355.983848][T13591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 355.993910][T13591] Call Trace: [ 355.997226][T13591] [ 356.000172][T13591] dump_stack_lvl+0xda/0x130 [ 356.004786][T13591] dump_stack+0x15/0x20 [ 356.008957][T13591] should_fail_ex+0x21f/0x230 [ 356.013657][T13591] should_fail+0xb/0x10 [ 356.017843][T13591] should_fail_usercopy+0x1a/0x20 [ 356.022904][T13591] _copy_from_user+0x1e/0xd0 [ 356.027535][T13591] copy_msghdr_from_user+0x54/0x2a0 [ 356.032814][T13591] __sys_sendmmsg+0x224/0x500 [ 356.037539][T13591] __x64_sys_sendmmsg+0x57/0x60 [ 356.042498][T13591] do_syscall_64+0x41/0xc0 [ 356.047010][T13591] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 356.052931][T13591] RIP: 0033:0x7fd6b246b169 01:36:27 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x9, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 356.057352][T13591] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 356.077006][T13591] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 356.085457][T13591] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 356.093501][T13591] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 356.101539][T13591] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 356.109533][T13591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 356.117526][T13591] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 356.125523][T13591] 01:36:28 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xa, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:28 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x9, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:28 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(0xffffffffffffffff, r3, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:28 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xa, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:28 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) [ 356.688582][T13626] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:28 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x8994, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:28 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 356.860797][T13635] FAULT_INJECTION: forcing a failure. [ 356.860797][T13635] name failslab, interval 1, probability 0, space 0, times 0 [ 356.873572][T13635] CPU: 1 PID: 13635 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 356.881925][T13635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 356.892003][T13635] Call Trace: [ 356.895289][T13635] [ 356.898233][T13635] dump_stack_lvl+0xda/0x130 [ 356.902865][T13635] dump_stack+0x15/0x20 [ 356.907218][T13635] should_fail_ex+0x21f/0x230 [ 356.911924][T13635] __should_failslab+0x92/0xa0 [ 356.916720][T13635] should_failslab+0x9/0x20 [ 356.921249][T13635] slab_pre_alloc_hook+0x38/0x180 [ 356.926281][T13635] kmem_cache_alloc_node+0x5d/0x2e0 [ 356.931497][T13635] ? __alloc_skb+0x109/0x2e0 [ 356.936160][T13635] __alloc_skb+0x109/0x2e0 [ 356.940608][T13635] alloc_skb_with_frags+0x80/0x3e0 [ 356.945841][T13635] ? avc_has_perm+0xdc/0x160 [ 356.950444][T13635] ? __rcu_read_unlock+0x4d/0x70 [ 356.955407][T13635] sock_alloc_send_pskb+0x434/0x4e0 [ 356.960725][T13635] unix_dgram_sendmsg+0x3dd/0x1110 [ 356.965960][T13635] ? unix_dgram_poll+0x3e0/0x3e0 [ 356.970970][T13635] ____sys_sendmsg+0x375/0x4c0 [ 356.975826][T13635] __sys_sendmmsg+0x263/0x500 [ 356.980566][T13635] __x64_sys_sendmmsg+0x57/0x60 [ 356.985448][T13635] do_syscall_64+0x41/0xc0 [ 356.989945][T13635] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 356.995920][T13635] RIP: 0033:0x7fd6b246b169 [ 357.000395][T13635] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 357.020023][T13635] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 357.028700][T13635] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 357.036729][T13635] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 357.044825][T13635] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 357.052897][T13635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 01:36:28 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 357.060932][T13635] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 357.068928][T13635] 01:36:28 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xf, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:29 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(0xffffffffffffffff, r3, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:29 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xf, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:29 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x10, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:29 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:29 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 19) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) [ 357.646913][T13663] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:29 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x8995, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:30 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:30 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x10, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:30 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x48, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 358.518768][T13685] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:30 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:30 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x48, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:30 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x50, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:30 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 20) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:36:30 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89a2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 359.059908][T13709] FAULT_INJECTION: forcing a failure. [ 359.059908][T13709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.073002][T13709] CPU: 0 PID: 13709 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 359.081396][T13709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 359.091485][T13709] Call Trace: [ 359.094774][T13709] [ 359.097743][T13709] dump_stack_lvl+0xda/0x130 [ 359.102360][T13709] dump_stack+0x15/0x20 [ 359.106529][T13709] should_fail_ex+0x21f/0x230 [ 359.111338][T13709] should_fail+0xb/0x10 [ 359.115583][T13709] should_fail_usercopy+0x1a/0x20 [ 359.120706][T13709] _copy_from_user+0x1e/0xd0 [ 359.125314][T13709] copy_msghdr_from_user+0x54/0x2a0 [ 359.130535][T13709] __sys_sendmmsg+0x224/0x500 [ 359.135345][T13709] __x64_sys_sendmmsg+0x57/0x60 [ 359.140218][T13709] do_syscall_64+0x41/0xc0 [ 359.144716][T13709] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 359.150648][T13709] RIP: 0033:0x7fd6b246b169 [ 359.155086][T13709] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 359.174734][T13709] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 359.183173][T13709] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 359.191240][T13709] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 359.199235][T13709] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 359.207284][T13709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 359.215262][T13709] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 359.223238][T13709] 01:36:31 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 359.416039][T13722] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:31 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:31 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x16c, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:31 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x50, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:31 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1f4, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:31 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89a3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:31 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 21) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) [ 359.959644][T13749] FAULT_INJECTION: forcing a failure. [ 359.959644][T13749] name failslab, interval 1, probability 0, space 0, times 0 [ 359.972348][T13749] CPU: 0 PID: 13749 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 359.980736][T13749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 359.990819][T13749] Call Trace: [ 359.994146][T13749] [ 359.997095][T13749] dump_stack_lvl+0xda/0x130 [ 360.001716][T13749] dump_stack+0x15/0x20 [ 360.006609][T13749] should_fail_ex+0x21f/0x230 [ 360.011340][T13749] __should_failslab+0x92/0xa0 [ 360.016140][T13749] should_failslab+0x9/0x20 [ 360.020697][T13749] slab_pre_alloc_hook+0x38/0x180 [ 360.025743][T13749] kmem_cache_alloc_node+0x5d/0x2e0 [ 360.030989][T13749] ? __alloc_skb+0x109/0x2e0 [ 360.035645][T13749] __alloc_skb+0x109/0x2e0 [ 360.040146][T13749] alloc_skb_with_frags+0x80/0x3e0 [ 360.045299][T13749] ? avc_has_perm+0xdc/0x160 [ 360.049913][T13749] ? __rcu_read_unlock+0x4d/0x70 [ 360.054872][T13749] sock_alloc_send_pskb+0x434/0x4e0 [ 360.060100][T13749] unix_dgram_sendmsg+0x3dd/0x1110 [ 360.065254][T13749] ? unix_dgram_poll+0x3e0/0x3e0 [ 360.070252][T13749] ____sys_sendmsg+0x375/0x4c0 [ 360.075040][T13749] __sys_sendmmsg+0x263/0x500 [ 360.079751][T13749] __x64_sys_sendmmsg+0x57/0x60 [ 360.084679][T13749] do_syscall_64+0x41/0xc0 [ 360.089168][T13749] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 360.095123][T13749] RIP: 0033:0x7fd6b246b169 [ 360.099578][T13749] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 360.119217][T13749] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 360.127651][T13749] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 360.135635][T13749] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 360.143707][T13749] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 360.151693][T13749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 360.159726][T13749] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 360.167766][T13749] 01:36:32 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:32 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1f4, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:32 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 360.335796][T13755] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:32 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x218, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:32 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x218, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:32 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89b0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:32 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 22) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:36:32 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x241, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:32 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x241, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:32 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060040000d0020000d00200000000000000000000d0020000c8030000c8030000c7fc0000c8030000c8030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008802d00200000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036970365f7674693000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000022000000feffffff0000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000900736d000000000000000000010000000000000021390eb8a10d61905c915cd228ca97b5ce382683c91019c72674282bfdd8705b2bec82c7e6a47fe2fa5de4d4cffd0a70df1168448dd67391da71a4d40daaf91ee10181a6e2cc70723760440ff801aab7fdb67e5c1a436e18b54efa66ad91f24342af8e7ae060ed1b7e8abb92cc6d113df52f3c0fd51ae5f7d2fe47330100000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001627071300000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e64000000658181e193800057000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000fcff0000000000000000000000000000000000000030006463637000000000000000000000e60000000000000000000000000000000000000000000000000000000000000030005345540000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000e5ffffff00000000feffffff"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r2, r3, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:32 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x300, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:32 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060040000d0020000d00200000000000000000000d0020000c8030000c8030000c7fc0000c8030000c8030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008802d00200000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036970365f7674693000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000022000000feffffff0000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000900736d000000000000000000010000000000000021390eb8a10d61905c915cd228ca97b5ce382683c91019c72674282bfdd8705b2bec82c7e6a47fe2fa5de4d4cffd0a70df1168448dd67391da71a4d40daaf91ee10181a6e2cc70723760440ff801aab7fdb67e5c1a436e18b54efa66ad91f24342af8e7ae060ed1b7e8abb92cc6d113df52f3c0fd51ae5f7d2fe47330100000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001627071300000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e64000000658181e193800057000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000fcff0000000000000000000000000000000000000030006463637000000000000000000000e60000000000000000000000000000000000000000000000000000000000000030005345540000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000e5ffffff00000000feffffff"], 0x1) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:33 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x300, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 361.240270][T13798] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:33 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x3e8, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:33 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x3e8, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:33 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x44c, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:33 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x4b8, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:33 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89b1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:33 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 23) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:36:33 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x4b8, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 361.777049][T13839] FAULT_INJECTION: forcing a failure. [ 361.777049][T13839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.790426][T13839] CPU: 1 PID: 13839 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 361.798772][T13839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 361.808865][T13839] Call Trace: [ 361.812160][T13839] [ 361.815103][T13839] dump_stack_lvl+0xda/0x130 [ 361.819760][T13839] dump_stack+0x15/0x20 [ 361.823950][T13839] should_fail_ex+0x21f/0x230 [ 361.828662][T13839] should_fail+0xb/0x10 [ 361.832846][T13839] should_fail_usercopy+0x1a/0x20 [ 361.838071][T13839] _copy_from_user+0x1e/0xd0 [ 361.842715][T13839] copy_msghdr_from_user+0x54/0x2a0 [ 361.847947][T13839] __sys_sendmmsg+0x224/0x500 [ 361.852795][T13839] __x64_sys_sendmmsg+0x57/0x60 [ 361.857674][T13839] do_syscall_64+0x41/0xc0 [ 361.862106][T13839] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 361.868036][T13839] RIP: 0033:0x7fd6b246b169 [ 361.872550][T13839] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 361.892195][T13839] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 361.900661][T13839] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 361.908711][T13839] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 361.916702][T13839] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 361.924713][T13839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 361.932775][T13839] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 361.940800][T13839] 01:36:33 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060040000d0020000d00200000000000000000000d0020000c8030000c8030000c7fc0000c8030000c8030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008802d00200000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036970365f7674693000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000022000000feffffff0000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000900736d000000000000000000010000000000000021390eb8a10d61905c915cd228ca97b5ce382683c91019c72674282bfdd8705b2bec82c7e6a47fe2fa5de4d4cffd0a70df1168448dd67391da71a4d40daaf91ee10181a6e2cc70723760440ff801aab7fdb67e5c1a436e18b54efa66ad91f24342af8e7ae060ed1b7e8abb92cc6d113df52f3c0fd51ae5f7d2fe47330100000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001627071300000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e64000000658181e193800057000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000fcff0000000000000000000000000000000000000030006463637000000000000000000000e60000000000000000000000000000000000000000000000000000000000000030005345540000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000e5ffffff00000000feffffff"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r2, r3, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:33 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x4fb, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:33 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x4fb, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:33 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:33 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x500, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:33 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x500, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 362.156320][T13858] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:34 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x5a0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:34 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x5a0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:34 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x600, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:34 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:34 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 24) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:36:34 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x600, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 362.630106][T13894] FAULT_INJECTION: forcing a failure. [ 362.630106][T13894] name failslab, interval 1, probability 0, space 0, times 0 [ 362.642777][T13894] CPU: 1 PID: 13894 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 362.651165][T13894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 362.661256][T13894] Call Trace: [ 362.664605][T13894] [ 362.667553][T13894] dump_stack_lvl+0xda/0x130 [ 362.672258][T13894] dump_stack+0x15/0x20 [ 362.676411][T13894] should_fail_ex+0x21f/0x230 [ 362.681149][T13894] __should_failslab+0x92/0xa0 [ 362.685914][T13894] should_failslab+0x9/0x20 [ 362.690490][T13894] slab_pre_alloc_hook+0x38/0x180 [ 362.695602][T13894] kmem_cache_alloc_node+0x5d/0x2e0 [ 362.700877][T13894] ? __alloc_skb+0x109/0x2e0 [ 362.705486][T13894] __alloc_skb+0x109/0x2e0 [ 362.709998][T13894] alloc_skb_with_frags+0x80/0x3e0 [ 362.715117][T13894] ? avc_has_perm+0xdc/0x160 [ 362.719784][T13894] ? __rcu_read_unlock+0x4d/0x70 [ 362.724840][T13894] sock_alloc_send_pskb+0x434/0x4e0 [ 362.730065][T13894] unix_dgram_sendmsg+0x3dd/0x1110 [ 362.735230][T13894] ? unix_dgram_poll+0x3e0/0x3e0 [ 362.740220][T13894] ____sys_sendmsg+0x375/0x4c0 [ 362.744997][T13894] __sys_sendmmsg+0x263/0x500 [ 362.749695][T13894] __x64_sys_sendmmsg+0x57/0x60 [ 362.754676][T13894] do_syscall_64+0x41/0xc0 [ 362.759089][T13894] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 362.765007][T13894] RIP: 0033:0x7fd6b246b169 [ 362.769419][T13894] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 362.789038][T13894] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 362.797553][T13894] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 362.805577][T13894] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 362.813694][T13894] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 362.821706][T13894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 362.829730][T13894] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 362.837871][T13894] 01:36:34 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x700, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:34 