&(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x4000000000000, 0x0, 0x0) 14:35:56 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2) 14:35:56 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/238, 0xee}], 0x1, 0x2, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000180)) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6, 0x10, r1, 0xe0372000) 14:35:56 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001580)='/proc/key-users\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/238, 0xee}], 0x1, 0x29, 0x0) read(r0, &(0x7f0000000200)=""/118, 0x76) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f00000015c0)=0x40000002, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001540)=@IORING_OP_WRITEV={0x2, 0x1, 0x4000, @fd=r1, 0x92e, &(0x7f0000001500)=[{&(0x7f00000012c0)="1edb34672cae6ccfdd0b42752a723bf649f18014f8c0257595b438c22bb4bbcb729aecd8d4101026439e09fd1475c3ef0470457e99f24e3577de0443d7091b89e3537b632f09e341ace475de17441e9e56aa555bb7228f29058e2de7753193ea765864c5c02afa36b60ac52daf53177f82491a84f19ce848144fa3f076ff8ca38780", 0x82}, {&(0x7f0000001380)="045097605257cc62d535467bb7e169aa3aabf7b79cf7eea54dfa2fbb8f7326856030c648748e3339f8f6d645d033730e8d6fd3a555ae4bfd56fbd212c3c062d74bc3f309ae543480f5a43668d0d4a67f4c89ab807e90bbbfd7437bba318f922bc138deced223f2b5e92b0f", 0x6b}, {&(0x7f0000001400)="9d11dbf9f283d6d79e4a65f419be409b1365c72c09938fd2557661ea192d6c215d85ad81b6c08382cff3e650ec74238c57075242b577814e49d58582c217046ebd2c1a08137c91fce12c732c6fa7e94b5889186db36ca66500050760c1fbea9c7c5b95ae9803457f8f98ac2fedbf447e35391816525340275d3939d675716e2dc829f736a7a8a9740e70c1b043b387127a5e09b04d1f2f6f3a78fd2406525fb92600a3970e6732bd08613e511a8f186f3b6457080e56f279fb5603f5a49a27c3e21e920a25677354a129cf47842f0224800261b25ffd5f849af98053506cad660c41bf215acf1fef9f2209", 0xeb}], 0x3, 0x4, 0x1, {0x2}}, 0x20) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000280)="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", 0x1000, 0x200000d1, &(0x7f0000001280)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x10000) bind$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) 14:35:56 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/zoneinfo\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x40010) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/238, 0xee}], 0x1, 0x29, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r2, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x34, 0x6, 0x9, 0x3, 0x6, 0x8001, 0x3dd, 0x40, 0x2eb, 0x1, 0xe326, 0x38, 0x2, 0x5, 0x81, 0x1}, [{0x70000000, 0x8f6, 0x0, 0x40, 0xd18d, 0x1, 0x9ab2, 0x4}], "270fb2560e1fcbc6d30412894af609c4880a690bd154ff1e027f32cf6785865f510026ec66ce69a171f200ce14bccecc5b8991b2070a2153bb5e170a2c31768796a64fe66153661310ecc1e5d5f0c1f502b412f66f089a3287a06e9545719ce6339adbe7c35f4e0c09f7f5c6a803af6d0ff0806dc56ff0e2c334f6fa095a2a379b53a4da38af0f028d1276f022fbab7fd4b461799cf4b10cceb64d62355ef6", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x817) 14:35:56 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) lseek(r0, 0xe8b7, 0x3) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/259, 0x103}], 0x1, 0x2, 0x8) r1 = accept4$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x1c, 0x80400) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000240)) 14:35:56 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/238, 0xee}], 0x1, 0x2, 0x0) write(r0, &(0x7f0000000180)="db24bb07fb72949db884b41614b89e077391080737fe67402c7230d3a19b3b4edd6a02718d1df83db5d6f0fb69fa30c5fd6568ccce4fca2182859e4ac101c685a7eedde8fc0bf1e24447ae7276da8365e096ee1d6531a03c675a4ae0c9e0bc15dcda", 0x62) 14:35:56 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/238, 0xee}], 0x1, 0x29, 0x0) syz_open_dev$vcsa(&(0x7f0000000180), 0x8, 0x80000) 14:35:56 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xffffffff00000000, 0x0, 0x0) 14:35:56 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x500, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:35:56 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/238, 0xee}], 0x1, 0x29, 0x0) 14:35:56 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/238, 0xee}], 0x1, 0x2, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$getflags(r1, 0x1) 14:35:56 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x5000000000000, 0x0, 0x0) 14:35:56 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x3) 14:35:56 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/238, 0xee}], 0x1, 0x2, 0x0) r1 = dup(0xffffffffffffffff) poll(&(0x7f0000000180)=[{r1, 0x2084}], 0x1, 0x4) 14:35:56 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) sendfile(r0, r1, 0x0, 0x9) r2 = socket$inet(0x2, 0x3, 0x4) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)=0x4, 0xffffff26) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000c80)={{}, 0x0, 0x4, @inherit={0x80, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000700000000000000020000000000000000000000000000003a00000000000000090000000000000000000000000000000010000000004724928517c500000500000000000000ff070000000000000000000000000000050000000000000003000000000000005f00000000000000c0080000000000000200000000000000"]}, @devid}) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r3, &(0x7f0000006040), 0xf7, 0x22, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000805, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r2, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) preadv(r2, &(0x7f0000000180), 0x0, 0x1, 0xfffffffd) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/238, 0xee}], 0x1, 0x29, 0x0) dup3(r1, r0, 0x0) 14:35:56 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) sendfile(r0, r1, 0x0, 0x9) r2 = socket$inet(0x2, 0x3, 0x4) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)=0x4, 0xffffff26) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000c80)={{}, 0x0, 0x4, @inherit={0x80, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000700000000000000020000000000000000000000000000003a00000000000000090000000000000000000000000000000010000000004724928517c500000500000000000000ff070000000000000000000000000000050000000000000003000000000000005f00000000000000c0080000000000000200000000000000"]}, @devid}) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r3, &(0x7f0000006040), 0xf7, 0x22, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000805, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r2, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) preadv(r2, &(0x7f0000000180), 0x0, 0x1, 0xfffffffd) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/238, 0xee}], 0x1, 0x29, 0x0) dup3(r1, r0, 0x0) 14:35:56 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000040)=""/238, 0xee}], 0x1, 0x29, 0x0) 14:35:56 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) sendfile(r0, r1, 0x0, 0x9) r2 = socket$inet(0x2, 0x3, 0x4) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)=0x4, 0xffffff26) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000c80)={{}, 0x0, 0x4, @inherit={0x80, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000700000000000000020000000000000000000000000000003a00000000000000090000000000000000000000000000000010000000004724928517c500000500000000000000ff070000000000000000000000000000050000000000000003000000000000005f00000000000000c0080000000000000200000000000000"]}, @devid}) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r3, &(0x7f0000006040), 0xf7, 0x22, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000805, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r2, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) preadv(r2, &(0x7f0000000180), 0x0, 0x1, 0xfffffffd) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/238, 0xee}], 0x1, 0x29, 0x0) dup3(r1, r0, 0x0) 14:35:56 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000040)=""/238, 0xee}], 0x1, 0x29, 0x0) 14:35:56 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2) 14:35:56 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x604, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:35:56 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) sendfile(r0, r1, 0x0, 0x9) r2 = socket$inet(0x2, 0x3, 0x4) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)=0x4, 0xffffff26) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000c80)={{}, 0x0, 0x4, @inherit={0x80, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000700000000000000020000000000000000000000000000003a00000000000000090000000000000000000000000000000010000000004724928517c500000500000000000000ff070000000000000000000000000000050000000000000003000000000000005f00000000000000c0080000000000000200000000000000"]}, @devid}) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r3, &(0x7f0000006040), 0xf7, 0x22, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000805, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r2, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) preadv(r2, &(0x7f0000000180), 0x0, 0x1, 0xfffffffd) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/238, 0xee}], 0x1, 0x29, 0x0) 14:35:56 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) 14:35:56 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x100000000000000, 0x0, 0x0) 14:35:57 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) sendfile(r0, r1, 0x0, 0x9) r2 = socket$inet(0x2, 0x3, 0x4) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)=0x4, 0xffffff26) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000c80)={{}, 0x0, 0x4, @inherit={0x80, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000700000000000000020000000000000000000000000000003a00000000000000090000000000000000000000000000000010000000004724928517c500000500000000000000ff070000000000000000000000000000050000000000000003000000000000005f00000000000000c0080000000000000200000000000000"]}, @devid}) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r3, &(0x7f0000006040), 0xf7, 0x22, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000805, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r2, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) preadv(r2, &(0x7f0000000180), 0x0, 0x1, 0xfffffffd) 14:35:57 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000040)=""/238, 0xee}], 0x1, 0x29, 0x0) 14:35:57 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) 14:35:57 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) sendfile(r0, r1, 0x0, 0x9) r2 = socket$inet(0x2, 0x3, 0x4) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)=0x4, 0xffffff26) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000c80)={{}, 0x0, 0x4, @inherit={0x80, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000700000000000000020000000000000000000000000000003a00000000000000090000000000000000000000000000000010000000004724928517c500000500000000000000ff070000000000000000000000000000050000000000000003000000000000005f00000000000000c0080000000000000200000000000000"]}, @devid}) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r3, &(0x7f0000006040), 0xf7, 0x22, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000805, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r2, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14:35:57 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:35:57 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) sendfile(r0, r1, 0x0, 0x9) r2 = socket$inet(0x2, 0x3, 0x4) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)=0x4, 0xffffff26) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000c80)={{}, 0x0, 0x4, @inherit={0x80, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000700000000000000020000000000000000000000000000003a00000000000000090000000000000000000000000000000010000000004724928517c500000500000000000000ff070000000000000000000000000000050000000000000003000000000000005f00000000000000c0080000000000000200000000000000"]}, @devid}) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r3, &(0x7f0000006040), 0xf7, 0x22, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000805, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) 14:35:57 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) sendfile(r0, r1, 0x0, 0x9) r2 = socket$inet(0x2, 0x3, 0x4) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)=0x4, 0xffffff26) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000c80)={{}, 0x0, 0x4, @inherit={0x80, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000700000000000000020000000000000000000000000000003a00000000000000090000000000000000000000000000000010000000004724928517c500000500000000000000ff070000000000000000000000000000050000000000000003000000000000005f00000000000000c0080000000000000200000000000000"]}, @devid}) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r3, &(0x7f0000006040), 0xf7, 0x22, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) 14:35:57 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x3) 14:35:57 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x700, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:35:57 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:35:57 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x5) 14:35:57 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x200000000000000, 0x0, 0x0) 14:35:57 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) sendfile(r0, r1, 0x0, 0x9) r2 = socket$inet(0x2, 0x3, 0x4) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)=0x4, 0xffffff26) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000c80)={{}, 0x0, 0x4, @inherit={0x80, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000700000000000000020000000000000000000000000000003a00000000000000090000000000000000000000000000000010000000004724928517c500000500000000000000ff070000000000000000000000000000050000000000000003000000000000005f00000000000000c0080000000000000200000000000000"]}, @devid}) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r3, &(0x7f0000006040), 0xf7, 0x22, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0x2, 0x4) 14:35:57 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:35:57 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) sendfile(r0, r1, 0x0, 0x9) socket$inet(0x2, 0x3, 0x4) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)=0x4, 0xffffff26) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000c80)={{}, 0x0, 0x4, @inherit={0x80, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000700000000000000020000000000000000000000000000003a00000000000000090000000000000000000000000000000010000000004724928517c500000500000000000000ff070000000000000000000000000000050000000000000003000000000000005f00000000000000c0080000000000000200000000000000"]}, @devid}) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r2, &(0x7f0000006040), 0xf7, 0x22, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) 14:35:57 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:35:57 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:35:57 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) sendfile(r0, r1, 0x0, 0x9) socket$inet(0x2, 0x3, 0x4) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)=0x4, 0xffffff26) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000c80)={{}, 0x0, 0x4, @inherit={0x80, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000700000000000000020000000000000000000000000000003a00000000000000090000000000000000000000000000000010000000004724928517c500000500000000000000ff070000000000000000000000000000050000000000000003000000000000005f00000000000000c0080000000000000200000000000000"]}, @devid}) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r2, &(0x7f0000006040), 0xf7, 0x22, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) 14:35:57 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xa00, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:35:57 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) 14:35:57 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:35:57 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) sendfile(r0, r1, 0x0, 0x9) socket$inet(0x2, 0x3, 0x4) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)=0x4, 0xffffff26) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000c80)={{}, 0x0, 0x4, @inherit={0x80, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000700000000000000020000000000000000000000000000003a00000000000000090000000000000000000000000000000010000000004724928517c500000500000000000000ff070000000000000000000000000000050000000000000003000000000000005f00000000000000c0080000000000000200000000000000"]}, @devid}) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r2, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:35:57 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x8) 14:35:57 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x300000000000000, 0x0, 0x0) 14:35:57 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) sendfile(r0, r1, 0x0, 0x9) socket$inet(0x2, 0x3, 0x4) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)=0x4, 0xffffff26) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000c80)={{}, 0x0, 0x4, @inherit={0x80, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000700000000000000020000000000000000000000000000003a00000000000000090000000000000000000000000000000010000000004724928517c500000500000000000000ff070000000000000000000000000000050000000000000003000000000000005f00000000000000c0080000000000000200000000000000"]}, @devid}) recvmmsg(r2, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:35:57 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xc02, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:35:57 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:35:57 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r0, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:35:57 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r0, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:35:57 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r0, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:35:57 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:35:57 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x5) 14:35:57 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:35:57 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xf00, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:35:58 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xa) 14:35:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:35:58 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) sendfile(r0, r1, 0x0, 0x9) socket$inet(0x2, 0x3, 0x4) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)=0x4, 0xffffff26) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000c80)={{}, 0x0, 0x4, @inherit={0x80, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000700000000000000020000000000000000000000000000003a00000000000000090000000000000000000000000000000010000000004724928517c500000500000000000000ff070000000000000000000000000000050000000000000003000000000000005f00000000000000c0080000000000000200000000000000"]}, @devid}) recvmmsg(r2, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:35:58 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x400000000000000, 0x0, 0x0) 14:35:58 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r0, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:35:58 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x8) 14:35:58 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf) 14:35:58 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x1800, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:35:58 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r0, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:35:58 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r0, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:35:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:35:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:35:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:35:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, 0x0, 0x0) 14:35:59 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) sendfile(r0, r1, 0x0, 0x9) socket$inet(0x2, 0x3, 0x4) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)=0x4, 0xffffff26) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000c80)={{}, 0x0, 0x4, @inherit={0x80, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000700000000000000020000000000000000000000000000003a00000000000000090000000000000000000000000000000010000000004724928517c500000500000000000000ff070000000000000000000000000000050000000000000003000000000000005f00000000000000c0080000000000000200000000000000"]}, @devid}) recvmmsg(r2, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:35:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, 0x0, 0x0) 14:35:59 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x800000000000000, 0x0, 0x0) 14:35:59 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xa) 14:35:59 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x18) 14:35:59 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x1802, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:35:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, 0x0, 0x0) 14:35:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 14:35:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 14:35:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 14:35:59 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x24) 14:35:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:36:00 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) sendfile(r0, r1, 0x0, 0x9) socket$inet(0x2, 0x3, 0x4) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)=0x4, 0xffffff26) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r2, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:36:00 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xa00000000000000, 0x0, 0x0) 14:36:00 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x2000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:00 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x3c) 14:36:00 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf) 14:36:00 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) sendfile(r0, r1, 0x0, 0x9) socket$inet(0x2, 0x3, 0x4) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)=0x4, 0xffffff26) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r2, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14:36:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:00 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x58) 14:36:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x0, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:00 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x18) 14:36:00 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xc02000000000000, 0x0, 0x0) 14:36:00 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x2400, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x0, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x0, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:01 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x3c00, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:01 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) sendfile(r0, r1, 0x0, 0x9) socket$inet(0x2, 0x3, 0x4) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)=0x4, 0xffffff26) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r2, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:01 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xf00000000000000, 0x0, 0x0) 14:36:01 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1f4) 14:36:01 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x24) 14:36:01 executing program 2: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0xfffffff5, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:01 executing program 2: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0xfffffff5, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:01 executing program 2: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x3c000000, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:01 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x4102, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:01 executing program 2 (fault-call:3 fault-nth:0): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) [ 150.895194][T12220] FAULT_INJECTION: forcing a failure. [ 150.895194][T12220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.908279][T12220] CPU: 0 PID: 12220 Comm: syz-executor.2 Not tainted 5.14.0-rc5-syzkaller #0 [ 150.917034][T12220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 150.927078][T12220] Call Trace: [ 150.930339][T12220] dump_stack_lvl+0xb7/0x103 [ 150.934927][T12220] dump_stack+0x11/0x1a [ 150.939076][T12220] should_fail+0x23c/0x250 [ 150.943541][T12220] should_fail_usercopy+0x16/0x20 [ 150.948638][T12220] _copy_from_user+0x1c/0xd0 [ 150.953216][T12220] __copy_msghdr_from_user+0x44/0x350 [ 150.958582][T12220] ? __fget_light+0x21b/0x260 [ 150.963256][T12220] __sys_sendmsg+0x135/0x270 [ 150.967850][T12220] ? kstrtouint_from_user+0x104/0x130 [ 150.973216][T12220] ? do_filp_open+0x18a/0x200 [ 150.977893][T12220] ? fsnotify_perm+0x59/0x2e0 [ 150.982572][T12220] ? __fsnotify_parent+0x32f/0x430 [ 150.987679][T12220] ? get_pid_task+0x8b/0xc0 [ 150.992170][T12220] ? vfs_write+0x50c/0x770 [ 150.996580][T12220] ? __fget_light+0x21b/0x260 [ 151.001251][T12220] ? __cond_resched+0x11/0x40 [ 151.005928][T12220] ? fput+0x2d/0x130 [ 151.009900][T12220] ? ksys_write+0x157/0x180 [ 151.014394][T12220] __x64_sys_sendmsg+0x42/0x50 [ 151.019159][T12220] do_syscall_64+0x3d/0x90 [ 151.023575][T12220] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 151.029470][T12220] RIP: 0033:0x4665e9 [ 151.033414][T12220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 151.053016][T12220] RSP: 002b:00007fafe586b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.061477][T12220] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 151.069512][T12220] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 151.077479][T12220] RBP: 00007fafe586b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 151.085518][T12220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 14:36:01 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x20c) 14:36:01 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x1800000000000000, 0x0, 0x0) [ 151.093555][T12220] R13: 00007fff95e0230f