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x700, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:34 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r2, r3, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:34 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060040000d0020000d00200000000000000000000d0020000c8030000c8030000c7fc0000c8030000c8030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008802d00200000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036970365f7674693000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000022000000feffffff0000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000900736d000000000000000000010000000000000021390eb8a10d61905c915cd228ca97b5ce382683c91019c72674282bfdd8705b2bec82c7e6a47fe2fa5de4d4cffd0a70df1168448dd67391da71a4d40daaf91ee10181a6e2cc70723760440ff801aab7fdb67e5c1a436e18b54efa66ad91f24342af8e7ae060ed1b7e8abb92cc6d113df52f3c0fd51ae5f7d2fe47330100000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001627071300000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e64000000658181e193800057000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000fcff0000000000000000000000000000000000000030006463637000000000000000000000e60000000000000000000000000000000000000000000000000000000000000030005345540000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000e5ffffff00000000feffffff"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 363.202021][T13910] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:35 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x900, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:35 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x900, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:35 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:35 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 25) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:36:35 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xa00, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:35 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xa00, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:35 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xba4, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:35 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:35 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd00, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:35 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:35 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd00, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:35 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xf00, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 364.578026][T13966] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:36 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:36 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 26) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) [ 364.794878][T13980] FAULT_INJECTION: forcing a failure. [ 364.794878][T13980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.808075][T13980] CPU: 0 PID: 13980 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 364.816424][T13980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 364.826495][T13980] Call Trace: [ 364.829780][T13980] [ 364.832719][T13980] dump_stack_lvl+0xda/0x130 [ 364.837428][T13980] dump_stack+0x15/0x20 01:36:36 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1802, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:36 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xf00, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 364.841609][T13980] should_fail_ex+0x21f/0x230 [ 364.846382][T13980] should_fail+0xb/0x10 [ 364.850576][T13980] should_fail_usercopy+0x1a/0x20 [ 364.855622][T13980] _copy_from_user+0x1e/0xd0 [ 364.860302][T13980] copy_msghdr_from_user+0x54/0x2a0 [ 364.865559][T13980] __sys_sendmmsg+0x224/0x500 [ 364.870349][T13980] __x64_sys_sendmmsg+0x57/0x60 [ 364.875306][T13980] do_syscall_64+0x41/0xc0 [ 364.879771][T13980] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 364.885830][T13980] RIP: 0033:0x7fd6b246b169 01:36:36 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x2ee0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 364.890261][T13980] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 364.910071][T13980] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 364.918579][T13980] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 364.926615][T13980] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 364.934603][T13980] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 01:36:36 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1802, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 364.942641][T13980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 364.950637][T13980] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 364.958646][T13980] 01:36:36 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060040000d0020000d00200000000000000000000d0020000c8030000c8030000c7fc0000c8030000c8030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008802d00200000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036970365f7674693000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000022000000feffffff0000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000900736d000000000000000000010000000000000021390eb8a10d61905c915cd228ca97b5ce382683c91019c72674282bfdd8705b2bec82c7e6a47fe2fa5de4d4cffd0a70df1168448dd67391da71a4d40daaf91ee10181a6e2cc70723760440ff801aab7fdb67e5c1a436e18b54efa66ad91f24342af8e7ae060ed1b7e8abb92cc6d113df52f3c0fd51ae5f7d2fe47330100000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001627071300000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e64000000658181e193800057000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000fcff0000000000000000000000000000000000000030006463637000000000000000000000e60000000000000000000000000000000000000000000000000000000000000030005345540000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000e5ffffff00000000feffffff"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:36 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060040000d0020000d00200000000000000000000d0020000c8030000c8030000c7fc0000c8030000c8030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008802d00200000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036970365f7674693000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000022000000feffffff0000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000900736d000000000000000000010000000000000021390eb8a10d61905c915cd228ca97b5ce382683c91019c72674282bfdd8705b2bec82c7e6a47fe2fa5de4d4cffd0a70df1168448dd67391da71a4d40daaf91ee10181a6e2cc70723760440ff801aab7fdb67e5c1a436e18b54efa66ad91f24342af8e7ae060ed1b7e8abb92cc6d113df52f3c0fd51ae5f7d2fe47330100000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001627071300000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e64000000658181e193800057000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000fcff0000000000000000000000000000000000000030006463637000000000000000000000e60000000000000000000000000000000000000000000000000000000000000030005345540000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000e5ffffff00000000feffffff"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:37 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x40049409, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:37 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x3f00, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 365.853620][T14009] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:37 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x2ee0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:37 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 27) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:36:37 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x4000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 366.075189][T14025] FAULT_INJECTION: forcing a failure. [ 366.075189][T14025] name failslab, interval 1, probability 0, space 0, times 0 [ 366.087875][T14025] CPU: 1 PID: 14025 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 366.096284][T14025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 366.106359][T14025] Call Trace: [ 366.109656][T14025] [ 366.112626][T14025] dump_stack_lvl+0xda/0x130 [ 366.117300][T14025] dump_stack+0x15/0x20 [ 366.121473][T14025] should_fail_ex+0x21f/0x230 [ 366.126174][T14025] __should_failslab+0x92/0xa0 [ 366.130972][T14025] should_failslab+0x9/0x20 [ 366.135486][T14025] slab_pre_alloc_hook+0x38/0x180 [ 366.140521][T14025] kmem_cache_alloc_node+0x5d/0x2e0 [ 366.145767][T14025] ? __alloc_skb+0x109/0x2e0 [ 366.150488][T14025] __alloc_skb+0x109/0x2e0 [ 366.155112][T14025] alloc_skb_with_frags+0x80/0x3e0 [ 366.160245][T14025] ? avc_has_perm+0xdc/0x160 [ 366.164958][T14025] ? __rcu_read_unlock+0x4d/0x70 [ 366.169908][T14025] sock_alloc_send_pskb+0x434/0x4e0 [ 366.175136][T14025] unix_dgram_sendmsg+0x3dd/0x1110 [ 366.180369][T14025] ? unix_dgram_poll+0x3e0/0x3e0 [ 366.185477][T14025] ____sys_sendmsg+0x375/0x4c0 [ 366.190359][T14025] __sys_sendmmsg+0x263/0x500 [ 366.195105][T14025] __x64_sys_sendmmsg+0x57/0x60 [ 366.200004][T14025] do_syscall_64+0x41/0xc0 [ 366.204425][T14025] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 366.210369][T14025] RIP: 0033:0x7fd6b246b169 [ 366.214880][T14025] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 366.234505][T14025] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 366.243013][T14025] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 366.251003][T14025] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 366.259056][T14025] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 366.267047][T14025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 01:36:38 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060040000d0020000d00200000000000000000000d0020000c8030000c8030000c7fc0000c8030000c8030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008802d00200000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036970365f7674693000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000022000000feffffff0000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000900736d000000000000000000010000000000000021390eb8a10d61905c915cd228ca97b5ce382683c91019c72674282bfdd8705b2bec82c7e6a47fe2fa5de4d4cffd0a70df1168448dd67391da71a4d40daaf91ee10181a6e2cc70723760440ff801aab7fdb67e5c1a436e18b54efa66ad91f24342af8e7ae060ed1b7e8abb92cc6d113df52f3c0fd51ae5f7d2fe47330100000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001627071300000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e64000000658181e193800057000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000fcff0000000000000000000000000000000000000030006463637000000000000000000000e60000000000000000000000000000000000000000000000000000000000000030005345540000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000e5ffffff00000000feffffff"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x0, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:38 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x4102, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 366.275068][T14025] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 366.283142][T14025] 01:36:38 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x3f00, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:38 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060040000d0020000d00200000000000000000000d0020000c8030000c8030000c7fc0000c8030000c8030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008802d00200000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036970365f7674693000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000022000000feffffff0000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000900736d000000000000000000010000000000000021390eb8a10d61905c915cd228ca97b5ce382683c91019c72674282bfdd8705b2bec82c7e6a47fe2fa5de4d4cffd0a70df1168448dd67391da71a4d40daaf91ee10181a6e2cc70723760440ff801aab7fdb67e5c1a436e18b54efa66ad91f24342af8e7ae060ed1b7e8abb92cc6d113df52f3c0fd51ae5f7d2fe47330100000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001627071300000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e64000000658181e193800057000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000fcff0000000000000000000000000000000000000030006463637000000000000000000000e60000000000000000000000000000000000000000000000000000000000000030005345540000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000e5ffffff00000000feffffff"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:38 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x47ee, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:38 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x40086602, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:38 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 28) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:36:38 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x4000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 366.945198][T14051] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:38 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x4102, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:38 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060040000d0020000d00200000000000000000000d0020000c8030000c8030000c7fc0000c8030000c8030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008802d00200000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036970365f7674693000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000022000000feffffff0000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000900736d000000000000000000010000000000000021390eb8a10d61905c915cd228ca97b5ce382683c91019c72674282bfdd8705b2bec82c7e6a47fe2fa5de4d4cffd0a70df1168448dd67391da71a4d40daaf91ee10181a6e2cc70723760440ff801aab7fdb67e5c1a436e18b54efa66ad91f24342af8e7ae060ed1b7e8abb92cc6d113df52f3c0fd51ae5f7d2fe47330100000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001627071300000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e64000000658181e193800057000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000fcff0000000000000000000000000000000000000030006463637000000000000000000000e60000000000000000000000000000000000000000000000000000000000000030005345540000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000e5ffffff00000000feffffff"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x0, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:38 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r1, r2, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:39 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x4800, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 367.321871][T14075] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:39 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r1, r2, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 367.617306][T14091] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:39 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060040000d0020000d00200000000000000000000d0020000c8030000c8030000c7fc0000c8030000c8030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008802d00200000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036970365f7674693000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000022000000feffffff0000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000900736d000000000000000000010000000000000021390eb8a10d61905c915cd228ca97b5ce382683c91019c72674282bfdd8705b2bec82c7e6a47fe2fa5de4d4cffd0a70df1168448dd67391da71a4d40daaf91ee10181a6e2cc70723760440ff801aab7fdb67e5c1a436e18b54efa66ad91f24342af8e7ae060ed1b7e8abb92cc6d113df52f3c0fd51ae5f7d2fe47330100000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001627071300000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e64000000658181e193800057000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000fcff0000000000000000000000000000000000000030006463637000000000000000000000e60000000000000000000000000000000000000000000000000000000000000030005345540000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000e5ffffff00000000feffffff"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r1, r2, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:39 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x47ee, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:39 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x4c04, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 367.791878][T14097] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:39 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r2, r3, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:39 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x40087602, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:39 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 29) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:36:39 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x4800, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:39 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x5000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 367.937323][T14116] FAULT_INJECTION: forcing a failure. [ 367.937323][T14116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.950443][T14116] CPU: 1 PID: 14116 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 367.958829][T14116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 367.968983][T14116] Call Trace: [ 367.972279][T14116] [ 367.975287][T14116] dump_stack_lvl+0xda/0x130 [ 367.979913][T14116] dump_stack+0x15/0x20 [ 367.984088][T14116] should_fail_ex+0x21f/0x230 [ 367.988793][T14116] should_fail+0xb/0x10 [ 367.992965][T14116] should_fail_usercopy+0x1a/0x20 [ 367.998024][T14116] _copy_from_user+0x1e/0xd0 [ 368.002752][T14116] copy_msghdr_from_user+0x54/0x2a0 [ 368.008076][T14116] __sys_sendmmsg+0x224/0x500 [ 368.012859][T14116] __x64_sys_sendmmsg+0x57/0x60 [ 368.017745][T14116] do_syscall_64+0x41/0xc0 [ 368.022296][T14116] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 368.028284][T14116] RIP: 0033:0x7fd6b246b169 [ 368.032794][T14116] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 368.052492][T14116] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 368.060924][T14116] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 368.068970][T14116] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 368.077064][T14116] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 368.085066][T14116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 368.093038][T14116] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 368.101039][T14116] 01:36:39 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x0, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:39 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x5000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:40 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x6c01, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:40 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x80fe, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:40 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x80fe, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:40 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x401c5820, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:40 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 30) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) [ 368.893862][T14157] FAULT_INJECTION: forcing a failure. [ 368.893862][T14157] name failslab, interval 1, probability 0, space 0, times 0 [ 368.906645][T14157] CPU: 1 PID: 14157 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 368.915011][T14157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 368.925083][T14157] Call Trace: [ 368.928434][T14157] [ 368.931383][T14157] dump_stack_lvl+0xda/0x130 [ 368.936154][T14157] dump_stack+0x15/0x20 [ 368.940325][T14157] should_fail_ex+0x21f/0x230 [ 368.945043][T14157] __should_failslab+0x92/0xa0 [ 368.949934][T14157] should_failslab+0x9/0x20 [ 368.954470][T14157] slab_pre_alloc_hook+0x38/0x180 [ 368.959505][T14157] kmem_cache_alloc_node+0x5d/0x2e0 [ 368.964783][T14157] ? __alloc_skb+0x109/0x2e0 [ 368.969475][T14157] __alloc_skb+0x109/0x2e0 [ 368.974026][T14157] alloc_skb_with_frags+0x80/0x3e0 [ 368.979158][T14157] ? avc_has_perm+0xdc/0x160 [ 368.983777][T14157] ? __rcu_read_unlock+0x4d/0x70 [ 368.988787][T14157] sock_alloc_send_pskb+0x434/0x4e0 [ 368.994013][T14157] unix_dgram_sendmsg+0x3dd/0x1110 [ 368.999186][T14157] ? unix_dgram_poll+0x3e0/0x3e0 [ 369.004139][T14157] ____sys_sendmsg+0x375/0x4c0 [ 369.008930][T14157] __sys_sendmmsg+0x263/0x500 [ 369.013650][T14157] __x64_sys_sendmmsg+0x57/0x60 [ 369.018565][T14157] do_syscall_64+0x41/0xc0 [ 369.023009][T14157] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 369.028973][T14157] RIP: 0033:0x7fd6b246b169 [ 369.033409][T14157] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 369.053115][T14157] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 369.061543][T14157] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 369.069551][T14157] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 369.077557][T14157] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 369.085537][T14157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 369.093521][T14157] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 369.101537][T14157] 01:36:41 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060040000d0020000d00200000000000000000000d0020000c8030000c8030000c7fc0000c8030000c8030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008802d00200000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036970365f7674693000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000022000000feffffff0000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000900736d000000000000000000010000000000000021390eb8a10d61905c915cd228ca97b5ce382683c91019c72674282bfdd8705b2bec82c7e6a47fe2fa5de4d4cffd0a70df1168448dd67391da71a4d40daaf91ee10181a6e2cc70723760440ff801aab7fdb67e5c1a436e18b54efa66ad91f24342af8e7ae060ed1b7e8abb92cc6d113df52f3c0fd51ae5f7d2fe47330100000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001627071300000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e64000000658181e193800057000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000fcff0000000000000000000000000000000000000030006463637000000000000000000000e60000000000000000000000000000000000000000000000000000000000000030005345540000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000e5ffffff00000000feffffff"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r2, r3, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:41 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xa005, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:41 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:41 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xa005, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:41 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xb804, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:41 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xa40b, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:41 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x4020940d, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:41 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 31) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) [ 369.688528][T14186] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:41 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xb804, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:41 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xe02e, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:41 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xe02e, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:42 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xe803, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:42 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r2, r3, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:42 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:42 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xe803, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:42 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xee47, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:42 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x80086601, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:42 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xee47, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:42 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xf401, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:42 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) [ 371.349887][T14255] FAULT_INJECTION: forcing a failure. [ 371.349887][T14255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.363006][T14255] CPU: 1 PID: 14255 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 371.371346][T14255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 371.381442][T14255] Call Trace: [ 371.384724][T14255] [ 371.387664][T14255] dump_stack_lvl+0xda/0x130 [ 371.392297][T14255] dump_stack+0x15/0x20 [ 371.396472][T14255] should_fail_ex+0x21f/0x230 [ 371.401272][T14255] should_fail+0xb/0x10 [ 371.405441][T14255] should_fail_usercopy+0x1a/0x20 [ 371.410485][T14255] _copy_from_user+0x1e/0xd0 [ 371.415106][T14255] copy_msghdr_from_user+0x54/0x2a0 [ 371.420394][T14255] __sys_sendmmsg+0x224/0x500 [ 371.425284][T14255] __x64_sys_sendmmsg+0x57/0x60 [ 371.430326][T14255] do_syscall_64+0x41/0xc0 [ 371.434814][T14255] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 371.440761][T14255] RIP: 0033:0x7fd6b246b169 [ 371.445184][T14255] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 371.465088][T14255] RSP: 002b:00007fd6b179c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 371.473514][T14255] RAX: ffffffffffffffda RBX: 00007fd6b258b120 RCX: 00007fd6b246b169 [ 371.481580][T14255] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 371.489562][T14255] RBP: 00007fd6b179c1d0 R08: 0000000000000000 R09: 0000000000000000 01:36:43 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x80087601, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:43 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 371.497558][T14255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 371.505642][T14255] R13: 00007fff956e916f R14: 00007fd6b179c300 R15: 0000000000022000 [ 371.513625][T14255] 01:36:43 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xf401, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 371.550044][T14249] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:44 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:44 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x801c581f, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:44 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfb04, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:44 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 33) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:36:44 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfb04, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:44 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060040000d0020000d00200000000000000000000d0020000c8030000c8030000c7fc0000c8030000c8030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008802d00200000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036970365f7674693000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000022000000feffffff0000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000900736d000000000000000000010000000000000021390eb8a10d61905c915cd228ca97b5ce382683c91019c72674282bfdd8705b2bec82c7e6a47fe2fa5de4d4cffd0a70df1168448dd67391da71a4d40daaf91ee10181a6e2cc70723760440ff801aab7fdb67e5c1a436e18b54efa66ad91f24342af8e7ae060ed1b7e8abb92cc6d113df52f3c0fd51ae5f7d2fe47330100000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001627071300000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e64000000658181e193800057000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000fcff0000000000000000000000000000000000000030006463637000000000000000000000e60000000000000000000000000000000000000000000000000000000000000030005345540000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000e5ffffff00000000feffffff"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:44 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfe80, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 372.930635][T14281] FAULT_INJECTION: forcing a failure. [ 372.930635][T14281] name failslab, interval 1, probability 0, space 0, times 0 [ 372.943294][T14281] CPU: 0 PID: 14281 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 372.951650][T14281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 372.961757][T14281] Call Trace: [ 372.965134][T14281] [ 372.968108][T14281] dump_stack_lvl+0xda/0x130 [ 372.972877][T14281] dump_stack+0x15/0x20 [ 372.977109][T14281] should_fail_ex+0x21f/0x230 [ 372.981811][T14281] __should_failslab+0x92/0xa0 [ 372.986653][T14281] should_failslab+0x9/0x20 [ 372.991192][T14281] slab_pre_alloc_hook+0x38/0x180 [ 372.996266][T14281] kmem_cache_alloc_node+0x5d/0x2e0 [ 373.001557][T14281] ? __alloc_skb+0x109/0x2e0 [ 373.006170][T14281] __alloc_skb+0x109/0x2e0 [ 373.010718][T14281] alloc_skb_with_frags+0x80/0x3e0 [ 373.015910][T14281] ? avc_has_perm+0xdc/0x160 [ 373.020678][T14281] ? __rcu_read_unlock+0x4d/0x70 [ 373.025713][T14281] sock_alloc_send_pskb+0x434/0x4e0 [ 373.031065][T14281] unix_dgram_sendmsg+0x3dd/0x1110 [ 373.036202][T14281] ? unix_dgram_poll+0x3e0/0x3e0 [ 373.041293][T14281] ____sys_sendmsg+0x375/0x4c0 [ 373.046090][T14281] __sys_sendmmsg+0x263/0x500 [ 373.050832][T14281] __x64_sys_sendmmsg+0x57/0x60 [ 373.055714][T14281] do_syscall_64+0x41/0xc0 [ 373.060195][T14281] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 373.066239][T14281] RIP: 0033:0x7fd6b246b169 [ 373.070660][T14281] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 373.090307][T14281] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 373.098735][T14281] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 373.106791][T14281] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 373.114780][T14281] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 373.122834][T14281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 373.130821][T14281] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 373.138808][T14281] [ 373.143042][T14293] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:46 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:46 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0xc0045878, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:46 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfe80, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:46 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x17091, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:46 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060040000d0020000d00200000000000000000000d0020000c8030000c8030000c7fc0000c8030000c8030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008802d00200000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036970365f7674693000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000022000000feffffff0000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000900736d000000000000000000010000000000000021390eb8a10d61905c915cd228ca97b5ce382683c91019c72674282bfdd8705b2bec82c7e6a47fe2fa5de4d4cffd0a70df1168448dd67391da71a4d40daaf91ee10181a6e2cc70723760440ff801aab7fdb67e5c1a436e18b54efa66ad91f24342af8e7ae060ed1b7e8abb92cc6d113df52f3c0fd51ae5f7d2fe47330100000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001627071300000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e64000000658181e193800057000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000fcff0000000000000000000000000000000000000030006463637000000000000000000000e60000000000000000000000000000000000000000000000000000000000000030005345540000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000e5ffffff00000000feffffff"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:46 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 34) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:36:46 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x20000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 375.438257][T14327] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:47 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0xc0045878, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:47 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:47 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x20000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:47 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x100000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:47 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 376.659186][T14357] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:48 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0xc0189436, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:48 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:49 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 35) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:36:49 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r2, r3, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:49 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x537ed, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:49 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0xc020660b, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 377.643441][T14379] FAULT_INJECTION: forcing a failure. [ 377.643441][T14379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.656586][T14379] CPU: 1 PID: 14379 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 377.664944][T14379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 377.675007][T14379] Call Trace: [ 377.678374][T14379] [ 377.681313][T14379] dump_stack_lvl+0xda/0x130 [ 377.685968][T14379] dump_stack+0x15/0x20 [ 377.690134][T14379] should_fail_ex+0x21f/0x230 [ 377.694847][T14379] should_fail+0xb/0x10 [ 377.699089][T14379] should_fail_usercopy+0x1a/0x20 [ 377.704164][T14379] _copy_from_user+0x1e/0xd0 [ 377.708810][T14379] copy_msghdr_from_user+0x54/0x2a0 [ 377.714111][T14379] __sys_sendmmsg+0x224/0x500 [ 377.718834][T14379] __x64_sys_sendmmsg+0x57/0x60 [ 377.723908][T14379] do_syscall_64+0x41/0xc0 [ 377.728416][T14379] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 377.734350][T14379] RIP: 0033:0x7fd6b246b169 01:36:49 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060040000d0020000d00200000000000000000000d0020000c8030000c8030000c7fc0000c8030000c8030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008802d00200000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036970365f7674693000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000022000000feffffff0000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000900736d000000000000000000010000000000000021390eb8a10d61905c915cd228ca97b5ce382683c91019c72674282bfdd8705b2bec82c7e6a47fe2fa5de4d4cffd0a70df1168448dd67391da71a4d40daaf91ee10181a6e2cc70723760440ff801aab7fdb67e5c1a436e18b54efa66ad91f24342af8e7ae060ed1b7e8abb92cc6d113df52f3c0fd51ae5f7d2fe47330100000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001627071300000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e64000000658181e193800057000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000fcff0000000000000000000000000000000000000030006463637000000000000000000000e60000000000000000000000000000000000000000000000000000000000000030005345540000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000e5ffffff00000000feffffff"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:49 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x400000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:49 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x100000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 377.738774][T14379] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 377.758646][T14379] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 377.767127][T14379] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 377.775125][T14379] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 377.783121][T14379] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 01:36:49 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x20c49b, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 377.791125][T14379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 377.799119][T14379] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 377.807240][T14379] [ 378.147474][T14403] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:49 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x400000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:49 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x800000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:50 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:50 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x800000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:50 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 36) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) [ 378.486788][T14426] FAULT_INJECTION: forcing a failure. [ 378.486788][T14426] name failslab, interval 1, probability 0, space 0, times 0 [ 378.499555][T14426] CPU: 0 PID: 14426 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 378.507908][T14426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 378.518058][T14426] Call Trace: [ 378.521370][T14426] [ 378.524387][T14426] dump_stack_lvl+0xda/0x130 [ 378.529002][T14426] dump_stack+0x15/0x20 [ 378.533370][T14426] should_fail_ex+0x21f/0x230 [ 378.538225][T14426] __should_failslab+0x92/0xa0 [ 378.543084][T14426] should_failslab+0x9/0x20 [ 378.547691][T14426] slab_pre_alloc_hook+0x38/0x180 [ 378.552727][T14426] kmem_cache_alloc_node+0x5d/0x2e0 [ 378.558003][T14426] ? __alloc_skb+0x109/0x2e0 [ 378.562617][T14426] __alloc_skb+0x109/0x2e0 [ 378.567072][T14426] alloc_skb_with_frags+0x80/0x3e0 [ 378.572197][T14426] ? avc_has_perm+0xdc/0x160 [ 378.576810][T14426] ? __rcu_read_unlock+0x4d/0x70 [ 378.581778][T14426] sock_alloc_send_pskb+0x434/0x4e0 [ 378.587002][T14426] unix_dgram_sendmsg+0x3dd/0x1110 [ 378.592238][T14426] ? unix_dgram_poll+0x3e0/0x3e0 [ 378.597274][T14426] ____sys_sendmsg+0x375/0x4c0 [ 378.602058][T14426] __sys_sendmmsg+0x263/0x500 [ 378.606842][T14426] __x64_sys_sendmmsg+0x57/0x60 [ 378.611766][T14426] do_syscall_64+0x41/0xc0 [ 378.616367][T14426] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 378.622293][T14426] RIP: 0033:0x7fd6b246b169 [ 378.626720][T14426] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 378.646370][T14426] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 378.654835][T14426] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 378.662818][T14426] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 378.670823][T14426] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 378.678880][T14426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 01:36:50 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r2, r3, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:50 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x2000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:50 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:50 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:50 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 378.686874][T14426] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 378.694865][T14426] 01:36:50 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x3000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:50 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x2000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 379.313438][T14453] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:51 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 37) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:36:51 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x4000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:51 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:51 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x2, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:51 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x3000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:52 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r2, r3, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:52 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x4fb0000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:52 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 38) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:36:52 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x4000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:52 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:52 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:52 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x4fb0000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 