R14: 00007fafe586b300 R15: 0000000000022000 14:36:01 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x3c) 14:36:02 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) sendfile(r0, r1, 0x0, 0x9) socket$inet(0x2, 0x3, 0x4) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)=0x4, 0xffffff26) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r2, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:02 executing program 2 (fault-call:3 fault-nth:1): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:02 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x4200, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:02 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x1802000000000000, 0x0, 0x0) 14:36:02 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x218) 14:36:02 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x58) [ 151.517129][T12249] FAULT_INJECTION: forcing a failure. [ 151.517129][T12249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.530193][T12249] CPU: 0 PID: 12249 Comm: syz-executor.2 Not tainted 5.14.0-rc5-syzkaller #0 [ 151.538952][T12249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 151.548997][T12249] Call Trace: [ 151.552265][T12249] dump_stack_lvl+0xb7/0x103 [ 151.556927][T12249] dump_stack+0x11/0x1a [ 151.561075][T12249] should_fail+0x23c/0x250 [ 151.565542][T12249] should_fail_usercopy+0x16/0x20 [ 151.570632][T12249] _copy_from_user+0x1c/0xd0 [ 151.575274][T12249] iovec_from_user+0xc4/0x2d0 [ 151.579948][T12249] ? path_openat+0x18e4/0x1f20 [ 151.584772][T12249] __import_iovec+0x57/0x2c0 [ 151.589359][T12249] ? _copy_from_user+0x94/0xd0 [ 151.594113][T12249] import_iovec+0x69/0x80 [ 151.598513][T12249] __sys_sendmsg+0x1ab/0x270 [ 151.603106][T12249] ? do_filp_open+0x18a/0x200 [ 151.607780][T12249] ? fsnotify_perm+0x59/0x2e0 [ 151.612448][T12249] ? __fsnotify_parent+0x32f/0x430 [ 151.617548][T12249] ? get_pid_task+0x8b/0xc0 [ 151.622104][T12249] ? vfs_write+0x50c/0x770 [ 151.626559][T12249] ? __fget_light+0x21b/0x260 [ 151.631232][T12249] ? __cond_resched+0x11/0x40 [ 151.635937][T12249] ? fput+0x2d/0x130 [ 151.639826][T12249] ? ksys_write+0x157/0x180 [ 151.644364][T12249] __x64_sys_sendmsg+0x42/0x50 [ 151.649175][T12249] do_syscall_64+0x3d/0x90 [ 151.653589][T12249] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 151.659480][T12249] RIP: 0033:0x4665e9 [ 151.663386][T12249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 151.682979][T12249] RSP: 002b:00007fafe586b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.691385][T12249] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 151.699398][T12249] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 151.707363][T12249] RBP: 00007fafe586b1d0 R08: 0000000000000000 R09: 0000000000000000 14:36:02 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xd7ff, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 151.715415][T12249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.723379][T12249] R13: 00007fff95e0230f R14: 00007fafe586b300 R15: 0000000000022000 14:36:02 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x241) 14:36:02 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x2000000000000000, 0x0, 0x0) 14:36:02 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xe803, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:02 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1f4) 14:36:02 executing program 2 (fault-call:3 fault-nth:2): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) [ 152.154941][T12278] FAULT_INJECTION: forcing a failure. [ 152.154941][T12278] name failslab, interval 1, probability 0, space 0, times 0 [ 152.167589][T12278] CPU: 0 PID: 12278 Comm: syz-executor.2 Not tainted 5.14.0-rc5-syzkaller #0 [ 152.176348][T12278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 152.186404][T12278] Call Trace: [ 152.189679][T12278] dump_stack_lvl+0xb7/0x103 [ 152.194266][T12278] dump_stack+0x11/0x1a [ 152.198424][T12278] should_fail+0x23c/0x250 [ 152.203068][T12278] __should_failslab+0x81/0x90 [ 152.207830][T12278] should_failslab+0x5/0x20 [ 152.212388][T12278] kmem_cache_alloc_node+0x58/0x2b0 [ 152.217587][T12278] ? __alloc_skb+0xed/0x420 [ 152.222156][T12278] __alloc_skb+0xed/0x420 [ 152.226480][T12278] netlink_sendmsg+0x4c4/0x7c0 [ 152.231267][T12278] ? netlink_getsockopt+0x720/0x720 [ 152.236460][T12278] ____sys_sendmsg+0x360/0x4d0 [ 152.241226][T12278] ? import_iovec+0x69/0x80 [ 152.245729][T12278] __sys_sendmsg+0x1ed/0x270 [ 152.250361][T12278] ? __fsnotify_parent+0x32f/0x430 [ 152.255469][T12278] ? get_pid_task+0x8b/0xc0 [ 152.259967][T12278] ? vfs_write+0x50c/0x770 [ 152.264389][T12278] ? __fget_light+0x21b/0x260 [ 152.269054][T12278] ? __cond_resched+0x11/0x40 [ 152.273732][T12278] ? fput+0x2d/0x130 [ 152.277650][T12278] ? ksys_write+0x157/0x180 [ 152.282153][T12278] __x64_sys_sendmsg+0x42/0x50 [ 152.286918][T12278] do_syscall_64+0x3d/0x90 [ 152.291387][T12278] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 152.297291][T12278] RIP: 0033:0x4665e9 [ 152.301156][T12278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 152.320738][T12278] RSP: 002b:00007fafe586b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.329170][T12278] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 152.337161][T12278] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 152.345110][T12278] RBP: 00007fafe586b1d0 R08: 0000000000000000 R09: 0000000000000000 14:36:03 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) sendfile(r0, r1, 0x0, 0x9) socket$inet(0x2, 0x3, 0x4) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)=0x4, 0xffffff26) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r2, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:03 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xf401, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:03 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300) 14:36:03 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x2400000000000000, 0x0, 0x0) 14:36:03 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x20c) 14:36:03 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) sendfile(r0, r1, 0x0, 0x9) socket$inet(0x2, 0x3, 0x4) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)=0x4, 0xffffff26) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r2, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 152.353063][T12278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.361071][T12278] R13: 00007fff95e0230f R14: 00007fafe586b300 R15: 0000000000022000 14:36:03 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) sendfile(r0, r1, 0x0, 0x9) socket$inet(0x2, 0x3, 0x4) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)=0x4, 0xffffff26) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r2, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:03 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) sendfile(r0, r1, 0x0, 0x9) socket$inet(0x2, 0x3, 0x4) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r2, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:03 executing program 2 (fault-call:3 fault-nth:3): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) [ 152.585844][T12302] FAULT_INJECTION: forcing a failure. [ 152.585844][T12302] name failslab, interval 1, probability 0, space 0, times 0 [ 152.598476][T12302] CPU: 0 PID: 12302 Comm: syz-executor.2 Not tainted 5.14.0-rc5-syzkaller #0 [ 152.607236][T12302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 152.617338][T12302] Call Trace: [ 152.620619][T12302] dump_stack_lvl+0xb7/0x103 [ 152.625211][T12302] dump_stack+0x11/0x1a [ 152.629408][T12302] should_fail+0x23c/0x250 [ 152.633901][T12302] __should_failslab+0x81/0x90 [ 152.638657][T12302] should_failslab+0x5/0x20 [ 152.643194][T12302] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 152.648935][T12302] ? __kmalloc_node_track_caller+0x30/0x40 [ 152.654743][T12302] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 152.660230][T12302] __kmalloc_node_track_caller+0x30/0x40 [ 152.665864][T12302] ? netlink_sendmsg+0x4c4/0x7c0 [ 152.670799][T12302] __alloc_skb+0x187/0x420 [ 152.675288][T12302] netlink_sendmsg+0x4c4/0x7c0 [ 152.680133][T12302] ? netlink_getsockopt+0x720/0x720 [ 152.685404][T12302] ____sys_sendmsg+0x360/0x4d0 [ 152.690268][T12302] ? import_iovec+0x69/0x80 [ 152.694770][T12302] __sys_sendmsg+0x1ed/0x270 [ 152.699352][T12302] ? __fsnotify_parent+0x32f/0x430 [ 152.704452][T12302] ? get_pid_task+0x8b/0xc0 [ 152.708954][T12302] ? vfs_write+0x50c/0x770 [ 152.713406][T12302] ? __fget_light+0x21b/0x260 [ 152.718098][T12302] ? __cond_resched+0x11/0x40 [ 152.723214][T12302] ? fput+0x2d/0x130 [ 152.727099][T12302] ? ksys_write+0x157/0x180 [ 152.731612][T12302] __x64_sys_sendmsg+0x42/0x50 [ 152.736372][T12302] do_syscall_64+0x3d/0x90 [ 152.740797][T12302] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 152.746748][T12302] RIP: 0033:0x4665e9 [ 152.750634][T12302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 152.770253][T12302] RSP: 002b:00007fafe586b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.778719][T12302] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:03 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) sendfile(r0, r1, 0x0, 0x9) socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:03 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) sendfile(r0, r1, 0x0, 0x9) socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:03 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) sendfile(r0, r1, 0x0, 0x9) socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:03 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) sendfile(r0, r1, 0x0, 0x9) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r2, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 152.786675][T12302] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 152.794640][T12302] RBP: 00007fafe586b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 152.802679][T12302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.810638][T12302] R13: 00007fff95e0230f R14: 00007fafe586b300 R15: 0000000000022000 14:36:03 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xff0f, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:03 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x3e8) 14:36:03 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x3c00000000000000, 0x0, 0x0) 14:36:03 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x401) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r1, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:03 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x218) 14:36:03 executing program 2 (fault-call:3 fault-nth:4): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) [ 152.935624][T12329] FAULT_INJECTION: forcing a failure. [ 152.935624][T12329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.948696][T12329] CPU: 0 PID: 12329 Comm: syz-executor.2 Not tainted 5.14.0-rc5-syzkaller #0 [ 152.957457][T12329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 152.967503][T12329] Call Trace: [ 152.970803][T12329] dump_stack_lvl+0xb7/0x103 [ 152.975472][T12329] dump_stack+0x11/0x1a [ 152.979794][T12329] should_fail+0x23c/0x250 [ 152.984212][T12329] should_fail_usercopy+0x16/0x20 [ 152.989237][T12329] _copy_from_iter+0x131/0x970 [ 152.993996][T12329] ? check_stack_object+0x61/0x70 [ 152.999114][T12329] ? __virt_addr_valid+0x15a/0x1a0 [ 153.004219][T12329] ? __check_object_size+0x253/0x310 [ 153.009502][T12329] netlink_sendmsg+0x57c/0x7c0 [ 153.014264][T12329] ? netlink_getsockopt+0x720/0x720 [ 153.019461][T12329] ____sys_sendmsg+0x360/0x4d0 [ 153.024229][T12329] ? import_iovec+0x69/0x80 [ 153.028763][T12329] __sys_sendmsg+0x1ed/0x270 [ 153.033355][T12329] ? __fsnotify_parent+0x32f/0x430 [ 153.038470][T12329] ? get_pid_task+0x8b/0xc0 [ 153.042975][T12329] ? vfs_write+0x50c/0x770 [ 153.047459][T12329] ? __fget_light+0x21b/0x260 [ 153.052128][T12329] ? __cond_resched+0x11/0x40 [ 153.056832][T12329] ? fput+0x2d/0x130 [ 153.060724][T12329] ? ksys_write+0x157/0x180 [ 153.065214][T12329] __x64_sys_sendmsg+0x42/0x50 [ 153.070082][T12329] do_syscall_64+0x3d/0x90 [ 153.074493][T12329] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 153.080404][T12329] RIP: 0033:0x4665e9 [ 153.084288][T12329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 153.103881][T12329] RSP: 002b:00007fafe586b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.112375][T12329] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 153.120381][T12329] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 153.128353][T12329] RBP: 00007fafe586b1d0 R08: 0000000000000000 R09: 0000000000000000 14:36:03 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:03 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:03 executing program 3: r0 = socket$inet(0x2, 0x0, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:03 executing program 3: r0 = socket$inet(0x2, 0x0, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:03 executing program 3: r0 = socket$inet(0x2, 0x0, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 153.136324][T12329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.144404][T12329] R13: 00007fff95e0230f R14: 00007fafe586b300 R15: 0000000000022000 14:36:03 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:04 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xffd7, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:04 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x500) 14:36:04 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x4102000000000000, 0x0, 0x0) 14:36:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:04 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x241) 14:36:04 executing program 2 (fault-call:3 fault-nth:5): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 153.431908][T12372] FAULT_INJECTION: forcing a failure. [ 153.431908][T12372] name failslab, interval 1, probability 0, space 0, times 0 [ 153.444543][T12372] CPU: 0 PID: 12372 Comm: syz-executor.2 Not tainted 5.14.0-rc5-syzkaller #0 [ 153.453399][T12372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.463450][T12372] Call Trace: [ 153.466753][T12372] dump_stack_lvl+0xb7/0x103 [ 153.471374][T12372] dump_stack+0x11/0x1a [ 153.475520][T12372] should_fail+0x23c/0x250 14:36:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 153.479942][T12372] __should_failslab+0x81/0x90 [ 153.484781][T12372] ? genl_start+0xd4/0x2c0 [ 153.489222][T12372] should_failslab+0x5/0x20 [ 153.493720][T12372] kmem_cache_alloc_trace+0x49/0x310 [ 153.499058][T12372] ? __netlink_lookup+0x8c/0x250 [ 153.503992][T12372] genl_start+0xd4/0x2c0 [ 153.508229][T12372] __netlink_dump_start+0x2d5/0x4d0 [ 153.513418][T12372] ? netlbl_mgmt_remove+0xe0/0xe0 [ 153.518444][T12372] genl_rcv_msg+0x572/0x800 [ 153.522939][T12372] ? netlbl_mgmt_remove+0xe0/0xe0 14:36:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 153.527996][T12372] ? genl_rcv_msg+0x800/0x800 [ 153.532669][T12372] ? genl_start+0x2c0/0x2c0 [ 153.537205][T12372] ? genl_lock_dumpit+0x60/0x60 [ 153.542107][T12372] netlink_rcv_skb+0x13e/0x240 [ 153.546861][T12372] ? genl_bind+0x1d0/0x1d0 [ 153.551311][T12372] genl_rcv+0x24/0x40 [ 153.555370][T12372] netlink_unicast+0x5ec/0x6b0 [ 153.560124][T12372] netlink_sendmsg+0x6d9/0x7c0 [ 153.564876][T12372] ? netlink_getsockopt+0x720/0x720 [ 153.570070][T12372] ____sys_sendmsg+0x360/0x4d0 [ 153.574826][T12372] ? import_iovec+0x69/0x80 14:36:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 153.579430][T12372] __sys_sendmsg+0x1ed/0x270 [ 153.584052][T12372] ? __fsnotify_parent+0x32f/0x430 [ 153.589157][T12372] ? get_pid_task+0x8b/0xc0 [ 153.593762][T12372] ? vfs_write+0x50c/0x770 [ 153.598229][T12372] ? __fget_light+0x21b/0x260 [ 153.602903][T12372] ? __cond_resched+0x11/0x40 [ 153.607601][T12372] ? fput+0x2d/0x130 [ 153.611491][T12372] ? ksys_write+0x157/0x180 [ 153.615992][T12372] __x64_sys_sendmsg+0x42/0x50 [ 153.620758][T12372] do_syscall_64+0x3d/0x90 [ 153.625170][T12372] entry_SYSCALL_64_after_hwframe+0x44/0xae 14:36:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 153.631247][T12372] RIP: 0033:0x4665e9 [ 153.635133][T12372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 153.654839][T12372] RSP: 002b:00007fafe586b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.663298][T12372] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 153.671286][T12372] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 153.679253][T12372] RBP: 00007fafe586b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 153.687216][T12372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.695211][T12372] R13: 00007fff95e0230f R14: 00007fafe586b300 R15: 0000000000022000 14:36:04 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x20000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:04 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xa00) 14:36:04 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x428fc60400000000, 0x0, 0x0) 14:36:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:04 executing program 2 (fault-call:3 fault-nth:6): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:04 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300) [ 153.877845][T12407] FAULT_INJECTION: forcing a failure. [ 153.877845][T12407] name failslab, interval 1, probability 0, space 0, times 0 [ 153.890912][T12407] CPU: 0 PID: 12407 Comm: syz-executor.2 Not tainted 5.14.0-rc5-syzkaller #0 [ 153.899668][T12407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.909791][T12407] Call Trace: [ 153.913062][T12407] dump_stack_lvl+0xb7/0x103 [ 153.917650][T12407] dump_stack+0x11/0x1a [ 153.921797][T12407] should_fail+0x23c/0x250 [ 153.926204][T12407] __should_failslab+0x81/0x90 [ 153.931006][T12407] should_failslab+0x5/0x20 [ 153.935503][T12407] kmem_cache_alloc_node+0x58/0x2b0 [ 153.940737][T12407] ? __alloc_skb+0xed/0x420 [ 153.945236][T12407] __alloc_skb+0xed/0x420 [ 153.949561][T12407] netlink_dump+0x15f/0x860 [ 153.954051][T12407] ? genl_start+0xd4/0x2c0 [ 153.958465][T12407] __netlink_dump_start+0x3e3/0x4d0 [ 153.963658][T12407] ? netlbl_mgmt_remove+0xe0/0xe0 [ 153.968704][T12407] genl_rcv_msg+0x572/0x800 [ 153.973206][T12407] ? netlbl_mgmt_remove+0xe0/0xe0 [ 153.978237][T12407] ? genl_rcv_msg+0x800/0x800 [ 153.982911][T12407] ? genl_start+0x2c0/0x2c0 [ 153.987424][T12407] ? genl_lock_dumpit+0x60/0x60 [ 153.992269][T12407] netlink_rcv_skb+0x13e/0x240 [ 153.997101][T12407] ? genl_bind+0x1d0/0x1d0 [ 154.001507][T12407] genl_rcv+0x24/0x40 [ 154.005576][T12407] netlink_unicast+0x5ec/0x6b0 [ 154.010338][T12407] netlink_sendmsg+0x6d9/0x7c0 [ 154.015095][T12407] ? netlink_getsockopt+0x720/0x720 [ 154.020287][T12407] ____sys_sendmsg+0x360/0x4d0 [ 154.025117][T12407] ? import_iovec+0x69/0x80 [ 154.029613][T12407] __sys_sendmsg+0x1ed/0x270 [ 154.034207][T12407] ? __fsnotify_parent+0x32f/0x430 [ 154.039389][T12407] ? get_pid_task+0x8b/0xc0 [ 154.043892][T12407] ? vfs_write+0x50c/0x770 [ 154.048305][T12407] ? __fget_light+0x21b/0x260 [ 154.052982][T12407] ? __cond_resched+0x11/0x40 [ 154.057658][T12407] ? fput+0x2d/0x130 [ 154.061552][T12407] ? ksys_write+0x157/0x180 [ 154.066060][T12407] __x64_sys_sendmsg+0x42/0x50 [ 154.070827][T12407] do_syscall_64+0x3d/0x90 [ 154.075243][T12407] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 154.081141][T12407] RIP: 0033:0x4665e9 [ 154.085020][T12407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 154.104621][T12407] RSP: 002b:00007fafe586b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.113088][T12407] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 154.121054][T12407] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 14:36:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 154.129013][T12407] RBP: 00007fafe586b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 154.136979][T12407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.145005][T12407] R13: 00007fff95e0230f R14: 00007fafe586b300 R15: 0000000000022000 14:36:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000), 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:04 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x50000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:04 executing program 2 (fault-call:3 fault-nth:7): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:04 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x4e97c6d617000000, 0x0, 0x0) 14:36:04 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xc02) [ 154.348528][T12436] FAULT_INJECTION: forcing a failure. [ 154.348528][T12436] name failslab, interval 1, probability 0, space 0, times 0 [ 154.361164][T12436] CPU: 0 PID: 12436 Comm: syz-executor.2 Not tainted 5.14.0-rc5-syzkaller #0 [ 154.369977][T12436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 154.380025][T12436] Call Trace: [ 154.383294][T12436] dump_stack_lvl+0xb7/0x103 [ 154.387877][T12436] dump_stack+0x11/0x1a [ 154.392033][T12436] should_fail+0x23c/0x250 [ 154.396453][T12436] __should_failslab+0x81/0x90 [ 154.401211][T12436] should_failslab+0x5/0x20 [ 154.405772][T12436] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 154.411561][T12436] ? __kmalloc_node_track_caller+0x30/0x40 [ 154.417375][T12436] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 154.422832][T12436] __kmalloc_node_track_caller+0x30/0x40 [ 154.428465][T12436] ? netlink_dump+0x15f/0x860 [ 154.433127][T12436] __alloc_skb+0x187/0x420 [ 154.437541][T12436] netlink_dump+0x15f/0x860 [ 154.442049][T12436] ? genl_start+0xd4/0x2c0 [ 154.446465][T12436] __netlink_dump_start+0x3e3/0x4d0 [ 154.451701][T12436] ? netlbl_mgmt_remove+0xe0/0xe0 [ 154.456738][T12436] genl_rcv_msg+0x572/0x800 [ 154.461262][T12436] ? netlbl_mgmt_remove+0xe0/0xe0 [ 154.466321][T12436] ? genl_rcv_msg+0x800/0x800 [ 154.471070][T12436] ? genl_start+0x2c0/0x2c0 [ 154.475566][T12436] ? genl_lock_dumpit+0x60/0x60 [ 154.480472][T12436] netlink_rcv_skb+0x13e/0x240 [ 154.485229][T12436] ? genl_bind+0x1d0/0x1d0 [ 154.489738][T12436] genl_rcv+0x24/0x40 [ 154.493714][T12436] netlink_unicast+0x5ec/0x6b0 [ 154.498667][T12436] netlink_sendmsg+0x6d9/0x7c0 [ 154.503425][T12436] ? netlink_getsockopt+0x720/0x720 [ 154.508611][T12436] ____sys_sendmsg+0x360/0x4d0 [ 154.513372][T12436] ? import_iovec+0x69/0x80 [ 154.517876][T12436] __sys_sendmsg+0x1ed/0x270 [ 154.522459][T12436] ? __fsnotify_parent+0x32f/0x430 [ 154.527573][T12436] ? get_pid_task+0x8b/0xc0 [ 154.532209][T12436] ? vfs_write+0x50c/0x770 [ 154.536649][T12436] ? __fget_light+0x21b/0x260 [ 154.541330][T12436] ? __cond_resched+0x11/0x40 14:36:05 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x3e8) 14:36:05 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf00) 14:36:05 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x5800000000000000, 0x0, 0x0) 14:36:05 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x1000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 154.546012][T12436] ? fput+0x2d/0x130 [ 154.549905][T12436] ? ksys_write+0x157/0x180 [ 154.554428][T12436] __x64_sys_sendmsg+0x42/0x50 [ 154.559187][T12436] do_syscall_64+0x3d/0x90 [ 154.563643][T12436] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 154.569542][T12436] RIP: 0033:0x4665e9 [ 154.573426][T12436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 154.593043][T12436] RSP: 002b:00007fafe586b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.601452][T12436] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 154.609420][T12436] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 154.617386][T12436] RBP: 00007fafe586b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 154.625348][T12436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.633341][T12436] R13: 00007fff95e0230f R14: 00007fafe586b300 R15: 0000000000022000 14:36:05 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1800) 14:36:05 executing program 2 (fault-call:3 fault-nth:8): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:05 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x91ffffff00000000, 0x0, 0x0) [ 154.862190][T12458] FAULT_INJECTION: forcing a failure. [ 154.862190][T12458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.875260][T12458] CPU: 0 PID: 12458 Comm: syz-executor.2 Not tainted 5.14.0-rc5-syzkaller #0 [ 154.884009][T12458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 154.894056][T12458] Call Trace: [ 154.897329][T12458] dump_stack_lvl+0xb7/0x103 [ 154.902018][T12458] dump_stack+0x11/0x1a [ 154.906188][T12458] should_fail+0x23c/0x250 [ 154.910603][T12458] should_fail_usercopy+0x16/0x20 [ 154.915681][T12458] _copy_to_user+0x1c/0x90 [ 154.920199][T12458] simple_read_from_buffer+0xab/0x120 [ 154.925568][T12458] proc_fail_nth_read+0xf6/0x140 [ 154.930507][T12458] ? rw_verify_area+0x136/0x250 [ 154.935359][T12458] ? proc_fault_inject_write+0x200/0x200 [ 154.940991][T12458] vfs_read+0x154/0x5d0 [ 154.945147][T12458] ? __fget_light+0x21b/0x260 [ 154.949916][T12458] ? __cond_resched+0x11/0x40 [ 154.954660][T12458] ksys_read+0xce/0x180 [ 154.958809][T12458] __x64_sys_read+0x3e/0x50 [ 154.963310][T12458] do_syscall_64+0x3d/0x90 [ 154.967722][T12458] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 154.973669][T12458] RIP: 0033:0x41936c [ 154.977554][T12458] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 154.997215][T12458] RSP: 002b:00007fafe586b170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 14:36:05 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x500) [ 155.005647][T12458] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 000000000041936c [ 155.013621][T12458] RDX: 000000000000000f RSI: 00007fafe586b1e0 RDI: 0000000000000003 [ 155.021598][T12458] RBP: 00007fafe586b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 155.029561][T12458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.037518][T12458] R13: 00007fff95e0230f R14: 00007fafe586b300 R15: 0000000000022000 14:36:05 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:05 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x2000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:05 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1802) 14:36:05 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:05 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xa00) 14:36:05 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:05 