381.318709][T14497] FAULT_INJECTION: forcing a failure. [ 381.318709][T14497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.331805][T14497] CPU: 1 PID: 14497 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 381.340155][T14497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 381.350285][T14497] Call Trace: [ 381.353613][T14497] [ 381.356621][T14497] dump_stack_lvl+0xda/0x130 [ 381.361314][T14497] dump_stack+0x15/0x20 [ 381.365555][T14497] should_fail_ex+0x21f/0x230 [ 381.370287][T14497] should_fail+0xb/0x10 [ 381.374456][T14497] should_fail_usercopy+0x1a/0x20 [ 381.379506][T14497] _copy_from_user+0x1e/0xd0 [ 381.384120][T14497] copy_msghdr_from_user+0x54/0x2a0 [ 381.389353][T14497] __sys_sendmmsg+0x224/0x500 [ 381.394067][T14497] __x64_sys_sendmmsg+0x57/0x60 [ 381.399003][T14497] do_syscall_64+0x41/0xc0 [ 381.403439][T14497] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 381.409460][T14497] RIP: 0033:0x7fd6b246b169 [ 381.413908][T14497] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 381.433549][T14497] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 381.441977][T14497] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 381.450034][T14497] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 381.458058][T14497] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 01:36:53 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x5000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 381.466187][T14497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 381.474254][T14497] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 381.482331][T14497] 01:36:53 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x2, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 381.530205][T14513] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:53 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060040000d0020000d00200000000000000000000d0020000c8030000c8030000c7fc0000c8030000c8030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008802d00200000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036970365f7674693000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000022000000feffffff0000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000900736d000000000000000000010000000000000021390eb8a10d61905c915cd228ca97b5ce382683c91019c72674282bfdd8705b2bec82c7e6a47fe2fa5de4d4cffd0a70df1168448dd67391da71a4d40daaf91ee10181a6e2cc70723760440ff801aab7fdb67e5c1a436e18b54efa66ad91f24342af8e7ae060ed1b7e8abb92cc6d113df52f3c0fd51ae5f7d2fe47330100000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001627071300000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e64000000658181e193800057000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000fcff0000000000000000000000000000000000000030006463637000000000000000000000e60000000000000000000000000000000000000000000000000000000000000030005345540000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000e5ffffff00000000feffffff"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:53 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x5000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:53 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x6000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:54 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:54 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x6000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:54 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x7000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:54 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:54 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) 01:36:54 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 39) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:36:54 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x7000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:54 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x8000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 382.779427][T14546] FAULT_INJECTION: forcing a failure. [ 382.779427][T14546] name failslab, interval 1, probability 0, space 0, times 0 [ 382.792111][T14546] CPU: 0 PID: 14546 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 382.800464][T14546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 382.810627][T14546] Call Trace: [ 382.813919][T14546] [ 382.816867][T14546] dump_stack_lvl+0xda/0x130 [ 382.821476][T14546] dump_stack+0x15/0x20 01:36:54 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x8000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 382.825702][T14546] should_fail_ex+0x21f/0x230 [ 382.830467][T14546] __should_failslab+0x92/0xa0 [ 382.835246][T14546] should_failslab+0x9/0x20 [ 382.839777][T14546] slab_pre_alloc_hook+0x38/0x180 [ 382.844851][T14546] kmem_cache_alloc_node+0x5d/0x2e0 [ 382.850071][T14546] ? __alloc_skb+0x109/0x2e0 [ 382.854760][T14546] __alloc_skb+0x109/0x2e0 [ 382.859246][T14546] alloc_skb_with_frags+0x80/0x3e0 [ 382.864449][T14546] ? avc_has_perm+0xdc/0x160 [ 382.869089][T14546] ? __rcu_read_unlock+0x4d/0x70 [ 382.874059][T14546] sock_alloc_send_pskb+0x434/0x4e0 01:36:54 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x9000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 382.879293][T14546] unix_dgram_sendmsg+0x3dd/0x1110 [ 382.884523][T14546] ? unix_dgram_poll+0x3e0/0x3e0 [ 382.889583][T14546] ____sys_sendmsg+0x375/0x4c0 [ 382.894497][T14546] __sys_sendmmsg+0x263/0x500 [ 382.899270][T14546] __x64_sys_sendmmsg+0x57/0x60 [ 382.904152][T14546] do_syscall_64+0x41/0xc0 [ 382.908582][T14546] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 382.914591][T14546] RIP: 0033:0x7fd6b246b169 01:36:54 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x9000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 382.919020][T14546] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 382.938871][T14546] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 382.947434][T14546] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 382.955484][T14546] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 382.963521][T14546] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 382.971517][T14546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 382.979517][T14546] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 382.987584][T14546] [ 383.988254][T14585] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:55 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xa000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:56 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:56 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xa000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:56 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:36:56 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) 01:36:56 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:56 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x2, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:56 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xf000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:36:56 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 385.428075][T14625] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:57 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) 01:36:57 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xf000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:57 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 41) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:36:57 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x1000000, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 386.269283][T14641] FAULT_INJECTION: forcing a failure. [ 386.269283][T14641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.282445][T14641] CPU: 1 PID: 14641 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 386.290861][T14641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 386.300912][T14641] Call Trace: [ 386.304202][T14641] [ 386.307135][T14641] dump_stack_lvl+0xda/0x130 [ 386.311735][T14641] dump_stack+0x15/0x20 [ 386.315994][T14641] should_fail_ex+0x21f/0x230 [ 386.320688][T14641] should_fail+0xb/0x10 [ 386.324969][T14641] should_fail_usercopy+0x1a/0x20 [ 386.330150][T14641] _copy_from_user+0x1e/0xd0 [ 386.334835][T14641] copy_msghdr_from_user+0x54/0x2a0 [ 386.340062][T14641] __sys_sendmmsg+0x224/0x500 [ 386.344768][T14641] __x64_sys_sendmmsg+0x57/0x60 [ 386.349732][T14641] do_syscall_64+0x41/0xc0 [ 386.354166][T14641] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 386.360159][T14641] RIP: 0033:0x7fd6b246b169 [ 386.364607][T14641] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 386.384296][T14641] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 386.392746][T14641] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 386.400737][T14641] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 386.408719][T14641] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 01:36:57 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:58 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x10000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:58 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x10000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 386.416721][T14641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 386.424796][T14641] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 386.433021][T14641] 01:36:58 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x2000000, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:58 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) [ 386.596708][T14669] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:36:59 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:36:59 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 42) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:36:59 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x146273f8, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:36:59 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060040000d0020000d00200000000000000000000d0020000c8030000c8030000c7fc0000c8030000c8030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008802d00200000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036970365f7674693000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000022000000feffffff0000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000900736d000000000000000000010000000000000021390eb8a10d61905c915cd228ca97b5ce382683c91019c72674282bfdd8705b2bec82c7e6a47fe2fa5de4d4cffd0a70df1168448dd67391da71a4d40daaf91ee10181a6e2cc70723760440ff801aab7fdb67e5c1a436e18b54efa66ad91f24342af8e7ae060ed1b7e8abb92cc6d113df52f3c0fd51ae5f7d2fe47330100000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001627071300000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e64000000658181e193800057000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000fcff0000000000000000000000000000000000000030006463637000000000000000000000e60000000000000000000000000000000000000000000000000000000000000030005345540000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000e5ffffff00000000feffffff"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) 01:36:59 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback={0x2}, @rand_addr=' \x01\x00'}}) [ 387.710289][T14695] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 388.091261][T14698] FAULT_INJECTION: forcing a failure. [ 388.091261][T14698] name failslab, interval 1, probability 0, space 0, times 0 [ 388.104116][T14698] CPU: 0 PID: 14698 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 388.112507][T14698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 388.122587][T14698] Call Trace: [ 388.125885][T14698] [ 388.128885][T14698] dump_stack_lvl+0xda/0x130 [ 388.133495][T14698] dump_stack+0x15/0x20 [ 388.137664][T14698] should_fail_ex+0x21f/0x230 [ 388.142408][T14698] __should_failslab+0x92/0xa0 [ 388.147184][T14698] should_failslab+0x9/0x20 [ 388.151783][T14698] slab_pre_alloc_hook+0x38/0x180 [ 388.156818][T14698] kmem_cache_alloc_node+0x5d/0x2e0 [ 388.162068][T14698] ? __alloc_skb+0x109/0x2e0 [ 388.166771][T14698] __alloc_skb+0x109/0x2e0 [ 388.171218][T14698] alloc_skb_with_frags+0x80/0x3e0 [ 388.176443][T14698] ? avc_has_perm+0xdc/0x160 [ 388.181067][T14698] ? __rcu_read_unlock+0x4d/0x70 [ 388.186024][T14698] sock_alloc_send_pskb+0x434/0x4e0 [ 388.191311][T14698] unix_dgram_sendmsg+0x3dd/0x1110 [ 388.196451][T14698] ? unix_dgram_poll+0x3e0/0x3e0 [ 388.201491][T14698] ____sys_sendmsg+0x375/0x4c0 [ 388.206286][T14698] __sys_sendmmsg+0x263/0x500 [ 388.211048][T14698] __x64_sys_sendmmsg+0x57/0x60 [ 388.216003][T14698] do_syscall_64+0x41/0xc0 [ 388.220507][T14698] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 388.226468][T14698] RIP: 0033:0x7fd6b246b169 [ 388.230907][T14698] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 388.250545][T14698] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 388.258978][T14698] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 388.266986][T14698] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 388.274989][T14698] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 388.282969][T14698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 388.290942][T14698] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 388.298971][T14698] 01:37:00 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x14519658, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:00 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback={0x1000000}, @rand_addr=' \x01\x00'}}) 01:37:00 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:00 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 43) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:37:00 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) 01:37:00 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x18020000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:00 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x18020000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:00 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1b89a1f1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 389.587980][T14737] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:37:01 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback={0x2000000}, @rand_addr=' \x01\x00'}}) 01:37:01 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x3f000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:01 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 44) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:37:01 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060040000d0020000d00200000000000000000000d0020000c8030000c8030000c7fc0000c8030000c8030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008802d00200000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036970365f7674693000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000022000000feffffff0000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000900736d000000000000000000010000000000000021390eb8a10d61905c915cd228ca97b5ce382683c91019c72674282bfdd8705b2bec82c7e6a47fe2fa5de4d4cffd0a70df1168448dd67391da71a4d40daaf91ee10181a6e2cc70723760440ff801aab7fdb67e5c1a436e18b54efa66ad91f24342af8e7ae060ed1b7e8abb92cc6d113df52f3c0fd51ae5f7d2fe47330100000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001627071300000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e64000000658181e193800057000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000fcff0000000000000000000000000000000000000030006463637000000000000000000000e60000000000000000000000000000000000000000000000000000000000000030005345540000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000e5ffffff00000000feffffff"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:01 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:01 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x3f000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 390.514637][T14763] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 390.525284][T14755] FAULT_INJECTION: forcing a failure. [ 390.525284][T14755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.538369][T14755] CPU: 0 PID: 14755 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 390.546708][T14755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 390.556817][T14755] Call Trace: [ 390.560116][T14755] [ 390.563068][T14755] dump_stack_lvl+0xda/0x130 [ 390.567675][T14755] dump_stack+0x15/0x20 [ 390.571926][T14755] should_fail_ex+0x21f/0x230 [ 390.576704][T14755] should_fail+0xb/0x10 [ 390.580880][T14755] should_fail_usercopy+0x1a/0x20 [ 390.585941][T14755] _copy_from_user+0x1e/0xd0 [ 390.590708][T14755] copy_msghdr_from_user+0x54/0x2a0 [ 390.596017][T14755] __sys_sendmmsg+0x224/0x500 [ 390.600747][T14755] __x64_sys_sendmmsg+0x57/0x60 [ 390.605635][T14755] do_syscall_64+0x41/0xc0 [ 390.610063][T14755] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 390.615987][T14755] RIP: 0033:0x7fd6b246b169 [ 390.620436][T14755] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 390.640066][T14755] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 390.648554][T14755] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 390.656535][T14755] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 390.664563][T14755] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 390.672566][T14755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 390.680543][T14755] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 390.688596][T14755] 01:37:02 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x40000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:02 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x40000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:02 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback={0x100000000000000}, @rand_addr=' \x01\x00'}}) 01:37:02 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 45) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:37:03 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x41020000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:03 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x41020000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:03 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060040000d0020000d00200000000000000000000d0020000c8030000c8030000c7fc0000c8030000c8030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008802d00200000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036970365f7674693000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000022000000feffffff0000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000900736d000000000000000000010000000000000021390eb8a10d61905c915cd228ca97b5ce382683c91019c72674282bfdd8705b2bec82c7e6a47fe2fa5de4d4cffd0a70df1168448dd67391da71a4d40daaf91ee10181a6e2cc70723760440ff801aab7fdb67e5c1a436e18b54efa66ad91f24342af8e7ae060ed1b7e8abb92cc6d113df52f3c0fd51ae5f7d2fe47330100000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001627071300000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e64000000658181e193800057000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000fcff0000000000000000000000000000000000000030006463637000000000000000000000e60000000000000000000000000000000000000000000000000000000000000030005345540000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000e5ffffff00000000feffffff"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 391.386794][T14795] FAULT_INJECTION: forcing a failure. [ 391.386794][T14795] name failslab, interval 1, probability 0, space 0, times 0 [ 391.399490][T14795] CPU: 1 PID: 14795 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 391.407849][T14795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 391.418102][T14795] Call Trace: [ 391.421414][T14795] [ 391.424353][T14795] dump_stack_lvl+0xda/0x130 [ 391.429029][T14795] dump_stack+0x15/0x20 [ 391.433205][T14795] should_fail_ex+0x21f/0x230 [ 391.437911][T14795] __should_failslab+0x92/0xa0 [ 391.442700][T14795] should_failslab+0x9/0x20 [ 391.447498][T14795] slab_pre_alloc_hook+0x38/0x180 [ 391.452637][T14795] kmem_cache_alloc_node+0x5d/0x2e0 [ 391.457965][T14795] ? __alloc_skb+0x109/0x2e0 [ 391.462582][T14795] __alloc_skb+0x109/0x2e0 [ 391.467082][T14795] alloc_skb_with_frags+0x80/0x3e0 [ 391.472213][T14795] ? _raw_spin_unlock+0x26/0x40 [ 391.477237][T14795] ? finish_task_switch+0xac/0x280 [ 391.482363][T14795] sock_alloc_send_pskb+0x434/0x4e0 [ 391.487598][T14795] unix_dgram_sendmsg+0x3dd/0x1110 [ 391.492755][T14795] ? unix_dgram_poll+0x3e0/0x3e0 [ 391.497740][T14795] ____sys_sendmsg+0x375/0x4c0 [ 391.502654][T14795] __sys_sendmmsg+0x263/0x500 [ 391.507383][T14795] __x64_sys_sendmmsg+0x57/0x60 [ 391.512357][T14795] do_syscall_64+0x41/0xc0 [ 391.516870][T14795] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 391.522887][T14795] RIP: 0033:0x7fd6b246b169 01:37:03 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x47ee0000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:03 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x47ee0000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 391.527318][T14795] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 391.547499][T14795] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 391.555934][T14795] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 391.563936][T14795] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 391.571977][T14795] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 01:37:03 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060040000d0020000d00200000000000000000000d0020000c8030000c8030000c7fc0000c8030000c8030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008802d00200000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036970365f7674693000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000022000000feffffff0000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000900736d000000000000000000010000000000000021390eb8a10d61905c915cd228ca97b5ce382683c91019c72674282bfdd8705b2bec82c7e6a47fe2fa5de4d4cffd0a70df1168448dd67391da71a4d40daaf91ee10181a6e2cc70723760440ff801aab7fdb67e5c1a436e18b54efa66ad91f24342af8e7ae060ed1b7e8abb92cc6d113df52f3c0fd51ae5f7d2fe47330100000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001627071300000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e64000000658181e193800057000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000fcff0000000000000000000000000000000000000030006463637000000000000000000000e60000000000000000000000000000000000000000000000000000000000000030005345540000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000e5ffffff00000000feffffff"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:03 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x48000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:03 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x48000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 391.579974][T14795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 391.588027][T14795] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 391.596035][T14795] [ 391.604558][T14814] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:37:03 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x4c040000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:03 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback={0x200000000000000}, @rand_addr=' \x01\x00'}}) 01:37:03 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x50000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:03 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 46) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:37:04 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x58965114, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:04 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060040000d0020000d00200000000000000000000d0020000c8030000c8030000c7fc0000c8030000c8030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008802d00200000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036970365f7674693000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000022000000feffffff0000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000900736d000000000000000000010000000000000021390eb8a10d61905c915cd228ca97b5ce382683c91019c72674282bfdd8705b2bec82c7e6a47fe2fa5de4d4cffd0a70df1168448dd67391da71a4d40daaf91ee10181a6e2cc70723760440ff801aab7fdb67e5c1a436e18b54efa66ad91f24342af8e7ae060ed1b7e8abb92cc6d113df52f3c0fd51ae5f7d2fe47330100000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001627071300000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e64000000658181e193800057000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000fcff0000000000000000000000000000000000000030006463637000000000000000000000e60000000000000000000000000000000000000000000000000000000000000030005345540000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000e5ffffff00000000feffffff"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:04 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x50000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:04 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x5b7a43f3, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:04 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00'}}) 01:37:04 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x6c010000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 392.543847][T14871] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:37:04 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback={0x0, 0x2}, @rand_addr=' \x01\x00'}}) 01:37:04 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x8532c8c2, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:04 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x801001f7, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:04 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x8dffffff, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:04 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x8dffffff, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:05 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 47) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:37:05 executing program 2: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x10000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 393.357290][T14900] FAULT_INJECTION: forcing a failure. [ 393.357290][T14900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.370493][T14900] CPU: 1 PID: 14900 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 393.378850][T14900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 393.389007][T14900] Call Trace: [ 393.392299][T14900] [ 393.395235][T14900] dump_stack_lvl+0xda/0x130 [ 393.399845][T14900] dump_stack+0x15/0x20 [ 393.404223][T14900] should_fail_ex+0x21f/0x230 [ 393.409062][T14900] should_fail+0xb/0x10 [ 393.413257][T14900] should_fail_usercopy+0x1a/0x20 [ 393.418396][T14900] _copy_from_user+0x1e/0xd0 [ 393.423015][T14900] copy_msghdr_from_user+0x54/0x2a0 [ 393.428359][T14900] __sys_sendmmsg+0x224/0x500 [ 393.433107][T14900] __x64_sys_sendmmsg+0x57/0x60 [ 393.437999][T14900] do_syscall_64+0x41/0xc0 [ 393.442433][T14900] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 393.448389][T14900] RIP: 0033:0x7fd6b246b169 [ 393.452917][T14900] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 393.472550][T14900] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 393.480983][T14900] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 393.488966][T14900] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 393.496950][T14900] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 393.504935][T14900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 393.512914][T14900] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 393.520898][T14900] 01:37:05 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:05 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x91700100, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:05 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x91ffffff, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:05 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x2, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:05 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback={0x0, 0x500}, @rand_addr=' \x01\x00'}}) 01:37:05 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x91ffffff, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:05 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xa0050000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:06 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 48) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) [ 394.422456][T14944] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:37:06 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:06 executing program 2: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:06 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x9bc42000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:06 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xa40b0000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 394.622308][T14949] FAULT_INJECTION: forcing a failure. [ 394.622308][T14949] name failslab, interval 1, probability 0, space 0, times 0 [ 394.635085][T14949] CPU: 1 PID: 14949 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 394.643463][T14949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 394.653560][T14949] Call Trace: [ 394.656886][T14949] [ 394.659833][T14949] dump_stack_lvl+0xda/0x130 [ 394.664468][T14949] dump_stack+0x15/0x20 [ 394.668634][T14949] should_fail_ex+0x21f/0x230 [ 394.673321][T14949] __should_failslab+0x92/0xa0 [ 394.678095][T14949] should_failslab+0x9/0x20 [ 394.682732][T14949] slab_pre_alloc_hook+0x38/0x180 [ 394.687789][T14949] kmem_cache_alloc_node+0x5d/0x2e0 [ 394.693000][T14949] ? __alloc_skb+0x109/0x2e0 [ 394.697659][T14949] __alloc_skb+0x109/0x2e0 [ 394.702254][T14949] alloc_skb_with_frags+0x80/0x3e0 [ 394.707457][T14949] ? avc_has_perm+0xdc/0x160 [ 394.712062][T14949] ? __rcu_read_unlock+0x4d/0x70 [ 394.717038][T14949] sock_alloc_send_pskb+0x434/0x4e0 [ 394.722316][T14949] unix_dgram_sendmsg+0x3dd/0x1110 [ 394.727549][T14949] ? unix_dgram_poll+0x3e0/0x3e0 [ 394.732525][T14949] ____sys_sendmsg+0x375/0x4c0 [ 394.737458][T14949] __sys_sendmmsg+0x263/0x500 [ 394.742248][T14949] __x64_sys_sendmmsg+0x57/0x60 [ 394.747170][T14949] do_syscall_64+0x41/0xc0 [ 394.751642][T14949] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 394.757566][T14949] RIP: 0033:0x7fd6b246b169 [ 394.761989][T14949] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 394.781647][T14949] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 394.790143][T14949] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 394.798123][T14949] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 394.806192][T14949] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 394.814171][T14949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 394.822149][T14949] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 394.830134][T14949] 01:37:07 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:07 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x9c0bbaf8, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:07 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xb8040000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:07 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:07 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 49) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:37:07 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00', 0x2}}) 01:37:07 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xa0050000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 396.398190][T14993] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 396.508113][T14994] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:08 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xc2c83285, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:08 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:08 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xb8040000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:08 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:08 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 50) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:37:08 executing program 2: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x7000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 396.882818][T15011] FAULT_INJECTION: forcing a failure. [ 396.882818][T15011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.896067][T15011] CPU: 1 PID: 15011 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 396.904561][T15011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 396.914632][T15011] Call Trace: [ 396.917917][T15011] [ 396.920859][T15011] dump_stack_lvl+0xda/0x130 [ 396.925577][T15011] dump_stack+0x15/0x20 [ 396.929744][T15011] should_fail_ex+0x21f/0x230 [ 396.934576][T15011] should_fail+0xb/0x10 [ 396.938827][T15011] should_fail_usercopy+0x1a/0x20 [ 396.943868][T15011] _copy_from_user+0x1e/0xd0 [ 396.948520][T15011] copy_msghdr_from_user+0x54/0x2a0 [ 396.953748][T15011] __sys_sendmmsg+0x224/0x500 [ 396.958588][T15011] __x64_sys_sendmmsg+0x57/0x60 [ 396.963480][T15011] do_syscall_64+0x41/0xc0 [ 396.967912][T15011] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 396.973853][T15011] RIP: 0033:0x7fd6b246b169 [ 396.978282][T15011] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 396.997963][T15011] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 397.006391][T15011] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 397.014397][T15011] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 397.022432][T15011] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 397.030427][T15011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 397.038429][T15011] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 397.046493][T15011] 01:37:09 executing program 2: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x4000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:09 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xe02e0000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 397.313016][T15025] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:37:09 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xe02e0000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:09 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xe8030000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:09 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00', 0x0, 0x2}}) 01:37:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:09 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xe8030000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:09 executing program 2: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x100000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:09 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 51) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:37:09 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xf3437a5b, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 398.293278][T15068] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 398.348356][T15053] FAULT_INJECTION: forcing a failure. [ 398.348356][T15053] name failslab, interval 1, probability 0, space 0, times 0 [ 398.361086][T15053] CPU: 1 PID: 15053 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 398.369439][T15053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 398.379501][T15053] Call Trace: [ 398.382797][T15053] [ 398.385737][T15053] dump_stack_lvl+0xda/0x130 [ 398.390348][T15053] dump_stack+0x15/0x20 [ 398.394611][T15053] should_fail_ex+0x21f/0x230 [ 398.399310][T15053] __should_failslab+0x92/0xa0 [ 398.404095][T15053] should_failslab+0x9/0x20 [ 398.408621][T15053] slab_pre_alloc_hook+0x38/0x180 [ 398.413672][T15053] kmem_cache_alloc_node+0x5d/0x2e0 [ 398.418900][T15053] ? __alloc_skb+0x109/0x2e0 [ 398.423564][T15053] __alloc_skb+0x109/0x2e0 [ 398.428043][T15053] alloc_skb_with_frags+0x80/0x3e0 [ 398.433242][T15053] ? _raw_spin_unlock+0x26/0x40 [ 398.438117][T15053] ? finish_task_switch+0xac/0x280 [ 398.443308][T15053] sock_alloc_send_pskb+0x434/0x4e0 [ 398.448604][T15053] unix_dgram_sendmsg+0x3dd/0x1110 [ 398.453830][T15053] ? unix_dgram_poll+0x3e0/0x3e0 [ 398.458796][T15053] ____sys_sendmsg+0x375/0x4c0 [ 398.463610][T15053] __sys_sendmmsg+0x263/0x500 [ 398.468376][T15053] __x64_sys_sendmmsg+0x57/0x60 [ 398.473335][T15053] do_syscall_64+0x41/0xc0 [ 398.477838][T15053] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 398.483792][T15053] RIP: 0033:0x7fd6b246b169 [ 398.488285][T15053] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 398.508125][T15053] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 398.516571][T15053] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 398.524563][T15053] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 398.532548][T15053] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 398.540608][T15053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 01:37:10 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0xc0189436, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:10 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:10 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xed370500, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:10 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xf4010000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 398.548599][T15053] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 398.556671][T15053] 01:37:10 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xf1a1891b, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:10 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:10 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xf5ffffff, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:10 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 52) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) [ 399.289556][T15101] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:37:11 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xf4010000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:11 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfe800000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:11 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00', 0x0, 0x0, 0x2}}) 01:37:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:11 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xf5ffffff, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:11 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xffffff8d, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:11 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xf7011080, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 400.028006][T15131] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:11 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 53) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) [ 400.297669][T15143] FAULT_INJECTION: forcing a failure. [ 400.297669][T15143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.310879][T15143] CPU: 1 PID: 15143 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 400.319223][T15143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 400.329291][T15143] Call Trace: [ 400.332575][T15143] [ 400.335518][T15143] dump_stack_lvl+0xda/0x130 [ 400.340178][T15143] dump_stack+0x15/0x20 [ 400.344490][T15143] should_fail_ex+0x21f/0x230 [ 400.349204][T15143] should_fail+0xb/0x10 [ 400.353386][T15143] should_fail_usercopy+0x1a/0x20 [ 400.358446][T15143] _copy_from_user+0x1e/0xd0 [ 400.363073][T15143] copy_msghdr_from_user+0x54/0x2a0 [ 400.368304][T15143] __sys_sendmmsg+0x224/0x500 [ 400.373085][T15143] __x64_sys_sendmmsg+0x57/0x60 [ 400.378061][T15143] do_syscall_64+0x41/0xc0 [ 400.382520][T15143] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 400.388503][T15143] RIP: 0033:0x7fd6b246b169 [ 400.392998][T15143] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 400.412635][T15143] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 400.421085][T15143] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 400.429091][T15143] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 400.437102][T15143] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 01:37:12 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00', 0x0, 0x0, 0x1000000}}) [ 400.445105][T15143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 400.453105][T15143] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 400.461094][T15143] 01:37:12 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xffffff91, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:12 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xf8736214, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:12 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 400.935075][T15161] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 01:37:12 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 54) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) [ 401.045034][T15168] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 401.201829][T15173] FAULT_INJECTION: forcing a failure. [ 401.201829][T15173] name failslab, interval 1, probability 0, space 0, times 0 [ 401.214613][T15173] CPU: 1 PID: 15173 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 401.223042][T15173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 