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:05 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:06 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xb17a000000000000, 0x0, 0x0) 14:36:06 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x2040000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:06 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:06 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xc02) 14:36:06 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 14:36:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0xec0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:06 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x3000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:06 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xd7ff000000000000, 0x0, 0x0) 14:36:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0xc00e, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:06 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x4000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x400300, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x1000000, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:06 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2400) 14:36:07 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:07 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x2000000, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:07 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xd7ffffff00000000, 0x0, 0x0) 14:36:07 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf00) 14:36:07 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x6040000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:07 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x3c00) 14:36:07 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x3000000, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:07 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x4000000, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:07 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x9effffff, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:07 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0xac051ebe, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:07 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x7000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:07 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0xbe1e05ac, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:08 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:08 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xe803000000000000, 0x0, 0x0) 14:36:08 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1800) 14:36:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0xc00e0000, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:08 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4102) 14:36:08 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x8000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0xefffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0xf0ffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0xffffff7f, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:08 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xa000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0xffffff9e, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0xffffffef, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:09 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:09 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1802) 14:36:09 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x5800) 14:36:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0xfffffff0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:09 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xf401000000000000, 0x0, 0x0) 14:36:09 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xc020000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xf, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xc0, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xec0, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:09 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xf5ffffff00000000, 0x0, 0x0) 14:36:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x33fe0, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:10 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:10 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xd7ff) 14:36:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20000054, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:10 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xf000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:10 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 14:36:10 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xfdffffff00000000, 0x0, 0x0) 14:36:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x7ffff000, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xfffffdef, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x302, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:10 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x18000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x2, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:11 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2400) 14:36:11 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xfeffffff00000000, 0x0, 0x0) 14:36:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x3, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:11 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x18020000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:11 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xe803) 14:36:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x4, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x300, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0xec0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:11 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x20000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0xc00e, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x34000, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x400300, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:11 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x38b6) 14:36:11 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xff0f000000000000, 0x0, 0x0) 14:36:11 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x24000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:11 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf401) 14:36:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x1000000, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x2000000, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:12 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xff0f) 14:36:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x3000000, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x4000000, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:12 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0xffffffff00000000, 0x0, 0x0) 14:36:12 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x9effffff, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:12 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x3c000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:12 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x3c00) 14:36:12 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2) 14:36:12 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xffd7) 14:36:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0xac051ebe, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0xbe1e05ac, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0xc00e0000, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0xefffffff, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0xf0ffffff, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:13 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4102) 14:36:13 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:13 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x3) 14:36:13 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x20000) 14:36:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0xffffff7f, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:13 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x41020000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:13 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x5800) 14:36:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0xffffff9e, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0xffffffef, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0xfffffff0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:13 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x42000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x2, {0x3}}, 0x14}}, 0x0) 14:36:14 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:14 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) 14:36:14 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x40000) 14:36:14 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xb638) 14:36:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x3, {0x3}}, 0x14}}, 0x0) 14:36:14 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x91ffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x4, {0x3}}, 0x14}}, 0x0) 14:36:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x300, {0x3}}, 0x14}}, 0x0) 14:36:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0xec0, {0x3}}, 0x14}}, 0x0) 14:36:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0xc00e, {0x3}}, 0x14}}, 0x0) 14:36:14 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xd7ff0000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x34000, {0x3}}, 0x14}}, 0x0) 14:36:15 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:15 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x50000) 14:36:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x400300, {0x3}}, 0x14}}, 0x0) 14:36:15 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xd7ff) 14:36:15 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x5) 14:36:15 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xd7ffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:15 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x1000000, {0x3}}, 0x14}}, 0x0) 14:36:15 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:15 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x22, 0x0) 14:36:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x2000000, {0x3}}, 0x14}}, 0x0) 14:36:15 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x22, 0x0) 14:36:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x3000000, {0x3}}, 0x14}}, 0x0) 14:36:15 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1000000) 14:36:15 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x22, 0x0) 14:36:15 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xe803) 14:36:15 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x8) 14:36:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x4000000, {0x3}}, 0x14}}, 0x0) 14:36:15 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xe8030000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:15 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x0, 0x0) 14:36:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x9effffff, {0x3}}, 0x14}}, 0x0) 14:36:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0xac051ebe, {0x3}}, 0x14}}, 0x0) 14:36:15 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000000) 14:36:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0xbe1e05ac, {0x3}}, 0x14}}, 0x0) 14:36:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0xc00e0000, {0x3}}, 0x14}}, 0x0) 14:36:16 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf401) 14:36:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0xefffffff, {0x3}}, 0x14}}, 0x0) 14:36:16 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xa) 14:36:16 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xf4010000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0xf0ffffff, {0x3}}, 0x14}}, 0x0) 14:36:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0xffffff7f, {0x3}}, 0x14}}, 0x0) 14:36:16 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x0, 0x0) 14:36:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0xffffff9e, {0x3}}, 0x14}}, 0x0) 14:36:16 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x3000000) 14:36:16 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xf5ffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:16 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xff0f) 14:36:16 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf) 14:36:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0xffffffef, {0x3}}, 0x14}}, 0x0) 14:36:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0xfffffff0, {0x3}}, 0x14}}, 0x0) 14:36:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 14:36:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3, 0x2}}, 0x14}}, 0x0) 14:36:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3, 0x3}}, 0x14}}, 0x0) 14:36:17 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x0, 0x0) 14:36:17 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4000000) 14:36:17 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x18) 14:36:17 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xfeffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:17 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xffd7) 14:36:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3, 0x4}}, 0x14}}, 0x0) 14:36:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}}, 0x0) 14:36:17 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xff0f0000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}}, 0x0) 14:36:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}}, 0x0) 14:36:17 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x20000) 14:36:18 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xffffff91, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3, 0x0, 0x300}}, 0x14}}, 0x0) 14:36:18 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x24) 14:36:18 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x8000000) 14:36:18 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x40000) 14:36:18 executing program 3 (fault-call:4 fault-nth:0): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 167.756899][T13113] FAULT_INJECTION: forcing a failure. [ 167.756899][T13113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.769994][T13113] CPU: 0 PID: 13113 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 167.778751][T13113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.788820][T13113] Call Trace: [ 167.792094][T13113] dump_stack_lvl+0xb7/0x103 [ 167.796684][T13113] dump_stack+0x11/0x1a [ 167.800859][T13113] should_fail+0x23c/0x250 [ 167.805366][T13113] should_fail_usercopy+0x16/0x20 [ 167.810403][T13113] _copy_from_user+0x1c/0xd0 [ 167.814984][T13113] do_recvmmsg+0x250/0x9f0 [ 167.819406][T13113] ? fsnotify_perm+0x59/0x2e0 [ 167.824077][T13113] ? __fsnotify_parent+0x32f/0x430 [ 167.829183][T13113] ? get_pid_task+0x8b/0xc0 [ 167.833681][T13113] ? vfs_write+0x50c/0x770 [ 167.838091][T13113] ? __fget_light+0x21b/0x260 [ 167.842818][T13113] ? __cond_resched+0x11/0x40 [ 167.847500][T13113] __x64_sys_recvmmsg+0xcf/0x150 [ 167.852456][T13113] ? exit_to_user_mode_prepare+0x65/0x190 [ 167.858177][T13113] do_syscall_64+0x3d/0x90 [ 167.862607][T13113] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 167.868497][T13113] RIP: 0033:0x4665e9 [ 167.872383][T13113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 167.892162][T13113] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b 14:36:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3, 0x0, 0xec0}}, 0x14}}, 0x0) 14:36:18 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xffffffd7, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:18 executing program 3 (fault-call:4 fault-nth:1): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 167.900568][T13113] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 167.908529][T13113] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 167.916486][T13113] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 167.924504][T13113] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 167.932476][T13113] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 [ 168.012645][T13123] FAULT_INJECTION: forcing a failure. [ 168.012645][T13123] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 168.025907][T13123] CPU: 1 PID: 13123 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 168.034663][T13123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.044718][T13123] Call Trace: [ 168.048026][T13123] dump_stack_lvl+0xb7/0x103 [ 168.052612][T13123] dump_stack+0x11/0x1a [ 168.056760][T13123] should_fail+0x23c/0x250 [ 168.061179][T13123] __alloc_pages+0x102/0x320 [ 168.065849][T13123] alloc_pages_vma+0x513/0x680 [ 168.070606][T13123] ? put_dec_trunc8+0x10e/0x130 [ 168.075444][T13123] wp_page_copy+0x121/0x10c0 [ 168.080028][T13123] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 168.085828][T13123] ? __wake_up+0x8d/0xc0 [ 168.090062][T13123] do_wp_page+0x5a8/0xba0 [ 168.094387][T13123] handle_mm_fault+0xb11/0x1a50 [ 168.099228][T13123] ? __skb_try_recv_from_queue+0x3d0/0x430 [ 168.105032][T13123] do_user_addr_fault+0x609/0xbe0 [ 168.110053][T13123] exc_page_fault+0x91/0x220 [ 168.114637][T13123] asm_exc_page_fault+0x1e/0x30 [ 168.119484][T13123] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 168.125201][T13123] Code: 00 00 48 39 d9 73 54 0f 1f 00 66 89 01 31 c9 0f 1f 00 c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 1f 00 <89> 01 31 c9 0f 1f 00 c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 168.144945][T13123] RSP: 0018:ffffc9001194bc00 EFLAGS: 00010202 [ 168.151001][T13123] RAX: 0000000000000020 RBX: 0000000020006070 RCX: 0000000020006070 14:36:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3, 0x0, 0xc00e}}, 0x14}}, 0x0) 14:36:18 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xa000000) [ 168.159001][T13123] RDX: 0001c9001194bdb8 RSI: 0000000000000022 RDI: ffffc9001194bdb8 [ 168.166969][T13123] RBP: ffffc9001194bdb8 R08: 0000000000000000 R09: 0001c9001194bdbb [ 168.174931][T13123] R10: 0001ffffffffffff R11: 0000000000000000 R12: 0000000000000022 [ 168.182893][T13123] R13: 0000000000000014 R14: 0000000000000022 R15: ffffc9001194bd88 [ 168.190870][T13123] ____sys_recvmsg+0x201/0x310 [ 168.195714][T13123] ? import_iovec+0x69/0x80 [ 168.200221][T13123] do_recvmmsg+0x35c/0x9f0 [ 168.204760][T13123] ? fsnotify_perm+0x59/0x2e0 [ 168.209432][T13123] ? __fsnotify_parent+0x32f/0x430 [ 168.214534][T13123] ? __fget_light+0x21b/0x260 [ 168.219201][T13123] ? __cond_resched+0x11/0x40 [ 168.223930][T13123] __x64_sys_recvmmsg+0xcf/0x150 [ 168.228867][T13123] ? exit_to_user_mode_prepare+0x65/0x190 [ 168.234585][T13123] do_syscall_64+0x3d/0x90 [ 168.239007][T13123] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 168.244915][T13123] RIP: 0033:0x4665e9 14:36:18 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x3c) 14:36:18 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x50000) [ 168.248797][T13123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 168.268400][T13123] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 168.276811][T13123] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 168.284786][T13123] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 168.292756][T13123] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 168.300881][T13123] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 168.308842][T13123] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0xf}}, 0x0) 14:36:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x10}}, 0x0) 14:36:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0xc0}}, 0x0) 14:36:19 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xfffffff5, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0xec0}}, 0x0) 14:36:19 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x58) 14:36:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x33fe0}}, 0x0) 14:36:19 executing program 3 (fault-call:4 fault-nth:2): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x20000054}}, 0x0) 14:36:19 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1000000) 14:36:19 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xfffffffe, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:19 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xc020000) [ 168.782783][T13178] FAULT_INJECTION: forcing a failure. [ 168.782783][T13178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.795969][T13178] CPU: 1 PID: 13178 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 168.804753][T13178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.814880][T13178] Call Trace: [ 168.818155][T13178] dump_stack_lvl+0xb7/0x103 [ 168.822817][T13178] dump_stack+0x11/0x1a [ 168.826959][T13178] should_fail+0x23c/0x250 [ 168.831411][T13178] should_fail_usercopy+0x16/0x20 [ 168.836439][T13178] _copy_from_user+0x1c/0xd0 [ 168.841024][T13178] do_recvmmsg+0x250/0x9f0 [ 168.845453][T13178] ? fsnotify_perm+0x59/0x2e0 [ 168.850128][T13178] ? __fsnotify_parent+0x32f/0x430 [ 168.855232][T13178] ? __fget_light+0x21b/0x260 [ 168.859900][T13178] ? __cond_resched+0x11/0x40 [ 168.864699][T13178] __x64_sys_recvmmsg+0xcf/0x150 [ 168.869763][T13178] ? exit_to_user_mode_prepare+0x65/0x190 [ 168.875489][T13178] do_syscall_64+0x3d/0x90 14:36:19 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x2000000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 168.879904][T13178] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 168.885794][T13178] RIP: 0033:0x4665e9 [ 168.889680][T13178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 168.909352][T13178] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 168.917776][T13178] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x7ffff000}}, 0x0) 14:36:19 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf000000) [ 168.925753][T13178] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 168.933720][T13178] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 168.941689][T13178] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 168.949656][T13178] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0xfffffdef}}, 0x0) 14:36:19 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1f4) 14:36:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x3}, 0x0) 14:36:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x8}, 0x0) 14:36:19 executing program 3 (fault-call:4 fault-nth:3): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x500}, 0x0) 14:36:19 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000000) 14:36:19 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x18000000) 14:36:19 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x5000000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 169.344718][T13218] FAULT_INJECTION: forcing a failure. [ 169.344718][T13218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.357933][T13218] CPU: 0 PID: 13218 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 169.366689][T13218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.376740][T13218] Call Trace: [ 169.380009][T13218] dump_stack_lvl+0xb7/0x103 [ 169.384596][T13218] dump_stack+0x11/0x1a [ 169.388739][T13218] should_fail+0x23c/0x250 [ 169.393152][T13218] should_fail_usercopy+0x16/0x20 [ 169.398199][T13218] _copy_from_user+0x1c/0xd0 [ 169.402784][T13218] do_recvmmsg+0x250/0x9f0 [ 169.407219][T13218] ? fsnotify_perm+0x59/0x2e0 [ 169.411893][T13218] ? __fsnotify_parent+0x32f/0x430 [ 169.417003][T13218] ? __fget_light+0x21b/0x260 [ 169.421674][T13218] ? __cond_resched+0x11/0x40 [ 169.426424][T13218] __x64_sys_recvmmsg+0xcf/0x150 [ 169.431379][T13218] ? exit_to_user_mode_prepare+0x65/0x190 [ 169.437099][T13218] do_syscall_64+0x3d/0x90 [ 169.441519][T13218] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 169.447457][T13218] RIP: 0033:0x4665e9 [ 169.451341][T13218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 169.470942][T13218] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 169.479500][T13218] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 169.487529][T13218] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 14:36:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x2}, 0x0) 14:36:20 executing program 3 (fault-call:4 fault-nth:4): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 169.495494][T13218] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 169.503589][T13218] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 169.511619][T13218] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 [ 169.573572][T13231] FAULT_INJECTION: forcing a failure. [ 169.573572][T13231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.586742][T13231] CPU: 0 PID: 13231 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 169.595552][T13231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.605629][T13231] Call Trace: [ 169.608902][T13231] dump_stack_lvl+0xb7/0x103 [ 169.613490][T13231] dump_stack+0x11/0x1a [ 169.617637][T13231] should_fail+0x23c/0x250 [ 169.622098][T13231] should_fail_usercopy+0x16/0x20 [ 169.627123][T13231] _copy_from_user+0x1c/0xd0 [ 169.631768][T13231] do_recvmmsg+0x250/0x9f0 [ 169.636257][T13231] ? fsnotify_perm+0x59/0x2e0 [ 169.640928][T13231] ? __fsnotify_parent+0x32f/0x430 [ 169.646044][T13231] ? __fget_light+0x21b/0x260 [ 169.650729][T13231] ? __cond_resched+0x11/0x40 [ 169.655457][T13231] __x64_sys_recvmmsg+0xcf/0x150 [ 169.660394][T13231] ? exit_to_user_mode_prepare+0x65/0x190 [ 169.666146][T13231] do_syscall_64+0x3d/0x90 [ 169.670594][T13231] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 169.676528][T13231] RIP: 0033:0x4665e9 [ 169.680407][T13231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 169.700030][T13231] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 169.708441][T13231] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 169.716413][T13231] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 14:36:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x3}, 0x0) 14:36:20 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x20c) [ 169.724380][T13231] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 169.732357][T13231] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 169.740330][T13231] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:20 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x3000000) 14:36:20 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x18020000) 14:36:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x4}, 0x0) 14:36:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x300}, 0x0) 14:36:20 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x100000000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xec0}, 0x0) 14:36:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xc00e}, 0x0) 14:36:20 executing program 3 (fault-call:4 fault-nth:5): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x34000}, 0x0) [ 170.044468][T13264] FAULT_INJECTION: forcing a failure. [ 170.044468][T13264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.057541][T13264] CPU: 1 PID: 13264 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 170.066317][T13264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.076366][T13264] Call Trace: [ 170.079639][T13264] dump_stack_lvl+0xb7/0x103 [ 170.084229][T13264] dump_stack+0x11/0x1a [ 170.088380][T13264] should_fail+0x23c/0x250 14:36:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x400300}, 0x0) [ 170.092792][T13264] should_fail_usercopy+0x16/0x20 [ 170.097836][T13264] _copy_from_user+0x1c/0xd0 [ 170.102458][T13264] do_recvmmsg+0x250/0x9f0 [ 170.106875][T13264] ? fsnotify_perm+0x59/0x2e0 [ 170.111550][T13264] ? __fsnotify_parent+0x32f/0x430 [ 170.116663][T13264] ? __fget_light+0x21b/0x260 [ 170.121337][T13264] ? __cond_resched+0x11/0x40 [ 170.126053][T13264] __x64_sys_recvmmsg+0xcf/0x150 [ 170.130994][T13264] ? exit_to_user_mode_prepare+0x65/0x190 [ 170.136792][T13264] do_syscall_64+0x3d/0x90 14:36:20 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x218) [ 170.141202][T13264] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 170.147095][T13264] RIP: 0033:0x4665e9 [ 170.150979][T13264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 170.170581][T13264] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 170.179007][T13264] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 170.186980][T13264] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 14:36:20 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x20000000) [ 170.194950][T13264] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 170.203000][T13264] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 170.210966][T13264] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:20 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4000000) 14:36:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x1000000}, 0x0) 14:36:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x2000000}, 0x0) 14:36:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x3000000}, 0x0) 14:36:21 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x200000000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x4000000}, 0x0) 14:36:21 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x241) 14:36:21 executing program 3 (fault-call:4 fault-nth:6): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:21 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x24000000) [ 170.610921][T13301] FAULT_INJECTION: forcing a failure. [ 170.610921][T13301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.624171][T13301] CPU: 0 PID: 13301 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 170.632921][T13301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.642972][T13301] Call Trace: [ 170.646240][T13301] dump_stack_lvl+0xb7/0x103 [ 170.650923][T13301] dump_stack+0x11/0x1a [ 170.655095][T13301] should_fail+0x23c/0x250 [ 170.659510][T13301] should_fail_usercopy+0x16/0x20 [ 170.664561][T13301] _copy_from_user+0x1c/0xd0 [ 170.669147][T13301] do_recvmmsg+0x250/0x9f0 [ 170.673643][T13301] ? fsnotify_perm+0x59/0x2e0 [ 170.678337][T13301] ? __fsnotify_parent+0x32f/0x430 [ 170.683497][T13301] ? __fget_light+0x21b/0x260 [ 170.688168][T13301] ? __cond_resched+0x11/0x40 [ 170.692845][T13301] __x64_sys_recvmmsg+0xcf/0x150 [ 170.697817][T13301] ? exit_to_user_mode_prepare+0x65/0x190 [ 170.703529][T13301] do_syscall_64+0x3d/0x90 [ 170.707946][T13301] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 170.713880][T13301] RIP: 0033:0x4665e9 [ 170.717760][T13301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 170.737363][T13301] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 170.745771][T13301] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 170.753736][T13301] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 14:36:21 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x8000000) 14:36:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x9effffff}, 0x0) [ 170.761706][T13301] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 170.769668][T13301] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 170.777647][T13301] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:21 executing program 3 (fault-call:4 fault-nth:7): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xac051ebe}, 0x0) [ 170.882672][T13320] FAULT_INJECTION: forcing a failure. [ 170.882672][T13320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.895738][T13320] CPU: 1 PID: 13320 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 170.904530][T13320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.914636][T13320] Call Trace: [ 170.917902][T13320] dump_stack_lvl+0xb7/0x103 [ 170.922484][T13320] dump_stack+0x11/0x1a [ 170.926681][T13320] should_fail+0x23c/0x250 [ 170.931137][T13320] should_fail_usercopy+0x16/0x20 [ 170.936163][T13320] _copy_from_user+0x1c/0xd0 [ 170.940856][T13320] do_recvmmsg+0x250/0x9f0 [ 170.945295][T13320] ? fsnotify_perm+0x59/0x2e0 [ 170.949997][T13320] ? __fsnotify_parent+0x32f/0x430 [ 170.955193][T13320] ? __fget_light+0x21b/0x260 [ 170.959857][T13320] ? __cond_resched+0x11/0x40 [ 170.964608][T13320] __x64_sys_recvmmsg+0xcf/0x150 [ 170.969551][T13320] ? exit_to_user_mode_prepare+0x65/0x190 [ 170.975267][T13320] do_syscall_64+0x3d/0x90 [ 170.979687][T13320] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 170.985582][T13320] RIP: 0033:0x4665e9 [ 170.989457][T13320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 171.009056][T13320] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 171.017472][T13320] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 171.025436][T13320] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 14:36:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xbe1e05ac}, 0x0) 14:36:21 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x204000000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:21 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x3c000000) [ 171.033412][T13320] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 171.041416][T13320] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 171.049384][T13320] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xc00e0000}, 0x0) 14:36:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xefffffff}, 0x0) 14:36:21 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300) 14:36:21 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xa000000) 14:36:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xf0ffffff}, 0x0) 14:36:21 executing program 3 (fault-call:4 fault-nth:8): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xffffff7f}, 0x0) [ 171.254119][T13352] FAULT_INJECTION: forcing a failure. [ 171.254119][T13352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.267204][T13352] CPU: 0 PID: 13352 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 171.275964][T13352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.286014][T13352] Call Trace: [ 171.289286][T13352] dump_stack_lvl+0xb7/0x103 [ 171.293934][T13352] dump_stack+0x11/0x1a [ 171.298089][T13352] should_fail+0x23c/0x250 [ 171.302611][T13352] should_fail_usercopy+0x16/0x20 [ 171.307816][T13352] _copy_from_user+0x1c/0xd0 [ 171.312403][T13352] do_recvmmsg+0x250/0x9f0 [ 171.316917][T13352] ? fsnotify_perm+0x59/0x2e0 [ 171.321642][T13352] ? __fsnotify_parent+0x32f/0x430 [ 171.326755][T13352] ? __fget_light+0x21b/0x260 [ 171.331568][T13352] ? __cond_resched+0x11/0x40 [ 171.336328][T13352] __x64_sys_recvmmsg+0xcf/0x150 [ 171.341275][T13352] ? exit_to_user_mode_prepare+0x65/0x190 [ 171.347086][T13352] do_syscall_64+0x3d/0x90 14:36:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xffffff9e}, 0x0) [ 171.351499][T13352] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 171.357391][T13352] RIP: 0033:0x4665e9 [ 171.361308][T13352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 171.380939][T13352] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 171.389412][T13352] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xffffffef}, 0x0) [ 171.397380][T13352] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 171.405345][T13352] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 171.413423][T13352] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 171.421413][T13352] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xfffffff0}, 0x0) 14:36:22 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x300000000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:22 executing program 3 (fault-call:4 fault-nth:9): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:22 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x3e8) 14:36:22 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x41020000) 14:36:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 14:36:22 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xc020000) [ 171.708561][T13383] FAULT_INJECTION: forcing a failure. [ 171.708561][T13383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.721733][T13383] CPU: 1 PID: 13383 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 171.730490][T13383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.740610][T13383] Call Trace: [ 171.743891][T13383] dump_stack_lvl+0xb7/0x103 [ 171.748487][T13383] dump_stack+0x11/0x1a [ 171.752639][T13383] should_fail+0x23c/0x250 [ 171.757059][T13383] should_fail_usercopy+0x16/0x20 [ 171.762516][T13383] _copy_from_user+0x1c/0xd0 [ 171.767149][T13383] do_recvmmsg+0x250/0x9f0 [ 171.771600][T13383] ? fsnotify_perm+0x59/0x2e0 [ 171.776277][T13383] ? __fsnotify_parent+0x32f/0x430 [ 171.781563][T13383] ? __fget_light+0x21b/0x260 [ 171.786236][T13383] ? __cond_resched+0x11/0x40 [ 171.790990][T13383] __x64_sys_recvmmsg+0xcf/0x150 [ 171.795992][T13383] ? exit_to_user_mode_prepare+0x65/0x190 [ 171.801714][T13383] do_syscall_64+0x3d/0x90 [ 171.806206][T13383] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 171.812097][T13383] RIP: 0033:0x4665e9 [ 171.815982][T13383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 171.835580][T13383] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 171.844011][T13383] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x100000000000000}, 0x0) [ 171.851978][T13383] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 171.859937][T13383] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 171.867906][T13383] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 171.875883][T13383] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x200000000000000}, 0x0) 14:36:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x300000000000000}, 0x0) 14:36:22 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf000000) 14:36:22 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x58000000) 14:36:22 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x500) 14:36:22 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x400000000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:22 executing program 3 (fault-call:4 fault-nth:10): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x400000000000000}, 0x0) [ 172.258414][T13415] FAULT_INJECTION: forcing a failure. [ 172.258414][T13415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.271532][T13415] CPU: 1 PID: 13415 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 172.280319][T13415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 172.290375][T13415] Call Trace: [ 172.293707][T13415] dump_stack_lvl+0xb7/0x103 [ 172.298384][T13415] dump_stack+0x11/0x1a [ 172.302534][T13415] should_fail+0x23c/0x250 [ 172.306961][T13415] should_fail_usercopy+0x16/0x20 [ 172.311989][T13415] _copy_from_user+0x1c/0xd0 [ 172.316576][T13415] do_recvmmsg+0x250/0x9f0 [ 172.320991][T13415] ? fsnotify_perm+0x59/0x2e0 [ 172.325665][T13415] ? __fsnotify_parent+0x32f/0x430 [ 172.330775][T13415] ? __fget_light+0x21b/0x260 [ 172.335452][T13415] ? __cond_resched+0x11/0x40 [ 172.340138][T13415] __x64_sys_recvmmsg+0xcf/0x150 [ 172.345093][T13415] ? exit_to_user_mode_prepare+0x65/0x190 [ 172.350823][T13415] do_syscall_64+0x3d/0x90 [ 172.355252][T13415] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 172.361163][T13415] RIP: 0033:0x4665e9 [ 172.365053][T13415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 172.384739][T13415] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 172.393201][T13415] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 172.401181][T13415] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 14:36:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x8000000000000000}, 0x0) 14:36:23 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xa00) [ 172.409150][T13415] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 172.417142][T13415] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 172.425106][T13415] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:23 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x604000000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x9effffff00000000}, 0x0) 14:36:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xbe1e05ac00000000}, 0x0) 14:36:23 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x70359ca0) 14:36:23 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x18000000) 14:36:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xc00e000000000000}, 0x0) 14:36:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xefffffff00000000}, 0x0) 14:36:23 executing program 3 (fault-call:4 fault-nth:11): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xf0ffffff00000000}, 0x0) [ 172.752333][T13452] FAULT_INJECTION: forcing a failure. [ 172.752333][T13452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.765428][T13452] CPU: 0 PID: 13452 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 172.774191][T13452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 172.784253][T13452] Call Trace: [ 172.787541][T13452] dump_stack_lvl+0xb7/0x103 [ 172.792133][T13452] dump_stack+0x11/0x1a [ 172.796683][T13452] should_fail+0x23c/0x250 [ 172.801100][T13452] should_fail_usercopy+0x16/0x20 [ 172.806127][T13452] _copy_from_user+0x1c/0xd0 [ 172.810777][T13452] do_recvmmsg+0x250/0x9f0 [ 172.815196][T13452] ? fsnotify_perm+0x59/0x2e0 [ 172.819876][T13452] ? __fsnotify_parent+0x32f/0x430 [ 172.824988][T13452] ? __fget_light+0x21b/0x260 [ 172.829685][T13452] ? __cond_resched+0x11/0x40 [ 172.834383][T13452] __x64_sys_recvmmsg+0xcf/0x150 [ 172.839373][T13452] ? exit_to_user_mode_prepare+0x65/0x190 [ 172.845099][T13452] do_syscall_64+0x3d/0x90 [ 172.849517][T13452] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 172.855446][T13452] RIP: 0033:0x4665e9 [ 172.859328][T13452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 172.878969][T13452] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 172.887580][T13452] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:23 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xc02) 14:36:23 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x8ca6ffff) [ 172.895547][T13452] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 172.903508][T13452] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 172.911480][T13452] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 172.919449][T13452] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xffffff7f00000000}, 0x0) 14:36:23 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x700000000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0xffffffff00000000}, 0x0) 14:36:23 executing program 3 (fault-call:4 fault-nth:12): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x2}, 0x0) [ 173.126635][T13474] FAULT_INJECTION: forcing a failure. [ 173.126635][T13474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.139785][T13474] CPU: 1 PID: 13474 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 173.148588][T13474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.158661][T13474] Call Trace: [ 173.161936][T13474] dump_stack_lvl+0xb7/0x103 [ 173.166599][T13474] dump_stack+0x11/0x1a [ 173.170803][T13474] should_fail+0x23c/0x250 14:36:23 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x18020000) 14:36:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x3}, 0x0) [ 173.175221][T13474] should_fail_usercopy+0x16/0x20 [ 173.180252][T13474] _copy_from_user+0x1c/0xd0 [ 173.184863][T13474] do_recvmmsg+0x250/0x9f0 [ 173.189289][T13474] ? fsnotify_perm+0x59/0x2e0 [ 173.193969][T13474] ? __fsnotify_parent+0x32f/0x430 [ 173.199082][T13474] ? __fget_light+0x21b/0x260 [ 173.203759][T13474] ? __cond_resched+0x11/0x40 [ 173.208442][T13474] __x64_sys_recvmmsg+0xcf/0x150 [ 173.213379][T13474] ? exit_to_user_mode_prepare+0x65/0x190 [ 173.219105][T13474] do_syscall_64+0x3d/0x90 [ 173.223518][T13474] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 173.229418][T13474] RIP: 0033:0x4665e9 [ 173.233305][T13474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 173.253424][T13474] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 173.261831][T13474] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x4}, 0x0) 14:36:23 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x91ffffff) [ 173.269827][T13474] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 173.277795][T13474] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 173.285824][T13474] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 173.293797][T13474] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:23 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf00) 14:36:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x300}, 0x0) 14:36:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xec0}, 0x0) 14:36:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xc00e}, 0x0) 14:36:24 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x800000000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x34000}, 0x0) 14:36:24 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1800) 14:36:24 executing program 3 (fault-call:4 fault-nth:13): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:24 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xa09c3570) 14:36:24 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x20000000) [ 173.784253][T13520] FAULT_INJECTION: forcing a failure. [ 173.784253][T13520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.797420][T13520] CPU: 1 PID: 13520 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 173.806359][T13520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.816411][T13520] Call Trace: [ 173.819684][T13520] dump_stack_lvl+0xb7/0x103 [ 173.824273][T13520] dump_stack+0x11/0x1a [ 173.828425][T13520] should_fail+0x23c/0x250 [ 173.832992][T13520] should_fail_usercopy+0x16/0x20 [ 173.838363][T13520] _copy_from_user+0x1c/0xd0 [ 173.842953][T13520] do_recvmmsg+0x250/0x9f0 [ 173.847371][T13520] ? fsnotify_perm+0x59/0x2e0 [ 173.852051][T13520] ? __fsnotify_parent+0x32f/0x430 [ 173.857161][T13520] ? __fget_light+0x21b/0x260 [ 173.861836][T13520] ? __cond_resched+0x11/0x40 [ 173.866517][T13520] __x64_sys_recvmmsg+0xcf/0x150 [ 173.871455][T13520] ? exit_to_user_mode_prepare+0x65/0x190 [ 173.877245][T13520] do_syscall_64+0x3d/0x90 [ 173.881653][T13520] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 173.887553][T13520] RIP: 0033:0x4665e9 [ 173.891453][T13520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 173.911081][T13520] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 173.919487][T13520] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x400300}, 0x0) [ 173.927455][T13520] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 173.935486][T13520] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 173.943531][T13520] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 173.951499][T13520] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x1000000}, 0x0) 14:36:24 executing program 3 (fault-call:4 fault-nth:14): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x2000000}, 0x0) [ 174.095809][T13538] FAULT_INJECTION: forcing a failure. [ 174.095809][T13538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.108890][T13538] CPU: 1 PID: 13538 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 174.117665][T13538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.127746][T13538] Call Trace: [ 174.131040][T13538] dump_stack_lvl+0xb7/0x103 [ 174.135629][T13538] dump_stack+0x11/0x1a [ 174.139778][T13538] should_fail+0x23c/0x250 [ 174.144196][T13538] should_fail_usercopy+0x16/0x20 [ 174.149229][T13538] _copy_from_user+0x1c/0xd0 [ 174.153821][T13538] do_recvmmsg+0x250/0x9f0 [ 174.158241][T13538] ? fsnotify_perm+0x59/0x2e0 [ 174.162939][T13538] ? __fsnotify_parent+0x32f/0x430 [ 174.168051][T13538] ? __fget_light+0x21b/0x260 [ 174.172725][T13538] ? __cond_resched+0x11/0x40 [ 174.177417][T13538] __x64_sys_recvmmsg+0xcf/0x150 [ 174.182396][T13538] ? exit_to_user_mode_prepare+0x65/0x190 [ 174.188145][T13538] do_syscall_64+0x3d/0x90 14:36:24 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x24000000) [ 174.192568][T13538] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 174.198456][T13538] RIP: 0033:0x4665e9 [ 174.202347][T13538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 174.222099][T13538] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 174.230511][T13538] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 174.238530][T13538] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 14:36:24 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1802) [ 174.246498][T13538] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 174.254465][T13538] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 174.262433][T13538] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:25 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xa00000000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x3000000}, 0x0) 14:36:25 executing program 3 (fault-call:4 fault-nth:15): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:25 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xd7ff0000) [ 174.451955][T13556] FAULT_INJECTION: forcing a failure. [ 174.451955][T13556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.465430][T13556] CPU: 0 PID: 13556 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 174.474190][T13556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 174.484371][T13556] Call Trace: [ 174.487638][T13556] dump_stack_lvl+0xb7/0x103 [ 174.492247][T13556] dump_stack+0x11/0x1a [ 174.496400][T13556] should_fail+0x23c/0x250 [ 174.500818][T13556] should_fail_usercopy+0x16/0x20 [ 174.505890][T13556] _copy_from_user+0x1c/0xd0 [ 174.510511][T13556] do_recvmmsg+0x250/0x9f0 [ 174.515008][T13556] ? fsnotify_perm+0x59/0x2e0 [ 174.519689][T13556] ? __fsnotify_parent+0x32f/0x430 [ 174.524796][T13556] ? __fget_light+0x21b/0x260 [ 174.529575][T13556] ? __cond_resched+0x11/0x40 [ 174.534257][T13556] __x64_sys_recvmmsg+0xcf/0x150 [ 174.539281][T13556] ? exit_to_user_mode_prepare+0x65/0x190 [ 174.545016][T13556] do_syscall_64+0x3d/0x90 [ 174.549446][T13556] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 174.555337][T13556] RIP: 0033:0x4665e9 [ 174.559259][T13556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 174.579022][T13556] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 174.587514][T13556] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:25 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000) 14:36:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x4000000}, 0x0) 14:36:25 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xd7ffffff) [ 174.595485][T13556] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 174.603475][T13556] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 174.611530][T13556] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 174.619493][T13556] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x9effffff}, 0x0) 14:36:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xac051ebe}, 0x0) 14:36:25 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x3c000000) 14:36:25 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xc02000000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xbe1e05ac}, 0x0) 14:36:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xc00e0000}, 0x0) 14:36:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xefffffff}, 0x0) 14:36:25 executing program 3 (fault-call:4 fault-nth:16): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:25 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xe8030000) 14:36:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xf0ffffff}, 0x0) 14:36:25 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2400) [ 175.125108][T13608] FAULT_INJECTION: forcing a failure. [ 175.125108][T13608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.138207][T13608] CPU: 0 PID: 13608 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 175.146972][T13608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 175.157108][T13608] Call Trace: [ 175.160384][T13608] dump_stack_lvl+0xb7/0x103 [ 175.164976][T13608] dump_stack+0x11/0x1a [ 175.169145][T13608] should_fail+0x23c/0x250 [ 175.173652][T13608] should_fail_usercopy+0x16/0x20 [ 175.178674][T13608] _copy_from_user+0x1c/0xd0 [ 175.183263][T13608] do_recvmmsg+0x250/0x9f0 [ 175.187675][T13608] ? fsnotify_perm+0x59/0x2e0 [ 175.192354][T13608] ? __fsnotify_parent+0x32f/0x430 [ 175.197478][T13608] ? __fget_light+0x21b/0x260 [ 175.202144][T13608] ? __cond_resched+0x11/0x40 [ 175.206874][T13608] __x64_sys_recvmmsg+0xcf/0x150 [ 175.211812][T13608] ? exit_to_user_mode_prepare+0x65/0x190 [ 175.217534][T13608] do_syscall_64+0x3d/0x90 