401.233141][T15173] Call Trace: [ 401.236438][T15173] [ 401.239385][T15173] dump_stack_lvl+0xda/0x130 [ 401.244041][T15173] dump_stack+0x15/0x20 [ 401.248289][T15173] should_fail_ex+0x21f/0x230 [ 401.252993][T15173] __should_failslab+0x92/0xa0 [ 401.257856][T15173] should_failslab+0x9/0x20 [ 401.262367][T15173] slab_pre_alloc_hook+0x38/0x180 [ 401.267458][T15173] kmem_cache_alloc_node+0x5d/0x2e0 [ 401.272858][T15173] ? __alloc_skb+0x109/0x2e0 [ 401.277489][T15173] __alloc_skb+0x109/0x2e0 [ 401.282045][T15173] alloc_skb_with_frags+0x80/0x3e0 [ 401.287189][T15173] ? avc_has_perm+0xdc/0x160 [ 401.291802][T15173] ? __rcu_read_unlock+0x4d/0x70 [ 401.296817][T15173] sock_alloc_send_pskb+0x434/0x4e0 [ 401.302057][T15173] ? _raw_spin_unlock+0x14/0x40 [ 401.307055][T15173] unix_dgram_sendmsg+0x3dd/0x1110 [ 401.312275][T15173] ? unix_dgram_poll+0x3e0/0x3e0 [ 401.317240][T15173] ____sys_sendmsg+0x375/0x4c0 [ 401.322049][T15173] __sys_sendmmsg+0x263/0x500 [ 401.326868][T15173] __x64_sys_sendmmsg+0x57/0x60 [ 401.331822][T15173] do_syscall_64+0x41/0xc0 [ 401.336364][T15173] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 401.342314][T15173] RIP: 0033:0x7fd6b246b169 [ 401.346748][T15173] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 401.366453][T15173] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 401.374949][T15173] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 401.382936][T15173] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 401.390925][T15173] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 01:37:13 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xf8ba0b9c, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:13 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00', 0x0, 0x0, 0x2000000}}) 01:37:13 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffff5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 401.398918][T15173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 401.406947][T15173] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 401.414980][T15173] 01:37:13 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfe800000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:13 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xffffff8d, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:13 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00', 0x0, 0x2}}) 01:37:13 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:13 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xffffff91, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:13 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 55) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:37:13 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffff5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:14 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:14 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:14 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 402.562845][T15234] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:37:14 executing program 2: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x47ee, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:14 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:14 executing program 2: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1802, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:14 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 56) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:37:14 executing program 2: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xa00, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 402.975215][T15250] FAULT_INJECTION: forcing a failure. [ 402.975215][T15250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.988313][T15250] CPU: 0 PID: 15250 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 402.996737][T15250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 403.006830][T15250] Call Trace: [ 403.010125][T15250] [ 403.013064][T15250] dump_stack_lvl+0xda/0x130 [ 403.017760][T15250] dump_stack+0x15/0x20 [ 403.021938][T15250] should_fail_ex+0x21f/0x230 [ 403.026698][T15250] should_fail+0xb/0x10 [ 403.030914][T15250] should_fail_usercopy+0x1a/0x20 [ 403.035977][T15250] _copy_from_user+0x1e/0xd0 [ 403.040578][T15250] copy_msghdr_from_user+0x54/0x2a0 [ 403.045851][T15250] __sys_sendmmsg+0x224/0x500 [ 403.050716][T15250] __x64_sys_sendmmsg+0x57/0x60 [ 403.055695][T15250] do_syscall_64+0x41/0xc0 [ 403.060141][T15250] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 403.066123][T15250] RIP: 0033:0x7fd6b246b169 [ 403.070550][T15250] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 403.090241][T15250] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 403.098773][T15250] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 403.106771][T15250] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 403.114765][T15250] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 01:37:14 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 403.122886][T15250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 403.130988][T15250] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 403.139012][T15250] 01:37:15 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x2}}) 01:37:15 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:15 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:15 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 57) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:37:15 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:15 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 404.056369][T15281] FAULT_INJECTION: forcing a failure. [ 404.056369][T15281] name failslab, interval 1, probability 0, space 0, times 0 [ 404.069143][T15281] CPU: 1 PID: 15281 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 404.077483][T15281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 404.087620][T15281] Call Trace: [ 404.090905][T15281] [ 404.093841][T15281] dump_stack_lvl+0xda/0x130 [ 404.098451][T15281] dump_stack+0x15/0x20 [ 404.102622][T15281] should_fail_ex+0x21f/0x230 [ 404.107341][T15281] __should_failslab+0x92/0xa0 [ 404.112130][T15281] should_failslab+0x9/0x20 [ 404.116706][T15281] slab_pre_alloc_hook+0x38/0x180 [ 404.121741][T15281] kmem_cache_alloc_node+0x5d/0x2e0 [ 404.127010][T15281] ? __alloc_skb+0x109/0x2e0 [ 404.131720][T15281] __alloc_skb+0x109/0x2e0 [ 404.136236][T15281] alloc_skb_with_frags+0x80/0x3e0 [ 404.141366][T15281] ? autoremove_wake_function+0x23/0x50 [ 404.146960][T15281] ? receiver_wake_function+0x55/0x60 [ 404.152437][T15281] ? __rcu_read_unlock+0x4d/0x70 [ 404.157402][T15281] sock_alloc_send_pskb+0x434/0x4e0 [ 404.162705][T15281] unix_dgram_sendmsg+0x3dd/0x1110 [ 404.167853][T15281] ? unix_dgram_poll+0x3e0/0x3e0 [ 404.172815][T15281] ____sys_sendmsg+0x375/0x4c0 [ 404.177684][T15281] __sys_sendmmsg+0x263/0x500 [ 404.182406][T15281] __x64_sys_sendmmsg+0x57/0x60 [ 404.187320][T15281] do_syscall_64+0x41/0xc0 [ 404.191762][T15281] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 404.197771][T15281] RIP: 0033:0x7fd6b246b169 [ 404.202199][T15281] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 404.221962][T15281] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 404.230439][T15281] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 404.238452][T15281] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 404.246547][T15281] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 01:37:16 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x1000000}}) [ 404.254630][T15281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 404.262623][T15281] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 404.270702][T15281] [ 404.371802][T15292] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:37:16 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:16 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:16 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x2}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:16 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:16 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 58) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:37:16 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x2000000}}) 01:37:17 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:17 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:17 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:17 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:17 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060040000d0020000d00200000000000000000000d0020000c8030000c8030000c7fc0000c8030000c8030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008802d00200000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036970365f7674693000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000022000000feffffff0000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000900736d000000000000000000010000000000000021390eb8a10d61905c915cd228ca97b5ce382683c91019c72674282bfdd8705b2bec82c7e6a47fe2fa5de4d4cffd0a70df1168448dd67391da71a4d40daaf91ee10181a6e2cc70723760440ff801aab7fdb67e5c1a436e18b54efa66ad91f24342af8e7ae060ed1b7e8abb92cc6d113df52f3c0fd51ae5f7d2fe47330100000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001627071300000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e64000000658181e193800057000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000fcff0000000000000000000000000000000000000030006463637000000000000000000000e60000000000000000000000000000000000000000000000000000000000000030005345540000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000e5ffffff00000000feffffff"], 0x1) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) 01:37:17 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 59) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) [ 405.857038][T15351] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 405.909863][T15346] FAULT_INJECTION: forcing a failure. [ 405.909863][T15346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.923236][T15346] CPU: 1 PID: 15346 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 405.931650][T15346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 405.941726][T15346] Call Trace: [ 405.945041][T15346] [ 405.948010][T15346] dump_stack_lvl+0xda/0x130 [ 405.952700][T15346] dump_stack+0x15/0x20 [ 405.956890][T15346] should_fail_ex+0x21f/0x230 [ 405.961723][T15346] should_fail+0xb/0x10 [ 405.965893][T15346] should_fail_usercopy+0x1a/0x20 [ 405.971067][T15346] _copy_from_user+0x1e/0xd0 [ 405.975691][T15346] copy_msghdr_from_user+0x54/0x2a0 [ 405.980935][T15346] __sys_sendmmsg+0x224/0x500 [ 405.985667][T15346] __x64_sys_sendmmsg+0x57/0x60 [ 405.990609][T15346] do_syscall_64+0x41/0xc0 [ 405.995034][T15346] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 406.000986][T15346] RIP: 0033:0x7fd6b246b169 [ 406.005405][T15346] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 406.025044][T15346] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 406.033510][T15346] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 406.041524][T15346] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 406.049500][T15346] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 406.057517][T15346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 406.065503][T15346] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 406.073585][T15346] 01:37:17 executing program 0: r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getrlimit(0x9, &(0x7f0000000100)) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001780)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x4, 0x7, 0x0, 0x0}]}, 0x4c}}, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000001900), 0x80) r7 = getegid() r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000206010200000000000000000000000005000401000000000900020073797a300000000005000100070000000c000300686173683a697000050005000000000004000700"], 0x48}}, 0x0) r9 = signalfd(r0, &(0x7f0000001940)={[0x834]}, 0x8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x4, 0x7, 0x0, 0x0}]}, 0x48}}, 0x0) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001980)={0x0, 0x10, 0x8}, 0xc) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x4, 0x7, 0x0, 0x0}]}, 0x48}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000019c0)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) r14 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001a00), 0x24000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)=[{{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000000340)="2ff664282c0437b46eff1dd24c32c56b7edfd73e157908885ae3485ee2979340945464d0f7442f0794fdce1c3e03a3a83530690417d6884654934f8c6cfd8c8257d108e7ab94a45f0c405532f15fca9061847b8547749c4c943a7e002bbb3007f24c73379ea9454977f88ed29c4e39aed3c6b6882f647ec4bb4b389b93d4617d109a1046173605b76229632832453878fadc62d307140177347a8d1e2c4e7a8a44963a8c18b888f076b59b7946c0f1e5b1e07116ff8994c86635cdfb0ab53a07ea0339ac864013bbba23fe75846c79653dad8cf03d95c1ef0b31dd21730678924db4b603c396a3ac2384b4ec4c8937fe", 0xf0}, {&(0x7f0000000240)="078a038b9f7f0aae479f5a78ea6e0626c4424c4a1297dc8fd95535c11fe64dc121e9dbff6c569e15dd1fc2d0b37f04797fd8e7be7826d699c103", 0x3a}, {&(0x7f0000000440)="8df17f47895bd7bcfd842f2585fc8c24325a8b76e81fcb6ae23ab6e37d4ab172c03658ef7e2eab817c71571b4694d88e2c70521ba6fc0c41bae9447ef8e898859959483060fd5dac0b03213251835769ac6cc8902e7b614278d0bc2d7fc396089abc17d44ffa64d7c85794f9eb2e9b0229b7eb52ac177aff1f7d8d37103d93e053d19a9a7c1bf9812302cc8001c5ef02ea1db53ef7f090f6834088022241d08b0da930c5c960a8f3be3f20fc15723ee870e26d9f327c74e38559ca2df1e559e822ba169ca228ad4d027c913f3509c82179416dc81495efee0b0dd94d97a301170a807cf1", 0xe4}, {&(0x7f0000000580)="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", 0xfd}, {&(0x7f0000000680)="5523d909e403d1abeb1b432d0331e29cb8475f3a2fbfb46fa2011e1a386afe2d0e1dbbd4fd8e7ad8850871f658c6600d65bc066eac1989ba8d62f8a8564bfb2b66e4d8e165220b138b07076c0432c766b133d5615d4d0ffa212d2a4549", 0x5d}, {&(0x7f0000000700)="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", 0x1000}], 0x6, &(0x7f0000001a40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="1c00000000f18bac795294bb13ed0000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r8, @ANYRES32=r4, @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r13, @ANYRES32=r14], 0xc8, 0x40040c0}}], 0x1, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 406.358759][ T23] audit: type=1400 audit(1682300238.084:162): avc: denied { read } for pid=15356 comm="syz-executor.0" name="qrtr-tun" dev="devtmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.382034][ T23] audit: type=1400 audit(1682300238.084:163): avc: denied { open } for pid=15356 comm="syz-executor.0" path="/dev/qrtr-tun" dev="devtmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 01:37:18 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:18 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x4}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:18 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) 01:37:18 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 60) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) [ 406.908271][T15369] FAULT_INJECTION: forcing a failure. [ 406.908271][T15369] name failslab, interval 1, probability 0, space 0, times 0 [ 406.921090][T15369] CPU: 1 PID: 15369 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 406.929443][T15369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 406.939625][T15369] Call Trace: [ 406.942915][T15369] [ 406.945922][T15369] dump_stack_lvl+0xda/0x130 [ 406.950530][T15369] dump_stack+0x15/0x20 [ 406.954766][T15369] should_fail_ex+0x21f/0x230 [ 406.959479][T15369] __should_failslab+0x92/0xa0 [ 406.964254][T15369] should_failslab+0x9/0x20 [ 406.968814][T15369] slab_pre_alloc_hook+0x38/0x180 [ 406.973854][T15369] kmem_cache_alloc_node+0x5d/0x2e0 [ 406.979137][T15369] ? __alloc_skb+0x109/0x2e0 [ 406.983758][T15369] __alloc_skb+0x109/0x2e0 [ 406.988198][T15369] alloc_skb_with_frags+0x80/0x3e0 [ 406.993332][T15369] ? avc_has_perm+0xdc/0x160 [ 406.997947][T15369] ? __rcu_read_unlock+0x4d/0x70 [ 407.002914][T15369] sock_alloc_send_pskb+0x434/0x4e0 [ 407.008149][T15369] ? unix_dgram_sendmsg+0x198/0x1110 [ 407.013533][T15369] unix_dgram_sendmsg+0x3dd/0x1110 [ 407.018748][T15369] ? unix_dgram_poll+0x3e0/0x3e0 [ 407.023705][T15369] ____sys_sendmsg+0x375/0x4c0 [ 407.028580][T15369] __sys_sendmmsg+0x263/0x500 [ 407.033331][T15369] __x64_sys_sendmmsg+0x57/0x60 [ 407.038217][T15369] do_syscall_64+0x41/0xc0 [ 407.042660][T15369] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 407.048595][T15369] RIP: 0033:0x7fd6b246b169 [ 407.053035][T15369] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 407.072799][T15369] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 407.081228][T15369] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 407.089212][T15369] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 407.097201][T15369] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 01:37:18 executing program 0: r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) getrlimit(0x9, &(0x7f0000000100)) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001780)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x4, 0x7, 0x0, 0x0}]}, 0x4c}}, 0x0) (async) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000001900), 0x80) r7 = getegid() r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000206010200000000000000000000000005000401000000000900020073797a300000000005000100070000000c000300686173683a697000050005000000000004000700"], 0x48}}, 0x0) (async) r9 = signalfd(r0, &(0x7f0000001940)={[0x834]}, 0x8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x4, 0x7, 0x0, 0x0}]}, 0x48}}, 0x0) (async) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001980)={0x0, 0x10, 0x8}, 0xc) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x4, 0x7, 0x0, 0x0}]}, 0x48}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000019c0)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) r14 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001a00), 0x24000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)=[{{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000000340)="2ff664282c0437b46eff1dd24c32c56b7edfd73e157908885ae3485ee2979340945464d0f7442f0794fdce1c3e03a3a83530690417d6884654934f8c6cfd8c8257d108e7ab94a45f0c405532f15fca9061847b8547749c4c943a7e002bbb3007f24c73379ea9454977f88ed29c4e39aed3c6b6882f647ec4bb4b389b93d4617d109a1046173605b76229632832453878fadc62d307140177347a8d1e2c4e7a8a44963a8c18b888f076b59b7946c0f1e5b1e07116ff8994c86635cdfb0ab53a07ea0339ac864013bbba23fe75846c79653dad8cf03d95c1ef0b31dd21730678924db4b603c396a3ac2384b4ec4c8937fe", 0xf0}, {&(0x7f0000000240)="078a038b9f7f0aae479f5a78ea6e0626c4424c4a1297dc8fd95535c11fe64dc121e9dbff6c569e15dd1fc2d0b37f04797fd8e7be7826d699c103", 0x3a}, {&(0x7f0000000440)="8df17f47895bd7bcfd842f2585fc8c24325a8b76e81fcb6ae23ab6e37d4ab172c03658ef7e2eab817c71571b4694d88e2c70521ba6fc0c41bae9447ef8e898859959483060fd5dac0b03213251835769ac6cc8902e7b614278d0bc2d7fc396089abc17d44ffa64d7c85794f9eb2e9b0229b7eb52ac177aff1f7d8d37103d93e053d19a9a7c1bf9812302cc8001c5ef02ea1db53ef7f090f6834088022241d08b0da930c5c960a8f3be3f20fc15723ee870e26d9f327c74e38559ca2df1e559e822ba169ca228ad4d027c913f3509c82179416dc81495efee0b0dd94d97a301170a807cf1", 0xe4}, {&(0x7f0000000580)="2461c5aa523b0965549129fad43c3d02ecddb2898802463854baf2952fbd61423851825f9051bc5d60bea0cc47708ce7d9299ac5c892281d01e1a7c1e67d531a57468708184ddb3be068245f84f4b5e219819943a44e0c00576d03af6795af856625024727168c282ddafe2940749005f1a9da206035f52b8d991571e066b6c2b5d5c75d282a0c46eddaa2a3c269f45a71171d898558b6bffd86a53d32c648640e399e7eb8f34045852dc6083943c1657179b1d569cf3a73c2c9a1a6e4a376b44b42bbdb1bd684bee1261df047fcce170a1d226753424eea39c4d3b575b333f4a85e1277f77c6b6f9d7f5c472e542b1923029df6d8ff27ef7a02eb586c", 0xfd}, {&(0x7f0000000680)="5523d909e403d1abeb1b432d0331e29cb8475f3a2fbfb46fa2011e1a386afe2d0e1dbbd4fd8e7ad8850871f658c6600d65bc066eac1989ba8d62f8a8564bfb2b66e4d8e165220b138b07076c0432c766b133d5615d4d0ffa212d2a4549", 0x5d}, {&(0x7f0000000700)="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", 0x1000}], 0x6, &(0x7f0000001a40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="1c00000000f18bac795294bb13ed0000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r8, @ANYRES32=r4, @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r13, @ANYRES32=r14], 0xc8, 0x40040c0}}], 0x1, 0x80) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 407.105195][T15369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 407.113191][T15369] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 407.121241][T15369] 01:37:18 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:18 