14:36:25 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x41020000) 14:36:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xffffff7f}, 0x0) [ 175.221959][T13608] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 175.227852][T13608] RIP: 0033:0x4665e9 [ 175.231759][T13608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 175.251361][T13608] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 175.259772][T13608] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 175.267847][T13608] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 14:36:25 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xf00000000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xffffff9e}, 0x0) [ 175.275821][T13608] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 175.283794][T13608] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 175.291757][T13608] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xffffffef}, 0x0) 14:36:26 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x3c00) 14:36:26 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf4010000) 14:36:26 executing program 3 (fault-call:4 fault-nth:17): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 175.393666][T13635] FAULT_INJECTION: forcing a failure. [ 175.393666][T13635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.406959][T13635] CPU: 1 PID: 13635 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 175.415720][T13635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 175.425770][T13635] Call Trace: [ 175.429079][T13635] dump_stack_lvl+0xb7/0x103 [ 175.433667][T13635] dump_stack+0x11/0x1a [ 175.437958][T13635] should_fail+0x23c/0x250 14:36:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xfffffff0}, 0x0) 14:36:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x40030000000000}, 0x0) 14:36:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x100000000000000}, 0x0) [ 175.442382][T13635] should_fail_usercopy+0x16/0x20 [ 175.447412][T13635] _copy_from_user+0x1c/0xd0 [ 175.452082][T13635] do_recvmmsg+0x250/0x9f0 [ 175.456508][T13635] ? fsnotify_perm+0x59/0x2e0 [ 175.461197][T13635] ? __fsnotify_parent+0x32f/0x430 [ 175.466307][T13635] ? __fget_light+0x21b/0x260 [ 175.470987][T13635] ? __cond_resched+0x11/0x40 [ 175.475671][T13635] __x64_sys_recvmmsg+0xcf/0x150 [ 175.480605][T13635] ? exit_to_user_mode_prepare+0x65/0x190 [ 175.486395][T13635] do_syscall_64+0x3d/0x90 [ 175.490891][T13635] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 175.496824][T13635] RIP: 0033:0x4665e9 [ 175.500730][T13635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 175.520418][T13635] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 175.529002][T13635] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x200000000000000}, 0x0) [ 175.536971][T13635] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 175.545009][T13635] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 175.552968][T13635] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 175.560931][T13635] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:26 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x58000000) 14:36:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x300000000000000}, 0x0) 14:36:26 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf5ffffff) 14:36:26 executing program 3 (fault-call:4 fault-nth:18): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:26 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x1800000000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x400000000000000}, 0x0) 14:36:26 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4102) 14:36:26 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x728a7cf5) [ 175.963550][T13675] FAULT_INJECTION: forcing a failure. [ 175.963550][T13675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.976614][T13675] CPU: 1 PID: 13675 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 175.985392][T13675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 175.995441][T13675] Call Trace: [ 175.998738][T13675] dump_stack_lvl+0xb7/0x103 [ 176.003326][T13675] dump_stack+0x11/0x1a [ 176.007474][T13675] should_fail+0x23c/0x250 [ 176.011980][T13675] should_fail_usercopy+0x16/0x20 [ 176.017007][T13675] _copy_from_user+0x1c/0xd0 [ 176.021645][T13675] do_recvmmsg+0x250/0x9f0 [ 176.026064][T13675] ? fsnotify_perm+0x59/0x2e0 [ 176.030800][T13675] ? __fsnotify_parent+0x32f/0x430 [ 176.035949][T13675] ? __fget_light+0x21b/0x260 [ 176.040620][T13675] ? __cond_resched+0x11/0x40 [ 176.045296][T13675] __x64_sys_recvmmsg+0xcf/0x150 [ 176.050283][T13675] ? exit_to_user_mode_prepare+0x65/0x190 [ 176.056058][T13675] do_syscall_64+0x3d/0x90 [ 176.060499][T13675] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 176.066389][T13675] RIP: 0033:0x4665e9 [ 176.070291][T13675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 176.089907][T13675] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 176.098360][T13675] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 176.106328][T13675] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 14:36:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x8000000000000000}, 0x0) [ 176.114356][T13675] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 176.122322][T13675] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 176.130347][T13675] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 14:36:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xbe1e05ac00000000}, 0x0) 14:36:26 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x91ffffff) 14:36:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xc00e000000000000}, 0x0) 14:36:27 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xfeffffff) 14:36:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xefffffff00000000}, 0x0) 14:36:27 executing program 3 (fault-call:4 fault-nth:19): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 176.457941][T13704] FAULT_INJECTION: forcing a failure. [ 176.457941][T13704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.471489][T13704] CPU: 0 PID: 13704 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 176.480254][T13704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 176.490327][T13704] Call Trace: [ 176.493603][T13704] dump_stack_lvl+0xb7/0x103 [ 176.498282][T13704] dump_stack+0x11/0x1a [ 176.502433][T13704] should_fail+0x23c/0x250 [ 176.506879][T13704] should_fail_usercopy+0x16/0x20 [ 176.511978][T13704] _copy_from_user+0x1c/0xd0 [ 176.516606][T13704] do_recvmmsg+0x250/0x9f0 [ 176.521073][T13704] ? fsnotify_perm+0x59/0x2e0 [ 176.525754][T13704] ? __fsnotify_parent+0x32f/0x430 [ 176.530864][T13704] ? __fget_light+0x21b/0x260 [ 176.535536][T13704] ? __cond_resched+0x11/0x40 [ 176.540218][T13704] __x64_sys_recvmmsg+0xcf/0x150 [ 176.545155][T13704] ? exit_to_user_mode_prepare+0x65/0x190 [ 176.550941][T13704] do_syscall_64+0x3d/0x90 [ 176.555360][T13704] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 176.561257][T13704] RIP: 0033:0x4665e9 [ 176.565147][T13704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 176.585187][T13704] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 176.593595][T13704] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:27 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x1802000000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 14:36:27 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x5800) 14:36:27 executing program 3 (fault-call:4 fault-nth:20): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 176.601565][T13704] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 176.609537][T13704] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 176.617529][T13704] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 176.625502][T13704] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) [ 176.687117][T13717] FAULT_INJECTION: forcing a failure. [ 176.687117][T13717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.700211][T13717] CPU: 1 PID: 13717 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 176.708968][T13717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 176.719164][T13717] Call Trace: [ 176.722504][T13717] dump_stack_lvl+0xb7/0x103 [ 176.727095][T13717] dump_stack+0x11/0x1a [ 176.731290][T13717] should_fail+0x23c/0x250 [ 176.735729][T13717] should_fail_usercopy+0x16/0x20 [ 176.740753][T13717] _copy_from_user+0x1c/0xd0 [ 176.745341][T13717] do_recvmmsg+0x250/0x9f0 [ 176.749910][T13717] ? fsnotify_perm+0x59/0x2e0 [ 176.754588][T13717] ? __fsnotify_parent+0x32f/0x430 [ 176.759693][T13717] ? __fget_light+0x21b/0x260 [ 176.764360][T13717] ? __cond_resched+0x11/0x40 [ 176.769040][T13717] __x64_sys_recvmmsg+0xcf/0x150 [ 176.774101][T13717] ? exit_to_user_mode_prepare+0x65/0x190 [ 176.779870][T13717] do_syscall_64+0x3d/0x90 14:36:27 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xff0f0000) 14:36:27 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xb6380000) [ 176.784290][T13717] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 176.790185][T13717] RIP: 0033:0x4665e9 [ 176.794070][T13717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 176.813745][T13717] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 176.822149][T13717] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0xffffffff00000000}, 0x0) [ 176.830113][T13717] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 176.838086][T13717] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 176.846051][T13717] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 176.854092][T13717] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x0) 14:36:27 executing program 3 (fault-call:4 fault-nth:21): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x3}, 0x0) [ 177.085876][T13742] FAULT_INJECTION: forcing a failure. [ 177.085876][T13742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.099036][T13742] CPU: 1 PID: 13742 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 177.107817][T13742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.118033][T13742] Call Trace: [ 177.121317][T13742] dump_stack_lvl+0xb7/0x103 [ 177.125909][T13742] dump_stack+0x11/0x1a [ 177.130054][T13742] should_fail+0x23c/0x250 [ 177.134475][T13742] should_fail_usercopy+0x16/0x20 [ 177.139503][T13742] _copy_from_user+0x1c/0xd0 [ 177.144089][T13742] do_recvmmsg+0x250/0x9f0 [ 177.148510][T13742] ? fsnotify_perm+0x59/0x2e0 [ 177.153197][T13742] ? __fsnotify_parent+0x32f/0x430 [ 177.158339][T13742] ? __fget_light+0x21b/0x260 [ 177.163117][T13742] ? __cond_resched+0x11/0x40 [ 177.167821][T13742] __x64_sys_recvmmsg+0xcf/0x150 [ 177.172762][T13742] ? exit_to_user_mode_prepare+0x65/0x190 [ 177.178484][T13742] do_syscall_64+0x3d/0x90 [ 177.182899][T13742] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 177.188798][T13742] RIP: 0033:0x4665e9 [ 177.192683][T13742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 177.212337][T13742] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 177.220753][T13742] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 177.228725][T13742] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 14:36:27 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x2000000000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:27 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xffffa68c) 14:36:27 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x7ab1) 14:36:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 14:36:27 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xd7ff0000) 14:36:27 executing program 3 (fault-call:4 fault-nth:22): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 177.236692][T13742] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 177.244658][T13742] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 177.252650][T13742] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 [ 177.313825][T13762] FAULT_INJECTION: forcing a failure. [ 177.313825][T13762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.326945][T13762] CPU: 0 PID: 13762 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 177.335724][T13762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.345775][T13762] Call Trace: [ 177.349051][T13762] dump_stack_lvl+0xb7/0x103 [ 177.353706][T13762] dump_stack+0x11/0x1a [ 177.357978][T13762] should_fail+0x23c/0x250 [ 177.362425][T13762] should_fail_usercopy+0x16/0x20 [ 177.367536][T13762] _copy_from_user+0x1c/0xd0 [ 177.372124][T13762] do_recvmmsg+0x250/0x9f0 [ 177.376569][T13762] ? fsnotify_perm+0x59/0x2e0 [ 177.381248][T13762] ? __fsnotify_parent+0x32f/0x430 [ 177.386354][T13762] ? __fget_light+0x21b/0x260 [ 177.391865][T13762] ? __cond_resched+0x11/0x40 [ 177.396647][T13762] __x64_sys_recvmmsg+0xcf/0x150 [ 177.401606][T13762] ? exit_to_user_mode_prepare+0x65/0x190 [ 177.407378][T13762] do_syscall_64+0x3d/0x90 [ 177.411870][T13762] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 177.417763][T13762] RIP: 0033:0x4665e9 [ 177.421684][T13762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 177.441391][T13762] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 177.449804][T13762] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x300}, 0x0) 14:36:28 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xd7ffffff) [ 177.457767][T13762] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 177.465734][T13762] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 177.473700][T13762] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 177.481689][T13762] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xec0}, 0x0) 14:36:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xc00e}, 0x0) 14:36:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 14:36:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 14:36:28 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x2400000000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:28 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xffffff91) 14:36:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 14:36:28 executing program 3 (fault-call:4 fault-nth:23): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:28 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xb17a) 14:36:28 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xe8030000) 14:36:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) [ 177.839922][T13802] FAULT_INJECTION: forcing a failure. [ 177.839922][T13802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.853008][T13802] CPU: 1 PID: 13802 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 177.861828][T13802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 177.871930][T13802] Call Trace: [ 177.875211][T13802] dump_stack_lvl+0xb7/0x103 [ 177.879815][T13802] dump_stack+0x11/0x1a [ 177.883960][T13802] should_fail+0x23c/0x250 [ 177.888408][T13802] should_fail_usercopy+0x16/0x20 [ 177.893437][T13802] _copy_from_user+0x1c/0xd0 [ 177.898027][T13802] do_recvmmsg+0x250/0x9f0 [ 177.902479][T13802] ? fsnotify_perm+0x59/0x2e0 [ 177.907154][T13802] ? __fsnotify_parent+0x32f/0x430 [ 177.912281][T13802] ? __fget_light+0x21b/0x260 [ 177.916998][T13802] ? __cond_resched+0x11/0x40 [ 177.921743][T13802] __x64_sys_recvmmsg+0xcf/0x150 [ 177.926772][T13802] ? exit_to_user_mode_prepare+0x65/0x190 [ 177.932615][T13802] do_syscall_64+0x3d/0x90 [ 177.937053][T13802] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 177.943137][T13802] RIP: 0033:0x4665e9 [ 177.947035][T13802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 177.966634][T13802] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 177.975157][T13802] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 177.983154][T13802] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 177.991122][T13802] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 177.999085][T13802] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 178.007049][T13802] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 14:36:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 14:36:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 14:36:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xac051ebe}, 0x0) 14:36:28 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xffffffd7) 14:36:28 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x3c00000000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:28 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xd7ff) 14:36:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xbe1e05ac}, 0x0) 14:36:28 executing program 3 (fault-call:4 fault-nth:24): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 178.318497][T13835] FAULT_INJECTION: forcing a failure. [ 178.318497][T13835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.331621][T13835] CPU: 1 PID: 13835 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 178.340388][T13835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.350579][T13835] Call Trace: [ 178.353852][T13835] dump_stack_lvl+0xb7/0x103 [ 178.358521][T13835] dump_stack+0x11/0x1a [ 178.362673][T13835] should_fail+0x23c/0x250 [ 178.367106][T13835] should_fail_usercopy+0x16/0x20 [ 178.372182][T13835] _copy_from_user+0x1c/0xd0 [ 178.376849][T13835] do_recvmmsg+0x250/0x9f0 [ 178.381267][T13835] ? fsnotify_perm+0x59/0x2e0 [ 178.385993][T13835] ? __fsnotify_parent+0x32f/0x430 [ 178.391126][T13835] ? __fget_light+0x21b/0x260 [ 178.395799][T13835] ? __cond_resched+0x11/0x40 [ 178.400563][T13835] __x64_sys_recvmmsg+0xcf/0x150 [ 178.405629][T13835] ? exit_to_user_mode_prepare+0x65/0x190 [ 178.411350][T13835] do_syscall_64+0x3d/0x90 [ 178.415775][T13835] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 178.421708][T13835] RIP: 0033:0x4665e9 [ 178.425614][T13835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 178.445242][T13835] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 178.453658][T13835] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 178.461685][T13835] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 178.469840][T13835] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 178.477807][T13835] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 178.485803][T13835] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xc00e0000}, 0x0) 14:36:29 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf4010000) 14:36:29 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xfffffff5) 14:36:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xefffffff}, 0x0) 14:36:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 14:36:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 14:36:29 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x4102000000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 14:36:29 executing program 3 (fault-call:4 fault-nth:25): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 178.830114][T13869] FAULT_INJECTION: forcing a failure. [ 178.830114][T13869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.843242][T13869] CPU: 0 PID: 13869 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 178.852011][T13869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 178.862070][T13869] Call Trace: [ 178.865344][T13869] dump_stack_lvl+0xb7/0x103 [ 178.869944][T13869] dump_stack+0x11/0x1a [ 178.874119][T13869] should_fail+0x23c/0x250 [ 178.878540][T13869] should_fail_usercopy+0x16/0x20 [ 178.883586][T13869] _copy_from_user+0x1c/0xd0 [ 178.888174][T13869] do_recvmmsg+0x250/0x9f0 [ 178.892588][T13869] ? fsnotify_perm+0x59/0x2e0 [ 178.897262][T13869] ? __fsnotify_parent+0x32f/0x430 [ 178.902393][T13869] ? __fget_light+0x21b/0x260 [ 178.907124][T13869] ? __cond_resched+0x11/0x40 [ 178.911920][T13869] __x64_sys_recvmmsg+0xcf/0x150 [ 178.916860][T13869] ? exit_to_user_mode_prepare+0x65/0x190 [ 178.922665][T13869] do_syscall_64+0x3d/0x90 [ 178.927082][T13869] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 178.932970][T13869] RIP: 0033:0x4665e9 [ 178.936856][T13869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 178.956481][T13869] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 178.964941][T13869] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 178.972928][T13869] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 14:36:29 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xe803) 14:36:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xffffffef}, 0x0) 14:36:29 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xfffffffe) 14:36:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) [ 178.980897][T13869] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 178.988872][T13869] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 178.996839][T13869] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:29 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf57c8a72) 14:36:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x2) 14:36:29 executing program 3 (fault-call:4 fault-nth:26): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x3) [ 179.182388][T13890] FAULT_INJECTION: forcing a failure. [ 179.182388][T13890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.195468][T13890] CPU: 1 PID: 13890 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 179.204233][T13890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 179.214297][T13890] Call Trace: [ 179.217571][T13890] dump_stack_lvl+0xb7/0x103 [ 179.222244][T13890] dump_stack+0x11/0x1a [ 179.226485][T13890] should_fail+0x23c/0x250 [ 179.230901][T13890] should_fail_usercopy+0x16/0x20 [ 179.236005][T13890] _copy_from_user+0x1c/0xd0 [ 179.240593][T13890] do_recvmmsg+0x250/0x9f0 [ 179.245017][T13890] ? fsnotify_perm+0x59/0x2e0 [ 179.249777][T13890] ? __fsnotify_parent+0x32f/0x430 [ 179.254888][T13890] ? __fget_light+0x21b/0x260 [ 179.259558][T13890] ? __cond_resched+0x11/0x40 [ 179.264239][T13890] __x64_sys_recvmmsg+0xcf/0x150 [ 179.269173][T13890] ? exit_to_user_mode_prepare+0x65/0x190 [ 179.274904][T13890] do_syscall_64+0x3d/0x90 14:36:29 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf401) [ 179.279332][T13890] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 179.285291][T13890] RIP: 0033:0x4665e9 [ 179.289175][T13890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 179.308811][T13890] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 179.317356][T13890] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:30 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x4200000000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:30 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1273e0595e) 14:36:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x4) [ 179.325320][T13890] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 179.333394][T13890] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 179.341367][T13890] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 179.349334][T13890] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:30 executing program 3 (fault-call:4 fault-nth:27): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 179.441193][T13912] FAULT_INJECTION: forcing a failure. [ 179.441193][T13912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.454318][T13912] CPU: 0 PID: 13912 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 179.463078][T13912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 179.473224][T13912] Call Trace: [ 179.476498][T13912] dump_stack_lvl+0xb7/0x103 [ 179.481166][T13912] dump_stack+0x11/0x1a [ 179.485314][T13912] should_fail+0x23c/0x250 [ 179.489828][T13912] should_fail_usercopy+0x16/0x20 [ 179.494916][T13912] _copy_from_user+0x1c/0xd0 [ 179.499502][T13912] do_recvmmsg+0x250/0x9f0 [ 179.503991][T13912] ? fsnotify_perm+0x59/0x2e0 [ 179.508684][T13912] ? __fsnotify_parent+0x32f/0x430 [ 179.513807][T13912] ? __fget_light+0x21b/0x260 [ 179.518590][T13912] ? __cond_resched+0x11/0x40 [ 179.523278][T13912] __x64_sys_recvmmsg+0xcf/0x150 [ 179.528222][T13912] ? exit_to_user_mode_prepare+0x65/0x190 [ 179.534062][T13912] do_syscall_64+0x3d/0x90 [ 179.538533][T13912] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 179.544429][T13912] RIP: 0033:0x4665e9 [ 179.548321][T13912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 179.567922][T13912] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 179.576345][T13912] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x300) 14:36:30 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000000000000) 14:36:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0xec0) 14:36:30 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf5ffffff) [ 179.584316][T13912] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 179.592371][T13912] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 179.600446][T13912] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 179.608416][T13912] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0xc00e) 14:36:30 executing program 3 (fault-call:4 fault-nth:28): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x34000) [ 179.807583][T13935] FAULT_INJECTION: forcing a failure. [ 179.807583][T13935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.820680][T13935] CPU: 0 PID: 13935 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 179.829443][T13935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 179.839532][T13935] Call Trace: [ 179.842804][T13935] dump_stack_lvl+0xb7/0x103 [ 179.847473][T13935] dump_stack+0x11/0x1a [ 179.851645][T13935] should_fail+0x23c/0x250 [ 179.856070][T13935] should_fail_usercopy+0x16/0x20 [ 179.861137][T13935] _copy_from_user+0x1c/0xd0 [ 179.865720][T13935] do_recvmmsg+0x250/0x9f0 [ 179.870163][T13935] ? fsnotify_perm+0x59/0x2e0 [ 179.874835][T13935] ? __fsnotify_parent+0x32f/0x430 [ 179.879950][T13935] ? __fget_light+0x21b/0x260 [ 179.884622][T13935] ? __cond_resched+0x11/0x40 [ 179.889295][T13935] __x64_sys_recvmmsg+0xcf/0x150 [ 179.894233][T13935] ? exit_to_user_mode_prepare+0x65/0x190 [ 179.899956][T13935] do_syscall_64+0x3d/0x90 [ 179.904414][T13935] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 179.910317][T13935] RIP: 0033:0x4665e9 [ 179.914211][T13935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 179.933888][T13935] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 179.942296][T13935] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 179.950263][T13935] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 14:36:30 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xff0f) 14:36:30 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4000000000000) 14:36:30 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x91ffffff00000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x400300) 14:36:30 executing program 3 (fault-call:4 fault-nth:29): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 179.958234][T13935] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 179.966200][T13935] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 179.974188][T13935] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x1000000) [ 180.034539][T13951] FAULT_INJECTION: forcing a failure. [ 180.034539][T13951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.047684][T13951] CPU: 1 PID: 13951 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 180.056538][T13951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 180.066592][T13951] Call Trace: [ 180.069988][T13951] dump_stack_lvl+0xb7/0x103 [ 180.074594][T13951] dump_stack+0x11/0x1a [ 180.078747][T13951] should_fail+0x23c/0x250 [ 180.083169][T13951] should_fail_usercopy+0x16/0x20 [ 180.088192][T13951] _copy_from_user+0x1c/0xd0 [ 180.092784][T13951] do_recvmmsg+0x250/0x9f0 [ 180.097219][T13951] ? fsnotify_perm+0x59/0x2e0 [ 180.101893][T13951] ? __fsnotify_parent+0x32f/0x430 [ 180.107011][T13951] ? __fget_light+0x21b/0x260 [ 180.111687][T13951] ? __cond_resched+0x11/0x40 [ 180.116365][T13951] __x64_sys_recvmmsg+0xcf/0x150 [ 180.121303][T13951] ? exit_to_user_mode_prepare+0x65/0x190 [ 180.127073][T13951] do_syscall_64+0x3d/0x90 14:36:30 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xfeffffff) [ 180.131555][T13951] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 180.137498][T13951] RIP: 0033:0x4665e9 [ 180.141384][T13951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 180.160987][T13951] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 180.169396][T13951] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 180.177364][T13951] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 180.185354][T13951] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 180.193390][T13951] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 180.201445][T13951] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x2000000) 14:36:30 executing program 3 (fault-call:4 fault-nth:30): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 180.278957][T13964] FAULT_INJECTION: forcing a failure. [ 180.278957][T13964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.292068][T13964] CPU: 0 PID: 13964 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 180.300936][T13964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 180.311071][T13964] Call Trace: [ 180.314343][T13964] dump_stack_lvl+0xb7/0x103 [ 180.319040][T13964] dump_stack+0x11/0x1a [ 180.323191][T13964] should_fail+0x23c/0x250 [ 180.327622][T13964] should_fail_usercopy+0x16/0x20 [ 180.332646][T13964] _copy_from_user+0x1c/0xd0 [ 180.337226][T13964] do_recvmmsg+0x250/0x9f0 [ 180.341642][T13964] ? fsnotify_perm+0x59/0x2e0 [ 180.346320][T13964] ? __fsnotify_parent+0x32f/0x430 [ 180.351439][T13964] ? __fget_light+0x21b/0x260 [ 180.356115][T13964] ? __cond_resched+0x11/0x40 [ 180.360827][T13964] __x64_sys_recvmmsg+0xcf/0x150 [ 180.365905][T13964] ? exit_to_user_mode_prepare+0x65/0x190 [ 180.371619][T13964] do_syscall_64+0x3d/0x90 [ 180.376036][T13964] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 180.381934][T13964] RIP: 0033:0x4665e9 [ 180.385818][T13964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 180.405591][T13964] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 180.414035][T13964] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x3000000) [ 180.422093][T13964] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 180.430057][T13964] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 180.438026][T13964] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 180.445992][T13964] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:31 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xff0f0000) 14:36:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x4000000) 14:36:31 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xffd7) 14:36:31 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x5000000000000) 14:36:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x9effffff) 14:36:31 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xd7ff000000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:31 executing program 3 (fault-call:4 fault-nth:31): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 180.723056][T13989] FAULT_INJECTION: forcing a failure. [ 180.723056][T13989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.736169][T13989] CPU: 0 PID: 13989 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 180.745001][T13989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 180.755167][T13989] Call Trace: [ 180.758504][T13989] dump_stack_lvl+0xb7/0x103 [ 180.763092][T13989] dump_stack+0x11/0x1a [ 180.767294][T13989] should_fail+0x23c/0x250 [ 180.771709][T13989] should_fail_usercopy+0x16/0x20 [ 180.776735][T13989] _copy_from_user+0x1c/0xd0 [ 180.781359][T13989] do_recvmmsg+0x250/0x9f0 [ 180.785840][T13989] ? fsnotify_perm+0x59/0x2e0 [ 180.790603][T13989] ? __fsnotify_parent+0x32f/0x430 [ 180.795710][T13989] ? __fget_light+0x21b/0x260 [ 180.800504][T13989] ? __cond_resched+0x11/0x40 [ 180.805184][T13989] __x64_sys_recvmmsg+0xcf/0x150 [ 180.810151][T13989] ? exit_to_user_mode_prepare+0x65/0x190 [ 180.815870][T13989] do_syscall_64+0x3d/0x90 [ 180.820285][T13989] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 180.826182][T13989] RIP: 0033:0x4665e9 [ 180.830090][T13989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 180.849696][T13989] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 180.858164][T13989] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0xac051ebe) [ 180.866133][T13989] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 180.874148][T13989] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 180.882117][T13989] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 180.890082][T13989] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0xbe1e05ac) 14:36:31 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xffffff91) 14:36:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0xc00e0000) 14:36:31 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x100000000000000) 14:36:31 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x20000) 14:36:31 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xd7ffffff00000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0xefffffff) 14:36:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0xf0ffffff) 14:36:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0xffffff7f) 14:36:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0xffffff9e) 14:36:32 executing program 3 (fault-call:4 fault-nth:32): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0xffffffef) 14:36:32 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xffffffd7) [ 181.380954][T14044] FAULT_INJECTION: forcing a failure. [ 181.380954][T14044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.394106][T14044] CPU: 0 PID: 14044 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 181.402947][T14044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 181.413018][T14044] Call Trace: [ 181.416312][T14044] dump_stack_lvl+0xb7/0x103 [ 181.420903][T14044] dump_stack+0x11/0x1a [ 181.425126][T14044] should_fail+0x23c/0x250 14:36:32 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x200000000000000) [ 181.429660][T14044] should_fail_usercopy+0x16/0x20 [ 181.434685][T14044] _copy_from_user+0x1c/0xd0 [ 181.439276][T14044] do_recvmmsg+0x250/0x9f0 [ 181.443689][T14044] ? fsnotify_perm+0x59/0x2e0 [ 181.448364][T14044] ? __fsnotify_parent+0x32f/0x430 [ 181.453478][T14044] ? __fget_light+0x21b/0x260 [ 181.458251][T14044] ? __cond_resched+0x11/0x40 [ 181.463083][T14044] __x64_sys_recvmmsg+0xcf/0x150 [ 181.468024][T14044] ? exit_to_user_mode_prepare+0x65/0x190 [ 181.473811][T14044] do_syscall_64+0x3d/0x90 [ 181.478224][T14044] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 181.484141][T14044] RIP: 0033:0x4665e9 [ 181.488025][T14044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 181.507713][T14044] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 181.516130][T14044] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:32 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x40000) 14:36:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0xfffffff0) [ 181.524103][T14044] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 181.532088][T14044] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 181.540055][T14044] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 181.548087][T14044] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x40030000000000) 14:36:32 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xe803000000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x100000000000000) 14:36:32 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000) 14:36:32 executing program 3 (fault-call:4 fault-nth:33): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 181.770348][T14067] FAULT_INJECTION: forcing a failure. [ 181.770348][T14067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.783441][T14067] CPU: 1 PID: 14067 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 181.792236][T14067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 181.802286][T14067] Call Trace: [ 181.805555][T14067] dump_stack_lvl+0xb7/0x103 [ 181.810150][T14067] dump_stack+0x11/0x1a [ 181.814301][T14067] should_fail+0x23c/0x250 [ 181.818722][T14067] should_fail_usercopy+0x16/0x20 [ 181.823770][T14067] _copy_from_user+0x1c/0xd0 [ 181.828381][T14067] do_recvmmsg+0x250/0x9f0 [ 181.832887][T14067] ? fsnotify_perm+0x59/0x2e0 [ 181.837593][T14067] ? __fsnotify_parent+0x32f/0x430 [ 181.842702][T14067] ? __fget_light+0x21b/0x260 [ 181.847374][T14067] ? __cond_resched+0x11/0x40 [ 181.852053][T14067] __x64_sys_recvmmsg+0xcf/0x150 [ 181.856990][T14067] ? exit_to_user_mode_prepare+0x65/0x190 [ 181.862764][T14067] do_syscall_64+0x3d/0x90 [ 181.867178][T14067] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 181.873124][T14067] RIP: 0033:0x4665e9 [ 181.877009][T14067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 181.896678][T14067] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 181.905090][T14067] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 181.913056][T14067] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 14:36:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x200000000000000) [ 181.921022][T14067] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 181.928986][T14067] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 181.937012][T14067] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:32 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xfffffff5) 14:36:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x300000000000000) 14:36:32 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x50000) 14:36:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x400000000000000) 14:36:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x8000000000000000) 14:36:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x9effffff00000000) 14:36:32 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x400000000000000) 14:36:32 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xf401000000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0xbe1e05ac00000000) 14:36:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0xc00e000000000000) 14:36:33 executing program 3 (fault-call:4 fault-nth:34): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:33 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xfffffffe) 14:36:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0xefffffff00000000) [ 182.398239][T14113] FAULT_INJECTION: forcing a failure. [ 182.398239][T14113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.411328][T14113] CPU: 1 PID: 14113 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 182.420095][T14113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.430149][T14113] Call Trace: [ 182.433426][T14113] dump_stack_lvl+0xb7/0x103 [ 182.438049][T14113] dump_stack+0x11/0x1a [ 182.442247][T14113] should_fail+0x23c/0x250 14:36:33 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1000000) [ 182.446692][T14113] should_fail_usercopy+0x16/0x20 [ 182.451786][T14113] _copy_from_user+0x1c/0xd0 [ 182.456373][T14113] do_recvmmsg+0x250/0x9f0 [ 182.460821][T14113] ? fsnotify_perm+0x59/0x2e0 [ 182.465542][T14113] ? __fsnotify_parent+0x32f/0x430 [ 182.470654][T14113] ? __fget_light+0x21b/0x260 [ 182.475328][T14113] ? __cond_resched+0x11/0x40 [ 182.480010][T14113] __x64_sys_recvmmsg+0xcf/0x150 [ 182.485021][T14113] ? exit_to_user_mode_prepare+0x65/0x190 [ 182.490743][T14113] do_syscall_64+0x3d/0x90 [ 182.495182][T14113] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 182.501083][T14113] RIP: 0033:0x4665e9 [ 182.504974][T14113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 182.524670][T14113] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 182.533072][T14113] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 182.541062][T14113] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 14:36:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0xf0ffffff00000000) [ 182.549039][T14113] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 182.556998][T14113] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 182.564966][T14113] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:33 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x800000000000000) 14:36:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0xffffff7f00000000) 14:36:33 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1359c85574) 14:36:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0xffffffff00000000) 14:36:33 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xf5ffffff00000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:33 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000000) 14:36:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="03e0ffffff000000000003000000"], 0x14}}, 0x0) 14:36:33 executing program 3 (fault-call:4 fault-nth:35): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:33 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xa00000000000000) [ 182.982500][T14152] FAULT_INJECTION: forcing a failure. [ 182.982500][T14152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.995612][T14152] CPU: 0 PID: 14152 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 183.004393][T14152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.014441][T14152] Call Trace: [ 183.017709][T14152] dump_stack_lvl+0xb7/0x103 [ 183.022298][T14152] dump_stack+0x11/0x1a [ 183.026453][T14152] should_fail+0x23c/0x250 [ 183.030864][T14152] should_fail_usercopy+0x16/0x20 [ 183.035950][T14152] _copy_from_user+0x1c/0xd0 [ 183.040538][T14152] do_recvmmsg+0x250/0x9f0 [ 183.044955][T14152] ? fsnotify_perm+0x59/0x2e0 [ 183.049666][T14152] ? __fsnotify_parent+0x32f/0x430 [ 183.055728][T14152] ? __fget_light+0x21b/0x260 [ 183.060400][T14152] ? __cond_resched+0x11/0x40 [ 183.065203][T14152] __x64_sys_recvmmsg+0xcf/0x150 [ 183.070142][T14152] ? exit_to_user_mode_prepare+0x65/0x190 [ 183.075876][T14152] do_syscall_64+0x3d/0x90 [ 183.080312][T14152] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 183.086201][T14152] RIP: 0033:0x4665e9 [ 183.090088][T14152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 183.109752][T14152] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 183.118174][T14152] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="f002fd0000000000000003000000"], 0x14}}, 0x0) [ 183.126205][T14152] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 183.134218][T14152] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 183.142184][T14152] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 183.150152][T14152] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:33 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000000000000) 14:36:33 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xc02000000000000) 14:36:33 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x3000000) 14:36:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r2) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0xc004000) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r0) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r7, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000090) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14e10000", @ANYRES16=r1, @ANYBLOB="0303000000000000000003000000"], 0x14}}, 0x0) 14:36:34 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r3 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@qipcrtr, &(0x7f0000000140)=0x80, 0x80800) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4040000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008001}, 0x2000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, r6, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x38, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5740b667}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3f1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x64a0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b8f}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x403c9262}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x64, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc65471}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1cc4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23d1e3b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2374e2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48ffe9b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x23dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52a454a1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd148}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x536caab7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x48dc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3d51}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4002) 14:36:34 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xfeffffff00000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r5, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r6) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000680), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x25c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x90, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x56d2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6de784f7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x60e5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1154c53}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6a6f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1b11}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44a89f9e}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa2c6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ef43045}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4dc3a587}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b13}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf0d0}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47e35027}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x78a3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a29e4d1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x705919f6}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x110, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x175f4dc4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb04a}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe46b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x534e27ed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x237cee5f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x543adda0}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa341}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x296a65f5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbd14}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4b5b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe1b5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x556692d7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44b740ab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72644475}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7da1ebcb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4774cd04}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x54aa}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4cec9801}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe886}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7580c814}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5d69}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e0a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeb2c}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3796ce4f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x292b2922}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6059c4a0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x565d233b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf583}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5a67}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x27ed}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44f9148d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4813391c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa1ebc14}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79788670}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e72593d}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x1}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000700), r3) sendmsg$NLBL_MGMT_C_REMOVE(r7, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, r8, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}]}, 0x40}, 0x1, 0x0, 0x0, 0x24044014}, 0x20000) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1ff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40804}, 0x0) 14:36:34 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4000000) 14:36:34 executing program 3 (fault-call:4 fault-nth:36): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:34 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4000000000000) 14:36:34 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf00000000000000) [ 183.662918][T14193] FAULT_INJECTION: forcing a failure. [ 183.662918][T14193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.676055][T14193] CPU: 1 PID: 14193 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 183.684873][T14193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.694921][T14193] Call Trace: [ 183.698193][T14193] dump_stack_lvl+0xb7/0x103 [ 183.702782][T14193] dump_stack+0x11/0x1a [ 183.706932][T14193] should_fail+0x23c/0x250 [ 183.711396][T14193] should_fail_usercopy+0x16/0x20 [ 183.716422][T14193] _copy_from_user+0x1c/0xd0 [ 183.721082][T14193] do_recvmmsg+0x250/0x9f0 [ 183.725494][T14193] ? fsnotify_perm+0x59/0x2e0 [ 183.730291][T14193] ? __fsnotify_parent+0x32f/0x430 [ 183.735454][T14193] ? __fget_light+0x21b/0x260 [ 183.740142][T14193] ? __cond_resched+0x11/0x40 [ 183.744986][T14193] __x64_sys_recvmmsg+0xcf/0x150 [ 183.749977][T14193] ? exit_to_user_mode_prepare+0x65/0x190 [ 183.755699][T14193] do_syscall_64+0x3d/0x90 [ 183.760140][T14193] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 183.766093][T14193] RIP: 0033:0x4665e9 [ 183.770033][T14193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 183.789778][T14193] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 183.798211][T14193] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:34 executing program 3 (fault-call:4 fault-nth:37): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 183.806179][T14193] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 183.814236][T14193] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 183.822222][T14193] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 183.830238][T14193] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r3, 0x400, 0x70bd2c, 0x3, {}, [@NLBL_MGMT_A_DOMAIN={0xa, 0x1, '$$}-,\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4006800) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x94, r1, 0x200, 0x70bd2b, 0x0, {0x3}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2f}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0xfffffffffffffe3e}, 0x1, 0x0, 0x0, 0x40985}, 0x48b0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r5) [ 183.895528][T14211] FAULT_INJECTION: forcing a failure. [ 183.895528][T14211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.908598][T14211] CPU: 1 PID: 14211 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 183.917381][T14211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.927439][T14211] Call Trace: [ 183.930786][T14211] dump_stack_lvl+0xb7/0x103 [ 183.935378][T14211] dump_stack+0x11/0x1a [ 183.939530][T14211] should_fail+0x23c/0x250 [ 183.943953][T14211] should_fail_usercopy+0x16/0x20 [ 183.948978][T14211] _copy_from_user+0x1c/0xd0 [ 183.953644][T14211] do_recvmmsg+0x250/0x9f0 [ 183.958141][T14211] ? fsnotify_perm+0x59/0x2e0 [ 183.962811][T14211] ? __fsnotify_parent+0x32f/0x430 [ 183.968020][T14211] ? __fget_light+0x21b/0x260 [ 183.972689][T14211] ? __cond_resched+0x11/0x40 [ 183.977438][T14211] __x64_sys_recvmmsg+0xcf/0x150 [ 183.982407][T14211] ? exit_to_user_mode_prepare+0x65/0x190 [ 183.988123][T14211] do_syscall_64+0x3d/0x90 [ 183.992531][T14211] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 183.998414][T14211] RIP: 0033:0x4665e9 [ 184.002295][T14211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 184.021896][T14211] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 184.030306][T14211] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 184.038273][T14211] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 14:36:34 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xff0f000000000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:34 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1800000000000000) 14:36:34 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4c68f42) 14:36:34 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x5000000000000) [ 