executing program 0: r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) (async) r1 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getrlimit(0x9, &(0x7f0000000100)) (async) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 64) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001780)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x4, 0x7, 0x0, 0x0}]}, 0x4c}}, 0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000001900), 0x80) (async) r7 = getegid() (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000206010200000000000000000000000005000401000000000900020073797a300000000005000100070000000c000300686173683a697000050005000000000004000700"], 0x48}}, 0x0) r9 = signalfd(r0, &(0x7f0000001940)={[0x834]}, 0x8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x4, 0x7, 0x0, 0x0}]}, 0x48}}, 0x0) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001980)={0x0, 0x10, 0x8}, 0xc) (async, rerun: 32) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x4, 0x7, 0x0, 0x0}]}, 0x48}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000019c0)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) (async) r14 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001a00), 0x24000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)=[{{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001700)=[{&(0x7f0000000340)="2ff664282c0437b46eff1dd24c32c56b7edfd73e157908885ae3485ee2979340945464d0f7442f0794fdce1c3e03a3a83530690417d6884654934f8c6cfd8c8257d108e7ab94a45f0c405532f15fca9061847b8547749c4c943a7e002bbb3007f24c73379ea9454977f88ed29c4e39aed3c6b6882f647ec4bb4b389b93d4617d109a1046173605b76229632832453878fadc62d307140177347a8d1e2c4e7a8a44963a8c18b888f076b59b7946c0f1e5b1e07116ff8994c86635cdfb0ab53a07ea0339ac864013bbba23fe75846c79653dad8cf03d95c1ef0b31dd21730678924db4b603c396a3ac2384b4ec4c8937fe", 0xf0}, {&(0x7f0000000240)="078a038b9f7f0aae479f5a78ea6e0626c4424c4a1297dc8fd95535c11fe64dc121e9dbff6c569e15dd1fc2d0b37f04797fd8e7be7826d699c103", 0x3a}, {&(0x7f0000000440)="8df17f47895bd7bcfd842f2585fc8c24325a8b76e81fcb6ae23ab6e37d4ab172c03658ef7e2eab817c71571b4694d88e2c70521ba6fc0c41bae9447ef8e898859959483060fd5dac0b03213251835769ac6cc8902e7b614278d0bc2d7fc396089abc17d44ffa64d7c85794f9eb2e9b0229b7eb52ac177aff1f7d8d37103d93e053d19a9a7c1bf9812302cc8001c5ef02ea1db53ef7f090f6834088022241d08b0da930c5c960a8f3be3f20fc15723ee870e26d9f327c74e38559ca2df1e559e822ba169ca228ad4d027c913f3509c82179416dc81495efee0b0dd94d97a301170a807cf1", 0xe4}, {&(0x7f0000000580)="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", 0xfd}, {&(0x7f0000000680)="5523d909e403d1abeb1b432d0331e29cb8475f3a2fbfb46fa2011e1a386afe2d0e1dbbd4fd8e7ad8850871f658c6600d65bc066eac1989ba8d62f8a8564bfb2b66e4d8e165220b138b07076c0432c766b133d5615d4d0ffa212d2a4549", 0x5d}, {&(0x7f0000000700)="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", 0x1000}], 0x6, &(0x7f0000001a40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="1c00000000f18bac795294bb13ed0000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r8, @ANYRES32=r4, @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r13, @ANYRES32=r14], 0xc8, 0x40040c0}}], 0x1, 0x80) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:19 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x4}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 407.290221][T15391] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:37:19 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) 01:37:19 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x8, 0xc68766cfcbea8b63) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:19 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x5}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:19 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 61) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:37:19 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:20 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) 01:37:20 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) getpid() (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x8, 0xc68766cfcbea8b63) (async) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:20 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:20 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 62) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) [ 408.532876][T15433] FAULT_INJECTION: forcing a failure. [ 408.532876][T15433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.546002][T15433] CPU: 1 PID: 15433 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 408.554506][T15433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 408.564653][T15433] Call Trace: [ 408.567951][T15433] [ 408.570943][T15433] dump_stack_lvl+0xda/0x130 [ 408.575552][T15433] dump_stack+0x15/0x20 [ 408.579734][T15433] should_fail_ex+0x21f/0x230 [ 408.584432][T15433] should_fail+0xb/0x10 [ 408.588608][T15433] should_fail_usercopy+0x1a/0x20 [ 408.593694][T15433] _copy_from_user+0x1e/0xd0 [ 408.598294][T15433] copy_msghdr_from_user+0x54/0x2a0 [ 408.603571][T15433] __sys_sendmmsg+0x224/0x500 [ 408.608329][T15433] __x64_sys_sendmmsg+0x57/0x60 [ 408.613231][T15433] do_syscall_64+0x41/0xc0 [ 408.617663][T15433] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 408.623780][T15433] RIP: 0033:0x7fd6b246b169 [ 408.628221][T15433] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 408.647911][T15433] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 408.656345][T15433] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 408.664328][T15433] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 408.672385][T15433] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 408.680455][T15433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 408.688423][T15433] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 408.696498][T15433] 01:37:20 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async, rerun: 64) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x8, 0xc68766cfcbea8b63) (async, rerun: 64) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:20 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:20 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000000340)=[{&(0x7f0000000240)=""/205, 0xcd}], 0x323, &(0x7f0000000540)=[{&(0x7f0000000380)=""/222, 0x7ffff000}], 0x2d7, 0x0) prlimit64(r3, 0xe, &(0x7f0000000100)={0x0, 0x6}, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:20 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x7}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 408.922306][T15460] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:37:20 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:21 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 63) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:37:21 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) [ 409.429701][T15473] FAULT_INJECTION: forcing a failure. [ 409.429701][T15473] name failslab, interval 1, probability 0, space 0, times 0 [ 409.442373][T15473] CPU: 0 PID: 15473 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 409.450722][T15473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 409.460787][T15473] Call Trace: [ 409.464106][T15473] [ 409.467070][T15473] dump_stack_lvl+0xda/0x130 [ 409.471700][T15473] dump_stack+0x15/0x20 [ 409.475956][T15473] should_fail_ex+0x21f/0x230 [ 409.480649][T15473] __should_failslab+0x92/0xa0 [ 409.485427][T15473] should_failslab+0x9/0x20 [ 409.489943][T15473] slab_pre_alloc_hook+0x38/0x180 [ 409.495032][T15473] kmem_cache_alloc_node+0x5d/0x2e0 [ 409.500304][T15473] ? __alloc_skb+0x109/0x2e0 [ 409.504922][T15473] __alloc_skb+0x109/0x2e0 [ 409.509383][T15473] alloc_skb_with_frags+0x80/0x3e0 [ 409.514526][T15473] ? avc_has_perm+0xdc/0x160 [ 409.519159][T15473] ? __rcu_read_unlock+0x4d/0x70 [ 409.524147][T15473] sock_alloc_send_pskb+0x434/0x4e0 [ 409.529392][T15473] unix_dgram_sendmsg+0x3dd/0x1110 [ 409.534535][T15473] ? unix_dgram_poll+0x3e0/0x3e0 [ 409.539505][T15473] ____sys_sendmsg+0x375/0x4c0 [ 409.544314][T15473] __sys_sendmmsg+0x263/0x500 [ 409.549104][T15473] __x64_sys_sendmmsg+0x57/0x60 [ 409.553997][T15473] do_syscall_64+0x41/0xc0 [ 409.558499][T15473] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 409.564564][T15473] RIP: 0033:0x7fd6b246b169 [ 409.569105][T15473] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 409.588793][T15473] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 409.597240][T15473] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 409.605222][T15473] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 409.613286][T15473] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 409.621289][T15473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 409.629367][T15473] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 409.637389][T15473] [ 409.881235][T15490] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:37:21 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:21 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000000340)=[{&(0x7f0000000240)=""/205, 0xcd}], 0x323, &(0x7f0000000540)=[{&(0x7f0000000380)=""/222, 0x7ffff000}], 0x2d7, 0x0) (async) process_vm_writev(r3, &(0x7f0000000340)=[{&(0x7f0000000240)=""/205, 0xcd}], 0x323, &(0x7f0000000540)=[{&(0x7f0000000380)=""/222, 0x7ffff000}], 0x2d7, 0x0) prlimit64(r3, 0xe, &(0x7f0000000100)={0x0, 0x6}, 0x0) (async) prlimit64(r3, 0xe, &(0x7f0000000100)={0x0, 0x6}, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:21 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) [ 410.074771][T15495] ================================================================== [ 410.082893][T15495] BUG: KCSAN: data-race in copyin / copyin [ 410.088736][T15495] [ 410.091063][T15495] write to 0xffff88813c4e0000 of 4096 bytes by task 15497 on cpu 0: [ 410.099134][T15495] copyin+0x67/0x90 [ 410.102952][T15495] _copy_from_iter+0x24b/0x8c0 [ 410.107735][T15495] copy_page_from_iter+0x162/0x290 [ 410.112862][T15495] process_vm_rw+0x5d5/0x8c0 [ 410.117487][T15495] __x64_sys_process_vm_writev+0x7a/0x90 [ 410.123127][T15495] do_syscall_64+0x41/0xc0 [ 410.127547][T15495] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 410.133456][T15495] [ 410.135774][T15495] write to 0xffff88813c4e0000 of 4096 bytes by task 15495 on cpu 1: [ 410.143855][T15495] copyin+0x67/0x90 [ 410.147685][T15495] _copy_from_iter+0x24b/0x8c0 [ 410.152461][T15495] copy_page_from_iter+0x162/0x290 [ 410.157588][T15495] process_vm_rw+0x5d5/0x8c0 [ 410.162182][T15495] __x64_sys_process_vm_writev+0x7a/0x90 [ 410.167820][T15495] do_syscall_64+0x41/0xc0 01:37:21 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 64) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:37:21 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x7}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:21 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060040000d0020000d00200000000000000000000d0020000c8030000c8030000c7fc0000c8030000c8030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008802d00200000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036970365f7674693000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000022000000feffffff0000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000900736d000000000000000000010000000000000021390eb8a10d61905c915cd228ca97b5ce382683c91019c72674282bfdd8705b2bec82c7e6a47fe2fa5de4d4cffd0a70df1168448dd67391da71a4d40daaf91ee10181a6e2cc70723760440ff801aab7fdb67e5c1a436e18b54efa66ad91f24342af8e7ae060ed1b7e8abb92cc6d113df52f3c0fd51ae5f7d2fe47330100000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001627071300000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e64000000658181e193800057000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000fcff0000000000000000000000000000000000000030006463637000000000000000000000e60000000000000000000000000000000000000000000000000000000000000030005345540000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000e5ffffff00000000feffffff"], 0x1) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) [ 410.172239][T15495] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 410.178176][T15495] [ 410.180518][T15495] Reported by Kernel Concurrency Sanitizer on: [ 410.186665][T15495] CPU: 1 PID: 15495 Comm: syz-executor.0 Not tainted 6.3.0-syzkaller #0 [ 410.195083][T15495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 410.205152][T15495] ================================================================== 01:37:22 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000000340)=[{&(0x7f0000000240)=""/205, 0xcd}], 0x323, &(0x7f0000000540)=[{&(0x7f0000000380)=""/222, 0x7ffff000}], 0x2d7, 0x0) (async) prlimit64(r3, 0xe, &(0x7f0000000100)={0x0, 0x6}, 0x0) (async) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:22 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:22 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x9}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:22 executing program 0: r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x275a, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000480)={{r0}, 0x3, 0x1, 0x1}) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x20000045}, 0x4004000) 01:37:23 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 411.313456][T15532] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:37:23 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) 01:37:23 executing program 0: r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x275a, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000480)={{r0}, 0x3, 0x1, 0x1}) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x20000045}, 0x4004000) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) (async) getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) socket(0x10, 0x2, 0x0) (async) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x275a, 0x0) (async) pwrite64(r5, 0x0, 0x0, 0x0) (async) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000480)={{r0}, 0x3, 0x1, 0x1}) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x20000045}, 0x4004000) (async) 01:37:23 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xa}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:23 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 65) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) [ 411.630247][T15546] FAULT_INJECTION: forcing a failure. [ 411.630247][T15546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.643367][T15546] CPU: 0 PID: 15546 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 411.651803][T15546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 411.662006][T15546] Call Trace: [ 411.665380][T15546] [ 411.668335][T15546] dump_stack_lvl+0xda/0x130 [ 411.673008][T15546] dump_stack+0x15/0x20 [ 411.677206][T15546] should_fail_ex+0x21f/0x230 [ 411.681961][T15546] should_fail+0xb/0x10 [ 411.686139][T15546] should_fail_usercopy+0x1a/0x20 [ 411.691206][T15546] _copy_from_user+0x1e/0xd0 [ 411.695818][T15546] copy_msghdr_from_user+0x54/0x2a0 [ 411.701175][T15546] __sys_sendmmsg+0x224/0x500 [ 411.705968][T15546] __x64_sys_sendmmsg+0x57/0x60 [ 411.710941][T15546] do_syscall_64+0x41/0xc0 [ 411.715393][T15546] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 411.721389][T15546] RIP: 0033:0x7fd6b246b169 [ 411.725893][T15546] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 411.745525][T15546] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 411.754219][T15546] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 411.762297][T15546] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 411.770578][T15546] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 411.778599][T15546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 411.786588][T15546] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 411.794579][T15546] 01:37:24 executing program 0: r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x275a, 0x0) pwrite64(r5, 0x0, 0x0, 0x0) (async) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000480)={{r0}, 0x3, 0x1, 0x1}) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x20000045}, 0x4004000) 01:37:24 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x9}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:24 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xb}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:24 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 66) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) [ 412.608680][T15590] FAULT_INJECTION: forcing a failure. [ 412.608680][T15590] name failslab, interval 1, probability 0, space 0, times 0 [ 412.621412][T15590] CPU: 1 PID: 15590 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 412.629933][T15590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 412.639991][T15590] Call Trace: [ 412.643269][T15590] [ 412.646210][T15590] dump_stack_lvl+0xda/0x130 [ 412.650821][T15590] dump_stack+0x15/0x20 [ 412.654981][T15590] should_fail_ex+0x21f/0x230 [ 412.659685][T15590] __should_failslab+0x92/0xa0 [ 412.664545][T15590] should_failslab+0x9/0x20 [ 412.669066][T15590] slab_pre_alloc_hook+0x38/0x180 [ 412.674135][T15590] kmem_cache_alloc_node+0x5d/0x2e0 [ 412.679347][T15590] ? __alloc_skb+0x109/0x2e0 [ 412.683953][T15590] __alloc_skb+0x109/0x2e0 [ 412.688533][T15590] alloc_skb_with_frags+0x80/0x3e0 [ 412.693704][T15590] ? avc_has_perm+0xdc/0x160 [ 412.698315][T15590] ? __rcu_read_unlock+0x4d/0x70 [ 412.703422][T15590] sock_alloc_send_pskb+0x434/0x4e0 01:37:24 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:24 executing program 0: ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000100)={0x0, 0xfffffffffffffff7, 0x13, 0x0, 0x1f, 0x8}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/ulpi', 0x292081, 0x40) sched_setaffinity(r2, 0x8, &(0x7f00000003c0)=0x1ff) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0xd, 0x0, 0xa}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8c0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r6, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@ipv4_newrule={0x60, 0x20, 0x100, 0x70bd2d, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x2b, 0x9, 0x0, 0x0, 0x6, 0xd}, [@FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2f}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010100}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 01:37:24 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) [ 412.708643][T15590] unix_dgram_sendmsg+0x3dd/0x1110 [ 412.713857][T15590] ? unix_dgram_poll+0x3e0/0x3e0 [ 412.718824][T15590] ____sys_sendmsg+0x375/0x4c0 [ 412.723655][T15590] __sys_sendmmsg+0x263/0x500 [ 412.728410][T15590] __x64_sys_sendmmsg+0x57/0x60 [ 412.733409][T15590] do_syscall_64+0x41/0xc0 [ 412.737844][T15590] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 412.743818][T15590] RIP: 0033:0x7fd6b246b169 [ 412.748252][T15590] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 412.768120][T15590] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 412.776549][T15590] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 412.784542][T15590] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 412.792510][T15590] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 412.800547][T15590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 412.808515][T15590] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 412.816570][T15590] [ 412.918147][T15609] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:37:25 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xa}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:25 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xc}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:25 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 67) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:37:25 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) 01:37:25 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060040000d0020000d00200000000000000000000d0020000c8030000c8030000c7fc0000c8030000c8030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008802d00200000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036970365f7674693000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000022000000feffffff0000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000900736d000000000000000000010000000000000021390eb8a10d61905c915cd228ca97b5ce382683c91019c72674282bfdd8705b2bec82c7e6a47fe2fa5de4d4cffd0a70df1168448dd67391da71a4d40daaf91ee10181a6e2cc70723760440ff801aab7fdb67e5c1a436e18b54efa66ad91f24342af8e7ae060ed1b7e8abb92cc6d113df52f3c0fd51ae5f7d2fe47330100000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001627071300000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e64000000658181e193800057000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000fcff0000000000000000000000000000000000000030006463637000000000000000000000e60000000000000000000000000000000000000000000000000000000000000030005345540000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000e5ffffff00000000feffffff"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:25 