184.046270][T14211] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 184.054240][T14211] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 184.062204][T14211] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="0303000000000000000003000000"], 0x14}}, 0x0) 14:36:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x70bd25, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:34 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14002a1f", @ANYRES16=r1, @ANYBLOB="0303000000000000000003000000"], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r3) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r3) 14:36:35 executing program 3 (fault-call:4 fault-nth:38): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:35 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x8000000) 14:36:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x24004085) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) [ 184.390729][T14248] FAULT_INJECTION: forcing a failure. [ 184.390729][T14248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.403810][T14248] CPU: 1 PID: 14248 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 184.412636][T14248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.422680][T14248] Call Trace: [ 184.425944][T14248] dump_stack_lvl+0xb7/0x103 [ 184.430595][T14248] dump_stack+0x11/0x1a [ 184.435193][T14248] should_fail+0x23c/0x250 14:36:35 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x100000000000000) [ 184.439614][T14248] should_fail_usercopy+0x16/0x20 [ 184.444650][T14248] _copy_from_user+0x1c/0xd0 [ 184.449243][T14248] do_recvmmsg+0x250/0x9f0 [ 184.453680][T14248] ? fsnotify_perm+0x59/0x2e0 [ 184.458357][T14248] ? __fsnotify_parent+0x32f/0x430 [ 184.463464][T14248] ? __fget_light+0x21b/0x260 [ 184.468140][T14248] ? __cond_resched+0x11/0x40 [ 184.472819][T14248] __x64_sys_recvmmsg+0xcf/0x150 [ 184.477835][T14248] ? exit_to_user_mode_prepare+0x65/0x190 [ 184.483584][T14248] do_syscall_64+0x3d/0x90 [ 184.488012][T14248] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 184.493903][T14248] RIP: 0033:0x4665e9 [ 184.497787][T14248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 184.517508][T14248] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 184.525939][T14248] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 184.533921][T14248] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 184.541889][T14248] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 184.549862][T14248] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 184.557848][T14248] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:35 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0xffffffff00000000, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:35 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1802000000000000) 14:36:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="0303000000000000000003000000"], 0x14}}, 0x0) 14:36:35 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xa000000) 14:36:35 executing program 3 (fault-call:4 fault-nth:39): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 184.741549][T14266] FAULT_INJECTION: forcing a failure. [ 184.741549][T14266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.754669][T14266] CPU: 1 PID: 14266 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 184.763433][T14266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.773506][T14266] Call Trace: [ 184.776780][T14266] dump_stack_lvl+0xb7/0x103 [ 184.781367][T14266] dump_stack+0x11/0x1a [ 184.785519][T14266] should_fail+0x23c/0x250 [ 184.789939][T14266] should_fail_usercopy+0x16/0x20 [ 184.795029][T14266] _copy_from_user+0x1c/0xd0 [ 184.799695][T14266] do_recvmmsg+0x250/0x9f0 [ 184.804139][T14266] ? fsnotify_perm+0x59/0x2e0 [ 184.808914][T14266] ? __fsnotify_parent+0x32f/0x430 [ 184.814024][T14266] ? __fget_light+0x21b/0x260 [ 184.818698][T14266] ? __cond_resched+0x11/0x40 [ 184.823454][T14266] __x64_sys_recvmmsg+0xcf/0x150 [ 184.828397][T14266] ? exit_to_user_mode_prepare+0x65/0x190 [ 184.834138][T14266] do_syscall_64+0x3d/0x90 [ 184.838555][T14266] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 184.844446][T14266] RIP: 0033:0x4665e9 [ 184.848330][T14266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 184.867932][T14266] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 184.876346][T14266] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 184.884376][T14266] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 14:36:35 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) [ 184.892363][T14266] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 184.900332][T14266] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 184.908300][T14266] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:35 executing program 3 (fault-call:4 fault-nth:40): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:35 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x200000000000000) 14:36:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x28, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x28}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="34100000", @ANYRES16=r6, @ANYBLOB="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"], 0x1034}, 0x1, 0x0, 0x0, 0x50000}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x6558, r7, 0x1, 0x0, 0x6, @random="1402c4dabdae"}, 0x14) r8 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendto$packet(r8, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x6558, r9, 0x1, 0x0, 0x6, @random="1402c4dabdae"}, 0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x750, r4, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x310, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x124, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'NLBL_CIPSOv4\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x18}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '^\f$\xaa)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8f70}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff00}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'NLBL_UNLBL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '-](\']\x1a]+\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '[\xc6)&&%\xb1/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'NLBL_UNLBL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xd6, 0x5, "968ef4996e1d1cba1d86b3e74e71460467c61ffcf8e19f02ee80413ce2924ae57f08134bdce74ed9d263726801c378ea501f99344179abf8c163289f85a29e5969736341ff32f28dc6fe9397bf3fb337957733fc2061c0f51d6a9ae5d3ef1f0553789a6ec997f3dd0c18638208a96e127e83041e1d0335b46be4f56fcfc35607175ced9bec090d33e608a5de0a77b94d74b9a8608f85677e32710919dddc75a9a1ca1cbaaed942f1b266ed46b03ac51b13e3eb0899ab287d0053fed37157979289d0f56ef4c680dab0b1978da5d0f13de974"}, @ETHTOOL_A_BITSET_VALUE={0xac, 0x4, "d3c2e6bede4f1a284f1e1856aedd3f4ae6f4d58ebd7c9f367f87c536a1e16eef5a2862d0f647e881e77021f4f6ecc78f020017ea040bfced1a6bb5d28c5b1e218a4bf35a7bc4bd6628f0bef24f20f3b0a19e0ada990293a88faae610e9005cb7950518be7d05ba4acf8fdd6831a32146f5864841e9d86d501ef4b5c1451e71c53609fab0ca54ada47d6f84eacea56adda01e6ef48949651c5f0cfdf8e2a52ddbea26d804bc0ec719"}, @ETHTOOL_A_BITSET_MASK={0x5f, 0x5, "e8ff4516d753b717cfd34c47b7f793a158cedc670a24f6f59ed6fa6020290bae1c0dd973169ba5eac5436f8ed900001af6a9712373ddae852decf520cdea0d2efcc4ca363894ca1970a23306740f0c6439f2e069b97c06cb52ed8d"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x334, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_BITS={0x1b0, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'NLBL_CIPSOv4\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'NLBL_UNLBL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'NLBL_CIPSOv4\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\g\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-!}+\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'NLBL_CIPSOv4\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'NLBL_CIPSOv4\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'NLBL_MGMT\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1f}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xf7\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'NLBL_UNLBL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'NLBL_UNLBL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffd7}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'NLBL_UNLBL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'NLBL_MGMT\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$-]\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'NLBL_CIPSOv4\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xb4, 0x4, "d042dd28463a19c667e1aebb8b773ae27d99fb7ccc92e5f1588d5d40f86522f6a4528592322f44f0b2402ec1bbdd1f3b570663419b84a8308831f85951540a44885f5613f1a248395e779aa2eb679d395e83f89c2449aa69f2577af65137a6bbfb0e391aca1b163b68d7cf00468bd1cebcf3049d8c4351e9d0f7e5a08dc518f5e485ae4879857ad18e8db8dec4fa661d3459f1e03b9c4f80ee9717b74f0f5ef05d98bb165b812856a11bedea815f9d0b"}, @ETHTOOL_A_BITSET_VALUE={0xa5, 0x4, "3d60e5ea4dc91f24b34f370aa0928371148acef89b450400ebc8f1f1ff0604d01da0b2906c39e160f75bdd1687497b5da4d2a458fab657d9d30cbb63ef8b1e4b2caefb53c4e8e7cc834c5bbc7b4cfbe49603e2dde680a2a1f4a675317da41b3c5ae199b3dcfd97256f9a4047e42b1b49087ae1bfe06fab23b08b85523259ca41251abb2bd7b6d53587c870ef3bc59b51ad42a1783c50f2b03321d96722bebfa6e0"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x93}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x750}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000041) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r10) [ 185.016456][T14283] FAULT_INJECTION: forcing a failure. [ 185.016456][T14283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.029584][T14283] CPU: 1 PID: 14283 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 185.038342][T14283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.048384][T14283] Call Trace: [ 185.051653][T14283] dump_stack_lvl+0xb7/0x103 [ 185.056302][T14283] dump_stack+0x11/0x1a [ 185.060514][T14283] should_fail+0x23c/0x250 [ 185.064933][T14283] should_fail_usercopy+0x16/0x20 [ 185.070110][T14283] _copy_from_user+0x1c/0xd0 [ 185.074735][T14283] do_recvmmsg+0x250/0x9f0 [ 185.079313][T14283] ? fsnotify_perm+0x59/0x2e0 [ 185.084001][T14283] ? __fsnotify_parent+0x32f/0x430 [ 185.089110][T14283] ? __fget_light+0x21b/0x260 [ 185.093853][T14283] ? __cond_resched+0x11/0x40 [ 185.098537][T14283] __x64_sys_recvmmsg+0xcf/0x150 [ 185.103477][T14283] ? exit_to_user_mode_prepare+0x65/0x190 [ 185.109360][T14283] do_syscall_64+0x3d/0x90 [ 185.113777][T14283] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 185.119676][T14283] RIP: 0033:0x4665e9 [ 185.123566][T14283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 185.143201][T14283] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 185.151688][T14283] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:35 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xc020000) 14:36:35 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000) [ 185.159677][T14283] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 185.167640][T14283] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 185.175618][T14283] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 185.183584][T14283] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:35 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:35 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xdc, r7, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xb8, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d9ab37e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7bf3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57098eb5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x400f7208}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff3e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13bb59a1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x66e}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x87d1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff99}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6403b242}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2462}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x694a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe7c0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1521}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x58e8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x91c1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8392}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x424b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb7e2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7083}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f184d46}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4001}, 0x1) 14:36:35 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000000000000000) 14:36:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0303000000000000000003000000"], 0x14}}, 0x0) 14:36:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r4, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:mtrr_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:netutils_exec_t:s0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000820}, 0x0) 14:36:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r4, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048850}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040029bd7000fbdbdf250400000014000600fe8000000000000000000000000000bb08000700ac1414bb080004000100000008000700e000000206000b000b00000014000600fe8000000000000000000000000000bb08000c0000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 14:36:36 executing program 3 (fault-call:4 fault-nth:41): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:36 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x400000000000000) 14:36:36 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf000000) 14:36:36 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2400000000000000) 14:36:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000000400)={&(0x7f0000000100), 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x14c, r7, 0x0, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x10c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51c2f3d4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x42b3cf4e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc0cc}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66364ec8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f731d0c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f4e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3268aa26}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd20a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b043a02}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72e06c0e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdc31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6156c7e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3bbb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x74de}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b774849}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5667}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x74}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4acd1844}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63385bb6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66e17508}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x139cfb40}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x237a16e5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x61c4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x370}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3de9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65e62d0a}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fa7b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53ef0856}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x529c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x515f}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x2}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8040}, 0x91) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14275ad4d0bfdb12ff033ce6dc5b79e9b6b61174fe14380f8aa56c5353b75bd4dd24841e8ffc469f9699938d1fa3af746540558b63d8cf68e6cd38f820ce3f95b5ba8b9967509073fa5e2fe9de6508ec3632746b3ed3aa92d7b2cf53d36c1d2057d4", @ANYRES16, @ANYBLOB="00000000000000000000000000006a277ddc631d753e2041e187ec7ef5209077bdfae50000000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r10, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r1) [ 185.678137][T14331] FAULT_INJECTION: forcing a failure. [ 185.678137][T14331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.691276][T14331] CPU: 0 PID: 14331 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 185.700060][T14331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.710370][T14331] Call Trace: [ 185.713669][T14331] dump_stack_lvl+0xb7/0x103 [ 185.718261][T14331] dump_stack+0x11/0x1a [ 185.722422][T14331] should_fail+0x23c/0x250 [ 185.726895][T14331] should_fail_usercopy+0x16/0x20 [ 185.732005][T14331] _copy_from_user+0x1c/0xd0 [ 185.736666][T14331] do_recvmmsg+0x250/0x9f0 [ 185.741085][T14331] ? fsnotify_perm+0x59/0x2e0 [ 185.745820][T14331] ? __fsnotify_parent+0x32f/0x430 [ 185.750928][T14331] ? __fget_light+0x21b/0x260 [ 185.755669][T14331] ? __cond_resched+0x11/0x40 [ 185.760426][T14331] __x64_sys_recvmmsg+0xcf/0x150 [ 185.765364][T14331] ? exit_to_user_mode_prepare+0x65/0x190 [ 185.771097][T14331] do_syscall_64+0x3d/0x90 [ 185.775563][T14331] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 185.781466][T14331] RIP: 0033:0x4665e9 [ 185.785358][T14331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 185.805054][T14331] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 185.813468][T14331] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 185.821465][T14331] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 185.829438][T14331] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 185.837407][T14331] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 185.845468][T14331] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}}, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x900, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004081) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r7) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280), r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r8, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="10002bbd7000fddbdf25240000000a0001007770616e3000000008000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e34000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x1) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r6, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004801}, 0x44) 14:36:36 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x3) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:36 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x3c00000000000000) 14:36:36 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x800000000000000) 14:36:36 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x18000000) 14:36:36 executing program 3 (fault-call:4 fault-nth:42): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 186.326365][T14364] FAULT_INJECTION: forcing a failure. [ 186.326365][T14364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.339444][T14364] CPU: 1 PID: 14364 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 186.348273][T14364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.358329][T14364] Call Trace: [ 186.361601][T14364] dump_stack_lvl+0xb7/0x103 [ 186.366194][T14364] dump_stack+0x11/0x1a [ 186.370493][T14364] should_fail+0x23c/0x250 [ 186.374948][T14364] should_fail_usercopy+0x16/0x20 [ 186.380023][T14364] _copy_from_user+0x1c/0xd0 [ 186.384638][T14364] do_recvmmsg+0x250/0x9f0 [ 186.389066][T14364] ? fsnotify_perm+0x59/0x2e0 [ 186.393746][T14364] ? __fsnotify_parent+0x32f/0x430 [ 186.398856][T14364] ? __fget_light+0x21b/0x260 [ 186.403656][T14364] ? __cond_resched+0x11/0x40 [ 186.408390][T14364] __x64_sys_recvmmsg+0xcf/0x150 [ 186.413425][T14364] ? exit_to_user_mode_prepare+0x65/0x190 [ 186.419145][T14364] do_syscall_64+0x3d/0x90 [ 186.423646][T14364] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 186.429546][T14364] RIP: 0033:0x4665e9 [ 186.433523][T14364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 186.453145][T14364] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 186.461563][T14364] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 186.469797][T14364] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 186.477772][T14364] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 186.485743][T14364] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 186.493708][T14364] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:37 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4102000000000000) 14:36:37 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xa00000000000000) 14:36:37 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:37 executing program 3 (fault-call:4 fault-nth:43): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:37 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x18020000) [ 186.627703][T14377] FAULT_INJECTION: forcing a failure. [ 186.627703][T14377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.641198][T14377] CPU: 1 PID: 14377 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 186.649956][T14377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.660035][T14377] Call Trace: [ 186.663321][T14377] dump_stack_lvl+0xb7/0x103 [ 186.667914][T14377] dump_stack+0x11/0x1a [ 186.672089][T14377] should_fail+0x23c/0x250 [ 186.676553][T14377] should_fail_usercopy+0x16/0x20 [ 186.681585][T14377] _copy_from_user+0x1c/0xd0 [ 186.686235][T14377] do_recvmmsg+0x250/0x9f0 [ 186.690716][T14377] ? fsnotify_perm+0x59/0x2e0 [ 186.695400][T14377] ? __fsnotify_parent+0x32f/0x430 [ 186.700580][T14377] ? __fget_light+0x21b/0x260 [ 186.705325][T14377] ? __cond_resched+0x11/0x40 [ 186.710056][T14377] __x64_sys_recvmmsg+0xcf/0x150 [ 186.714995][T14377] ? exit_to_user_mode_prepare+0x65/0x190 [ 186.720731][T14377] do_syscall_64+0x3d/0x90 [ 186.725149][T14377] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 186.731046][T14377] RIP: 0033:0x4665e9 [ 186.734995][T14377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 186.754862][T14377] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 186.763280][T14377] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 186.771289][T14377] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 186.779514][T14377] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 186.787485][T14377] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 186.795464][T14377] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:37 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x5800000000000000) 14:36:37 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x20000000) 14:36:37 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xc02000000000000) 14:36:37 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x5) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:37 executing program 3 (fault-call:4 fault-nth:44): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 187.276448][T14398] FAULT_INJECTION: forcing a failure. [ 187.276448][T14398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.289541][T14398] CPU: 0 PID: 14398 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 187.298363][T14398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.308414][T14398] Call Trace: [ 187.311683][T14398] dump_stack_lvl+0xb7/0x103 [ 187.316274][T14398] dump_stack+0x11/0x1a [ 187.320424][T14398] should_fail+0x23c/0x250 [ 187.324890][T14398] should_fail_usercopy+0x16/0x20 [ 187.329922][T14398] _copy_from_user+0x1c/0xd0 [ 187.334518][T14398] do_recvmmsg+0x250/0x9f0 [ 187.338949][T14398] ? fsnotify_perm+0x59/0x2e0 [ 187.343637][T14398] ? __fsnotify_parent+0x32f/0x430 [ 187.348751][T14398] ? __fget_light+0x21b/0x260 [ 187.353426][T14398] ? __cond_resched+0x11/0x40 [ 187.358132][T14398] __x64_sys_recvmmsg+0xcf/0x150 [ 187.363069][T14398] ? exit_to_user_mode_prepare+0x65/0x190 [ 187.368794][T14398] do_syscall_64+0x3d/0x90 [ 187.373213][T14398] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 187.379166][T14398] RIP: 0033:0x4665e9 [ 187.383052][T14398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 187.402758][T14398] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 187.411231][T14398] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 187.419207][T14398] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 187.427288][T14398] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 187.435346][T14398] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 187.443313][T14398] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:38 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x24000000) 14:36:38 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x5e59e07312000000) 14:36:38 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf00000000000000) 14:36:38 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x7) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:38 executing program 3 (fault-call:4 fault-nth:45): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:38 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x3c000000) [ 188.015043][T14422] FAULT_INJECTION: forcing a failure. [ 188.015043][T14422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.028141][T14422] CPU: 0 PID: 14422 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 188.036988][T14422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 188.047038][T14422] Call Trace: [ 188.050315][T14422] dump_stack_lvl+0xb7/0x103 [ 188.054916][T14422] dump_stack+0x11/0x1a [ 188.059068][T14422] should_fail+0x23c/0x250 [ 188.063554][T14422] should_fail_usercopy+0x16/0x20 [ 188.068636][T14422] _copy_from_user+0x1c/0xd0 [ 188.073239][T14422] do_recvmmsg+0x250/0x9f0 [ 188.077658][T14422] ? fsnotify_perm+0x59/0x2e0 [ 188.082367][T14422] ? __fsnotify_parent+0x32f/0x430 [ 188.087494][T14422] ? __fget_light+0x21b/0x260 [ 188.092167][T14422] ? __cond_resched+0x11/0x40 [ 188.096915][T14422] __x64_sys_recvmmsg+0xcf/0x150 [ 