executing program 0: ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000100)={0x0, 0xfffffffffffffff7, 0x13, 0x0, 0x1f, 0x8}) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) (async, rerun: 32) r2 = getpid() (rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/ulpi', 0x292081, 0x40) sched_setaffinity(r2, 0x8, &(0x7f00000003c0)=0x1ff) (async) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0xd, 0x0, 0xa}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8c0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r6, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) (async) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@ipv4_newrule={0x60, 0x20, 0x100, 0x70bd2d, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x2b, 0x9, 0x0, 0x0, 0x6, 0xd}, [@FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2f}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010100}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x10) [ 413.737959][T15641] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:37:25 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xf}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:25 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xb}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:25 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 68) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) [ 414.338448][T15651] FAULT_INJECTION: forcing a failure. [ 414.338448][T15651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.351632][T15651] CPU: 0 PID: 15651 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 414.359998][T15651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 414.370078][T15651] Call Trace: [ 414.373365][T15651] [ 414.376320][T15651] dump_stack_lvl+0xda/0x130 [ 414.380955][T15651] dump_stack+0x15/0x20 [ 414.385183][T15651] should_fail_ex+0x21f/0x230 [ 414.389963][T15651] should_fail+0xb/0x10 [ 414.394168][T15651] should_fail_usercopy+0x1a/0x20 [ 414.399271][T15651] _copy_from_user+0x1e/0xd0 [ 414.403902][T15651] copy_msghdr_from_user+0x54/0x2a0 [ 414.409142][T15651] __sys_sendmmsg+0x224/0x500 [ 414.413893][T15651] __x64_sys_sendmmsg+0x57/0x60 [ 414.418782][T15651] do_syscall_64+0x41/0xc0 [ 414.423210][T15651] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 414.429202][T15651] RIP: 0033:0x7fd6b246b169 [ 414.433631][T15651] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 414.453265][T15651] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 414.461746][T15651] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 414.469823][T15651] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 414.477797][T15651] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 01:37:26 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) 01:37:26 executing program 0: ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000100)={0x0, 0xfffffffffffffff7, 0x13, 0x0, 0x1f, 0x8}) (async) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000100)={0x0, 0xfffffffffffffff7, 0x13, 0x0, 0x1f, 0x8}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/ulpi', 0x292081, 0x40) sched_setaffinity(r2, 0x8, &(0x7f00000003c0)=0x1ff) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0xd, 0x0, 0xa}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8c0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r6, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@ipv4_newrule={0x60, 0x20, 0x100, 0x70bd2d, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x2b, 0x9, 0x0, 0x0, 0x6, 0xd}, [@FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2f}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010100}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@ipv4_newrule={0x60, 0x20, 0x100, 0x70bd2d, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x2b, 0x9, 0x0, 0x0, 0x6, 0xd}, [@FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2f}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010100}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x10) [ 414.485825][T15651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 414.493834][T15651] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 414.501851][T15651] 01:37:26 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060040000d0020000d00200000000000000000000d0020000c8030000c8030000c7fc0000c8030000c8030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008802d00200000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036970365f7674693000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000022000000feffffff0000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000900736d000000000000000000010000000000000021390eb8a10d61905c915cd228ca97b5ce382683c91019c72674282bfdd8705b2bec82c7e6a47fe2fa5de4d4cffd0a70df1168448dd67391da71a4d40daaf91ee10181a6e2cc70723760440ff801aab7fdb67e5c1a436e18b54efa66ad91f24342af8e7ae060ed1b7e8abb92cc6d113df52f3c0fd51ae5f7d2fe47330100000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001627071300000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e64000000658181e193800057000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000fcff0000000000000000000000000000000000000030006463637000000000000000000000e60000000000000000000000000000000000000000000000000000000000000030005345540000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000e5ffffff00000000feffffff"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 414.830851][T15673] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:37:26 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x10}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:26 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 69) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:37:26 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xc}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 415.206643][T15682] FAULT_INJECTION: forcing a failure. [ 415.206643][T15682] name failslab, interval 1, probability 0, space 0, times 0 [ 415.219331][T15682] CPU: 1 PID: 15682 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 415.227799][T15682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 415.237918][T15682] Call Trace: [ 415.241221][T15682] [ 415.244162][T15682] dump_stack_lvl+0xda/0x130 [ 415.248786][T15682] dump_stack+0x15/0x20 [ 415.253006][T15682] should_fail_ex+0x21f/0x230 [ 415.257700][T15682] __should_failslab+0x92/0xa0 [ 415.262491][T15682] should_failslab+0x9/0x20 [ 415.267040][T15682] slab_pre_alloc_hook+0x38/0x180 [ 415.272100][T15682] kmem_cache_alloc_node+0x5d/0x2e0 [ 415.277345][T15682] ? __alloc_skb+0x109/0x2e0 [ 415.281951][T15682] __alloc_skb+0x109/0x2e0 [ 415.286389][T15682] alloc_skb_with_frags+0x80/0x3e0 [ 415.291556][T15682] ? avc_has_perm+0xdc/0x160 [ 415.296205][T15682] ? __rcu_read_unlock+0x4d/0x70 [ 415.301161][T15682] sock_alloc_send_pskb+0x434/0x4e0 [ 415.306506][T15682] unix_dgram_sendmsg+0x3dd/0x1110 [ 415.311651][T15682] ? unix_dgram_poll+0x3e0/0x3e0 [ 415.316739][T15682] ____sys_sendmsg+0x375/0x4c0 [ 415.321531][T15682] __sys_sendmmsg+0x263/0x500 [ 415.326251][T15682] __x64_sys_sendmmsg+0x57/0x60 [ 415.331203][T15682] do_syscall_64+0x41/0xc0 [ 415.335673][T15682] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 415.341622][T15682] RIP: 0033:0x7fd6b246b169 [ 415.346119][T15682] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 415.365817][T15682] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 415.374306][T15682] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 415.382288][T15682] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 415.390282][T15682] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 415.398260][T15682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 01:37:27 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060040000d0020000d00200000000000000000000d0020000c8030000c8030000c7fc0000c8030000c8030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008802d00200000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036970365f7674693000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000022000000feffffff0000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000900736d000000000000000000010000000000000021390eb8a10d61905c915cd228ca97b5ce382683c91019c72674282bfdd8705b2bec82c7e6a47fe2fa5de4d4cffd0a70df1168448dd67391da71a4d40daaf91ee10181a6e2cc70723760440ff801aab7fdb67e5c1a436e18b54efa66ad91f24342af8e7ae060ed1b7e8abb92cc6d113df52f3c0fd51ae5f7d2fe47330100000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001627071300000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e64000000658181e193800057000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000fcff0000000000000000000000000000000000000030006463637000000000000000000000e60000000000000000000000000000000000000000000000000000000000000030005345540000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000e5ffffff00000000feffffff"], 0x1) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) 01:37:27 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) prlimit64(r0, 0x6, &(0x7f0000000100)={0xffff, 0x10001}, &(0x7f0000000180)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpgid(r0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 415.406245][T15682] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 415.414242][T15682] 01:37:27 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x11}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:27 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xf}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:27 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 70) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:37:28 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:28 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) 01:37:28 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) prlimit64(r0, 0x6, &(0x7f0000000100)={0xffff, 0x10001}, &(0x7f0000000180)) (async) prlimit64(r0, 0x6, &(0x7f0000000100)={0xffff, 0x10001}, &(0x7f0000000180)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpgid(r0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) socket(0x10, 0x2, 0x0) (async) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 416.748320][T15725] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:37:28 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) (async, rerun: 32) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) prlimit64(r0, 0x6, &(0x7f0000000100)={0xffff, 0x10001}, &(0x7f0000000180)) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) getpgid(r0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:28 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r2 = socket(0x10, 0x80802, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:28 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x10}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:28 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x12}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:28 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 71) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:37:28 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) 01:37:28 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 417.194805][T15749] FAULT_INJECTION: forcing a failure. [ 417.194805][T15749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.208034][T15749] CPU: 1 PID: 15749 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 417.216369][T15749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 417.226435][T15749] Call Trace: [ 417.229725][T15749] [ 417.232712][T15749] dump_stack_lvl+0xda/0x130 [ 417.237317][T15749] dump_stack+0x15/0x20 [ 417.241484][T15749] should_fail_ex+0x21f/0x230 [ 417.246200][T15749] should_fail+0xb/0x10 [ 417.250399][T15749] should_fail_usercopy+0x1a/0x20 [ 417.255470][T15749] _copy_from_user+0x1e/0xd0 [ 417.260064][T15749] copy_msghdr_from_user+0x54/0x2a0 [ 417.265305][T15749] __sys_sendmmsg+0x224/0x500 [ 417.270024][T15749] __x64_sys_sendmmsg+0x57/0x60 [ 417.274991][T15749] do_syscall_64+0x41/0xc0 [ 417.279425][T15749] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 417.285356][T15749] RIP: 0033:0x7fd6b246b169 [ 417.289785][T15749] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 417.309431][T15749] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 417.317861][T15749] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 417.325838][T15749] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 417.333822][T15749] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 [ 417.341814][T15749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 417.349805][T15749] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 417.357794][T15749] [ 417.585886][T15765] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:37:29 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x14}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:29 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x11}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:29 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 72) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:37:29 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000060040000d0020000d00200000000000000000000d0020000c8030000c8030000c7fc0000c8030000c8030000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008802d00200000000000000000000000000000000000000005801686173686c696d69740000000000000000000000000000000000000000036970365f7674693000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00000000000000000000000022000000feffffff0000000000000000000000000000000000000000c000737472696e670000000000000000000000000000000000000000000000010000000900736d000000000000000000010000000000000021390eb8a10d61905c915cd228ca97b5ce382683c91019c72674282bfdd8705b2bec82c7e6a47fe2fa5de4d4cffd0a70df1168448dd67391da71a4d40daaf91ee10181a6e2cc70723760440ff801aab7fdb67e5c1a436e18b54efa66ad91f24342af8e7ae060ed1b7e8abb92cc6d113df52f3c0fd51ae5f7d2fe47330100000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff020000000000000000000000000001627071300000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e64000000658181e193800057000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000fcff0000000000000000000000000000000000000030006463637000000000000000000000e60000000000000000000000000000000000000000000000000000000000000030005345540000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000e5ffffff00000000feffffff"], 0x1) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) [ 418.033439][T15776] FAULT_INJECTION: forcing a failure. [ 418.033439][T15776] name failslab, interval 1, probability 0, space 0, times 0 [ 418.046197][T15776] CPU: 1 PID: 15776 Comm: syz-executor.1 Not tainted 6.3.0-syzkaller #0 [ 418.054654][T15776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 418.064724][T15776] Call Trace: [ 418.068018][T15776] [ 418.070956][T15776] dump_stack_lvl+0xda/0x130 [ 418.075602][T15776] dump_stack+0x15/0x20 01:37:29 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) r2 = socket(0x10, 0x80802, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 418.079773][T15776] should_fail_ex+0x21f/0x230 [ 418.084462][T15776] __should_failslab+0x92/0xa0 [ 418.089267][T15776] should_failslab+0x9/0x20 [ 418.093819][T15776] slab_pre_alloc_hook+0x38/0x180 [ 418.098937][T15776] kmem_cache_alloc_node+0x5d/0x2e0 [ 418.104237][T15776] ? __alloc_skb+0x109/0x2e0 [ 418.108956][T15776] __alloc_skb+0x109/0x2e0 [ 418.113422][T15776] alloc_skb_with_frags+0x80/0x3e0 [ 418.118554][T15776] ? autoremove_wake_function+0x23/0x50 [ 418.124195][T15776] ? receiver_wake_function+0x55/0x60 [ 418.129655][T15776] ? __rcu_read_unlock+0x4d/0x70 [ 418.134658][T15776] sock_alloc_send_pskb+0x434/0x4e0 [ 418.139900][T15776] unix_dgram_sendmsg+0x3dd/0x1110 [ 418.145191][T15776] ? unix_dgram_poll+0x3e0/0x3e0 [ 418.150185][T15776] ____sys_sendmsg+0x375/0x4c0 [ 418.155043][T15776] __sys_sendmmsg+0x263/0x500 [ 418.159895][T15776] __x64_sys_sendmmsg+0x57/0x60 [ 418.164763][T15776] do_syscall_64+0x41/0xc0 [ 418.169252][T15776] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 418.175181][T15776] RIP: 0033:0x7fd6b246b169 [ 418.179602][T15776] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 418.199242][T15776] RSP: 002b:00007fd6b17de168 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 418.207684][T15776] RAX: ffffffffffffffda RBX: 00007fd6b258af80 RCX: 00007fd6b246b169 [ 418.215654][T15776] RDX: 0000000000000318 RSI: 00000000200bd000 RDI: 0000000000000004 [ 418.223683][T15776] RBP: 00007fd6b17de1d0 R08: 0000000000000000 R09: 0000000000000000 01:37:30 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) (async, rerun: 64) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) r2 = socket(0x10, 0x80802, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) 01:37:30 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 418.231663][T15776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 418.239706][T15776] R13: 00007fff956e916f R14: 00007fd6b17de300 R15: 0000000000022000 [ 418.247690][T15776] 01:37:30 executing program 0: r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000240)=0xc) process_vm_writev(r4, &(0x7f0000003700)=[{&(0x7f00000002c0)=""/11, 0xb}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000300)=""/226, 0xe2}, {&(0x7f0000000400)=""/209, 0xd1}, {&(0x7f0000002580)=""/233, 0xe9}, {&(0x7f0000002680)=""/72, 0x48}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x8, &(0x7f0000003880)=[{&(0x7f0000003780)=""/230, 0xe6}, {&(0x7f0000000500)=""/39, 0x27}], 0x2, 0x0) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000038c0)=0x4, 0x4) [ 418.572930][T15802] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:37:30 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (fail_nth: 73) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[], 0x1) 01:37:30 executing program 4: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x12}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x810) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:37:30 executing program 2: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) 01:37:30 executing program 3: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0xac2, 0x0) r1 = socket(0x10, 0x0, 0x0) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x17}, 0x1c) r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[], 0xb0}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x165842, 0x0) 01:37:30 executing program 5: openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0xffffffffffffffff, 0x5, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x60, 0x80000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000005a00010000000000000000000000000033817c5306bbcf8d8c031933550c5372bf822655adb4cbb8a7fd76365d99756e4f536b6cc1000000"], 0x3c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000000)="19da789b90dfc0b47350911606581c00", 0x10) sendfile(r3, r4, &(0x7f0000000640)=0x4, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="00006e4bc81e9687d6c485910fff807adb00ac09f2ff00009e988fd3e12dbe05cf524cab402ddc4f329e0f29d5d22e98186e02566e2cf9f9877d9eb8b309e2b58e1b8f47020000000000000079d00492bce3825691fc16354c0fb3dc03849e83f37cc5c7f8c5f648df1ed97194de219b9772d1ab0dbc3d60cfd8ccd351682104046a726d2e5e765aeaba0bc7249dd7892a8dfd9325791b73d7c001b4c7336ba2f4d8cb52a31fd1fd06024f0cef12b879182c808163811f8b1409e1e96c53a9da41edca896ac8f37f6b896840e61d095e7aa7b4b2"], 0x9) process_vm_writev(0x0, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f0000000080)=""/231, 0xe7}], 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x2c, 0x0, "f611165ac2c1a427cbba83724b541b983240a8d6091c00faf82caeba849c8b587269fce0c62d65c19fce352942bf847da9d96f773f3564bd78fbadd5733657d2473bca60cbb1183e8e2369011f6d88f5"}, 0xd8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007ac0), 0x0, 0x20004011) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0xb, @loopback, @rand_addr=' \x01\x00'}}) [ 419.240584][T15831] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 01:37:31 executing program 0: r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000240)=0xc) process_vm_writev(r4, &(0x7f0000003700)=[{&(0x7f00000002c0)=""/11, 0xb}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000300)=""/226, 0xe2}, {&(0x7f0000000400)=""/209, 0xd1}, {&(0x7f0000002580)=""/233, 0xe9}, {&(0x7f0000002680)=""/72, 0x48}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x8, &(0x7f0000003880)=[{&(0x7f0000003780)=""/230, 0xe6}, {&(0x7f0000000500)=""/39, 0x27}], 0x2, 0x0) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) (async) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000540)={'vlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000