188.101909][T14422] ? exit_to_user_mode_prepare+0x65/0x190 [ 188.107700][T14422] do_syscall_64+0x3d/0x90 [ 188.112178][T14422] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 188.118100][T14422] RIP: 0033:0x4665e9 [ 188.122035][T14422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 188.141635][T14422] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 188.150094][T14422] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:38 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x8ca6ffff00000000) [ 188.158086][T14422] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 188.166050][T14422] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 188.174105][T14422] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 188.182068][T14422] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:38 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:39 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1800000000000000) 14:36:39 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x41020000) 14:36:39 executing program 3 (fault-call:4 fault-nth:46): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 188.595089][T14446] FAULT_INJECTION: forcing a failure. [ 188.595089][T14446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.608192][T14446] CPU: 1 PID: 14446 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 188.616984][T14446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 188.627038][T14446] Call Trace: [ 188.630313][T14446] dump_stack_lvl+0xb7/0x103 [ 188.634906][T14446] dump_stack+0x11/0x1a [ 188.639068][T14446] should_fail+0x23c/0x250 [ 188.643492][T14446] should_fail_usercopy+0x16/0x20 [ 188.649937][T14446] _copy_from_user+0x1c/0xd0 [ 188.654527][T14446] do_recvmmsg+0x250/0x9f0 [ 188.658948][T14446] ? fsnotify_perm+0x59/0x2e0 [ 188.663630][T14446] ? __fsnotify_parent+0x32f/0x430 [ 188.668748][T14446] ? __fget_light+0x21b/0x260 [ 188.673427][T14446] ? __cond_resched+0x11/0x40 [ 188.678108][T14446] __x64_sys_recvmmsg+0xcf/0x150 [ 188.683103][T14446] ? exit_to_user_mode_prepare+0x65/0x190 [ 188.688830][T14446] do_syscall_64+0x3d/0x90 [ 188.693318][T14446] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 188.699425][T14446] RIP: 0033:0x4665e9 [ 188.703312][T14446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 188.722914][T14446] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 188.731401][T14446] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:39 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x91ffffff00000000) 14:36:39 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1802000000000000) [ 188.739399][T14446] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 188.747367][T14446] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 188.755335][T14446] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 188.763308][T14446] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:39 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x428fc604) 14:36:39 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0xa) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:39 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xa09c357000000000) 14:36:39 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000000000000000) 14:36:40 executing program 3 (fault-call:4 fault-nth:47): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 189.397784][T14471] FAULT_INJECTION: forcing a failure. [ 189.397784][T14471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.410966][T14471] CPU: 1 PID: 14471 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 189.419724][T14471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.429779][T14471] Call Trace: [ 189.433053][T14471] dump_stack_lvl+0xb7/0x103 [ 189.437646][T14471] dump_stack+0x11/0x1a [ 189.441816][T14471] should_fail+0x23c/0x250 14:36:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0xb3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x8d}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) [ 189.446265][T14471] should_fail_usercopy+0x16/0x20 [ 189.451392][T14471] _copy_from_user+0x1c/0xd0 [ 189.455981][T14471] do_recvmmsg+0x250/0x9f0 [ 189.460559][T14471] ? fsnotify_perm+0x59/0x2e0 [ 189.465261][T14471] ? __fsnotify_parent+0x32f/0x430 [ 189.470414][T14471] ? __fget_light+0x21b/0x260 [ 189.475089][T14471] ? __cond_resched+0x11/0x40 [ 189.479820][T14471] __x64_sys_recvmmsg+0xcf/0x150 [ 189.484759][T14471] ? exit_to_user_mode_prepare+0x65/0x190 [ 189.490482][T14471] do_syscall_64+0x3d/0x90 14:36:40 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x58000000) [ 189.494901][T14471] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 189.500798][T14471] RIP: 0033:0x4665e9 [ 189.504708][T14471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 189.524316][T14471] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 189.532726][T14471] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 189.541125][T14471] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 189.549102][T14471] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 189.557067][T14471] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 189.565042][T14471] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:40 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0xf) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40048) 14:36:40 executing program 3 (fault-call:4 fault-nth:48): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 189.661538][T14489] FAULT_INJECTION: forcing a failure. [ 189.661538][T14489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.674641][T14489] CPU: 0 PID: 14489 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 189.683471][T14489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.693530][T14489] Call Trace: [ 189.696804][T14489] dump_stack_lvl+0xb7/0x103 [ 189.701395][T14489] dump_stack+0x11/0x1a [ 189.705569][T14489] should_fail+0x23c/0x250 [ 189.710006][T14489] should_fail_usercopy+0x16/0x20 [ 189.715033][T14489] _copy_from_user+0x1c/0xd0 [ 189.719614][T14489] do_recvmmsg+0x250/0x9f0 [ 189.724030][T14489] ? fsnotify_perm+0x59/0x2e0 [ 189.728716][T14489] ? __fsnotify_parent+0x32f/0x430 [ 189.733821][T14489] ? __fget_light+0x21b/0x260 [ 189.738554][T14489] ? __cond_resched+0x11/0x40 [ 189.743234][T14489] __x64_sys_recvmmsg+0xcf/0x150 [ 189.748191][T14489] ? exit_to_user_mode_prepare+0x65/0x190 [ 189.753911][T14489] do_syscall_64+0x3d/0x90 [ 189.758495][T14489] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 189.764390][T14489] RIP: 0033:0x4665e9 [ 189.768274][T14489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 189.788002][T14489] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 189.796433][T14489] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 189.804403][T14489] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 14:36:40 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x91ffffff) 14:36:40 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2400000000000000) 14:36:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 189.812368][T14489] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 189.820344][T14489] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 189.828311][T14489] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="030202002cc100452300000002002000d446eca6a9316f4332a5d398a88f87a2069a31165ab4fd641f761e48854980b2e69679c4616433511d043594000000000000006547e5ab4fa847b6085ec5ce8e6a13b0987c63599eb1653b1bd2649d460d08231a5b0943153f2831f3002f15e24962cda56cb3a0ca7b8e1252ee3fdddfb88eb44990b66c6183c3b4c0ffe2327f394c20127171fea6cb29e09599f51cc9e4cc1b7f0e7fcb2ad3032e344a56f9701a0f01ebf250c2120947375ee0874561309196d4b69b2259966ac719e1"], 0x14}}, 0x0) 14:36:40 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xd7ff000000000000) 14:36:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34000000a3d32e5a564dbff1355ec239ee20230cbf70839493bdc306442103c3749306ca584343c869b8848c9ddbb2736e2776b78988d72c50824be759f4be620ca7fa8507eb4000f3b99266f7e353aaedce51be6e7930e04cae077e1d8c75e75ab63138d81e773db9a3942359cc15748185484191b6581e7631d08e7d476195e0f2080d3bce9bb9a33b16f79a59d4a55598d69f5c6ac03c864429d0169fb547d8d50f8ed1a120b3a4180eca4875f6cb7b0483ed1269015929c2d5d8c04c234c578a", @ANYRES16=r1, @ANYBLOB="20000000000000dcdf250300000008000c0001000000"], 0x1c}}, 0x0) 14:36:40 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x18) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:40 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xb17a0000) 14:36:40 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x3c00000000000000) 14:36:41 executing program 3 (fault-call:4 fault-nth:49): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r2) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0xe3a078764ae7bdd7, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r4, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8084) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) [ 190.380321][T14528] FAULT_INJECTION: forcing a failure. [ 190.380321][T14528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.393430][T14528] CPU: 0 PID: 14528 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 190.402198][T14528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.412251][T14528] Call Trace: [ 190.415535][T14528] dump_stack_lvl+0xb7/0x103 [ 190.420201][T14528] dump_stack+0x11/0x1a [ 190.424356][T14528] should_fail+0x23c/0x250 [ 190.428773][T14528] should_fail_usercopy+0x16/0x20 [ 190.433809][T14528] _copy_from_user+0x1c/0xd0 [ 190.438406][T14528] do_recvmmsg+0x250/0x9f0 [ 190.442824][T14528] ? fsnotify_perm+0x59/0x2e0 [ 190.447500][T14528] ? __fsnotify_parent+0x32f/0x430 [ 190.452619][T14528] ? __fget_light+0x21b/0x260 [ 190.457293][T14528] ? __cond_resched+0x11/0x40 [ 190.461972][T14528] __x64_sys_recvmmsg+0xcf/0x150 [ 190.466949][T14528] ? exit_to_user_mode_prepare+0x65/0x190 [ 190.472752][T14528] do_syscall_64+0x3d/0x90 14:36:41 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xd7ffffff00000000) 14:36:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000002}, 0x5) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r0) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40094) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x104, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x80, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa7c6e93}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7e24}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcc71}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc57cd92}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf6a0}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf650}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a319140}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d7046fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x537964f7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x289bd5eb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5248}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74279779}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x1814}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x34, r1, 0x303, 0x0, 0x0, {0x3}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x34}}, 0x0) 14:36:41 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x24) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:41 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xd7ff0000) [ 190.477229][T14528] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 190.483174][T14528] RIP: 0033:0x4665e9 [ 190.487082][T14528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 190.506772][T14528] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 190.515208][T14528] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 190.523355][T14528] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 190.531325][T14528] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 190.539295][T14528] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 190.547263][T14528] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="00000003000000429e89eb8d15c7a5d2f950c9b3f1463a224c3b903ae4792408fa312ce622608243116616fa243665d2df642611860e69cc21c7bec40cc187b788ff19b9e1cd6f1f4cffa2b41f796febd0d82cf818890f10d35901f114040b53ad9213b14332d9544780b3ab93d4cc738a79139ab8e63ba1667d86d508940a493f9c8b160ec35370589f84e6b7fec35996c8cf7b24b68f0000000000"], 0x14}}, 0x0) 14:36:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0xfffffffe, {0x3}}, 0x14}}, 0x0) 14:36:41 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4102000000000000) 14:36:41 executing program 3 (fault-call:4 fault-nth:50): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0xb32, 0x70bd2c, 0x25dfdc01, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x30}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040081}, 0x4048004) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) [ 190.765780][T14561] FAULT_INJECTION: forcing a failure. [ 190.765780][T14561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.778848][T14561] CPU: 0 PID: 14561 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 190.787635][T14561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 190.797714][T14561] Call Trace: [ 190.800991][T14561] dump_stack_lvl+0xb7/0x103 [ 190.805615][T14561] dump_stack+0x11/0x1a [ 190.809762][T14561] should_fail+0x23c/0x250 [ 190.814246][T14561] should_fail_usercopy+0x16/0x20 [ 190.819600][T14561] _copy_from_user+0x1c/0xd0 [ 190.824189][T14561] do_recvmmsg+0x250/0x9f0 [ 190.828674][T14561] ? fsnotify_perm+0x59/0x2e0 [ 190.833347][T14561] ? __fsnotify_parent+0x32f/0x430 [ 190.838533][T14561] ? __fget_light+0x21b/0x260 [ 190.843203][T14561] ? __cond_resched+0x11/0x40 [ 190.848211][T14561] __x64_sys_recvmmsg+0xcf/0x150 [ 190.853192][T14561] ? exit_to_user_mode_prepare+0x65/0x190 [ 190.858913][T14561] do_syscall_64+0x3d/0x90 [ 190.863331][T14561] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 190.869226][T14561] RIP: 0033:0x4665e9 [ 190.873118][T14561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 190.892752][T14561] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 190.901155][T14561] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x27}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:41 executing program 3 (fault-call:4 fault-nth:51): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 190.909175][T14561] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 190.917141][T14561] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 190.926480][T14561] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 190.934537][T14561] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x234, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0xd}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xbc, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcbbc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13d07d00}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4891}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a147c19}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3b8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa984}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3619cec3}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x324a0a42}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d907db0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b87ad4d}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4362}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xba16}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d991596}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1092}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9344}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd2a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5bbb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ec9042e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2f4d}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb4, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x41}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ec82b82}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7661c9a}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50c0a8bb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72666d05}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d5139}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x547daa44}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x233d857f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11e5d54b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}]}]}, 0x234}}, 0x20004881) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="16815ca6012576d7c003b6"], 0xe8}}, 0x0) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000380)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000323c0)=""/102384, 0xfffffffffffffeb0}], 0x3, 0x0, 0x0, 0x0) tkill(r3, 0x3e) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) r4 = gettid() rt_sigqueueinfo(r4, 0xf, &(0x7f00000002c0)) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000826bd7000ffdbdf3b010000000c00050000010000000000000c00060001000000000000000c0006000000000000894d3c"], 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x4004) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x4000000) [ 191.030654][T14572] FAULT_INJECTION: forcing a failure. [ 191.030654][T14572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.044098][T14572] CPU: 1 PID: 14572 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 191.052880][T14572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.062930][T14572] Call Trace: [ 191.066226][T14572] dump_stack_lvl+0xb7/0x103 [ 191.070839][T14572] dump_stack+0x11/0x1a [ 191.074991][T14572] should_fail+0x23c/0x250 [ 191.079486][T14572] should_fail_usercopy+0x16/0x20 [ 191.084535][T14572] _copy_from_user+0x1c/0xd0 [ 191.089186][T14572] do_recvmmsg+0x250/0x9f0 [ 191.093624][T14572] ? fsnotify_perm+0x59/0x2e0 [ 191.098306][T14572] ? __fsnotify_parent+0x32f/0x430 [ 191.103414][T14572] ? __fget_light+0x21b/0x260 [ 191.108174][T14572] ? __cond_resched+0x11/0x40 [ 191.112906][T14572] __x64_sys_recvmmsg+0xcf/0x150 [ 191.117844][T14572] ? exit_to_user_mode_prepare+0x65/0x190 [ 191.123599][T14572] do_syscall_64+0x3d/0x90 [ 191.128088][T14572] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 191.133971][T14572] RIP: 0033:0x4665e9 [ 191.137849][T14572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 191.157447][T14572] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 191.165845][T14572] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:41 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xe803000000000000) 14:36:41 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xd7ffffff) 14:36:41 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x3c) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:41 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x5800000000000000) [ 191.173805][T14572] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 191.181772][T14572] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 191.189729][T14572] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 191.197755][T14572] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:41 executing program 3 (fault-call:4 fault-nth:52): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 191.320740][T14593] FAULT_INJECTION: forcing a failure. [ 191.320740][T14593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.333896][T14593] CPU: 0 PID: 14593 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 191.342661][T14593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.352717][T14593] Call Trace: [ 191.356044][T14593] dump_stack_lvl+0xb7/0x103 [ 191.360702][T14593] dump_stack+0x11/0x1a [ 191.364866][T14593] should_fail+0x23c/0x250 [ 191.369284][T14593] should_fail_usercopy+0x16/0x20 [ 191.374459][T14593] _copy_from_user+0x1c/0xd0 [ 191.379084][T14593] do_recvmmsg+0x250/0x9f0 [ 191.383582][T14593] ? fsnotify_perm+0x59/0x2e0 [ 191.388275][T14593] ? __fsnotify_parent+0x32f/0x430 [ 191.393420][T14593] ? __fget_light+0x21b/0x260 [ 191.398102][T14593] ? __cond_resched+0x11/0x40 [ 191.402780][T14593] __x64_sys_recvmmsg+0xcf/0x150 [ 191.407730][T14593] ? exit_to_user_mode_prepare+0x65/0x190 [ 191.413456][T14593] do_syscall_64+0x3d/0x90 [ 191.417877][T14593] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 191.423778][T14593] RIP: 0033:0x4665e9 [ 191.427664][T14593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 191.447272][T14593] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 191.455680][T14593] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 191.463646][T14593] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 191.471719][T14593] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 191.479687][T14593] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 191.487656][T14593] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1423f339d7dd7dac5872d306eb25", @ANYRES16=r1, @ANYBLOB="0303000000000000000003000000"], 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), r4) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r6, 0xe3a078764ae7bdd7, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x900, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) 14:36:42 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf401000000000000) 14:36:42 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x7455c85913000000) 14:36:42 executing program 2: shmget(0x1, 0x4000, 0x54000000, &(0x7f0000ffa000/0x4000)=nil) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shmget(0x3, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r1, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, r1, 0x303, 0x0, 0x0, {0x3}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x64a2d247787b4136}]}, 0x4c}}, 0x0) 14:36:42 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x42) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r1, 0x400, 0x0, 0x25dfdbff, {0x3}}, 0x14}}, 0x0) 14:36:42 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xe8030000) 14:36:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x303, 0x0, 0xffffffbe, {0x3}}, 0x14}}, 0x20004000) 14:36:42 executing program 3 (fault-call:4 fault-nth:53): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 191.920355][T14631] FAULT_INJECTION: forcing a failure. [ 191.920355][T14631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.933442][T14631] CPU: 1 PID: 14631 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 191.942204][T14631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 191.952339][T14631] Call Trace: [ 191.955613][T14631] dump_stack_lvl+0xb7/0x103 [ 191.960282][T14631] dump_stack+0x11/0x1a [ 191.964435][T14631] should_fail+0x23c/0x250 [ 191.968900][T14631] should_fail_usercopy+0x16/0x20 [ 191.973944][T14631] _copy_from_user+0x1c/0xd0 [ 191.978574][T14631] do_recvmmsg+0x250/0x9f0 [ 191.982997][T14631] ? fsnotify_perm+0x59/0x2e0 [ 191.987694][T14631] ? __fsnotify_parent+0x32f/0x430 [ 191.992805][T14631] ? __fget_light+0x21b/0x260 [ 191.997501][T14631] ? __cond_resched+0x11/0x40 [ 192.002183][T14631] __x64_sys_recvmmsg+0xcf/0x150 [ 192.007125][T14631] ? exit_to_user_mode_prepare+0x65/0x190 [ 192.012865][T14631] do_syscall_64+0x3d/0x90 14:36:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000029bd7000ffdbdf2504000000080002000700000014000500fc00000000000000000000000000000108000400000000000e0001004e4c424c5f4d474d5400000006000b002500009c10000b0003000000ab3a599bb11ba53e3281c953d6b279ecfd3b8d145f585ecb064725c159ad576bb32b0c93806b1f5934b6e06f849f6af9add88bc80817a3f0b8303d1af2d39465e7a36ac17f694fae32"], 0x58}, 0x1, 0x0, 0x0, 0x85}, 0x40) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="144fcd0e9ffb24fe9d1900", @ANYRES16=r1, @ANYBLOB="03032abd70000000000003000000"], 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0x60, r7, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x3f7, 0x2, 0x70bd2b, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x4008004) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r8) sendmsg$IEEE802154_START_REQ(r8, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x40}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x11}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0xf7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x24004000) [ 192.017333][T14631] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 192.023258][T14631] RIP: 0033:0x4665e9 [ 192.027141][T14631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 192.046809][T14631] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 192.055225][T14631] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 192.063199][T14631] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 14:36:42 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf5ffffff00000000) [ 192.071168][T14631] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 192.079140][T14631] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 192.087127][T14631] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0x1, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) 14:36:42 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf4010000) 14:36:42 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x91ffffff00000000) 14:36:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14:36:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r1, 0x303, 0x0, 0x25dfdbfd, {0x3}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x184, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2120}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2ae}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xee3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe0e}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x45b893f4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffe00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 14:36:43 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x1f4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:43 executing program 3 (fault-call:4 fault-nth:54): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003ac955793393bbf16345ec463ab76665e716ffa99bdc520df5bc99c58e7a456797ff8683d26205e27f6260beea06f188cd3f30fbf0302a66a6cf974f099507fd75617e7d62cde02c35ccf231406db498f8bc279800000000000000000000002fddd6913c4593a1640a497aa4321dd67c7c54e1f3f468d3c1539d15c01717d95776ca69929b222773293fe9cabf49fcf4a36cce0d6ebadffa87e304d818bd19260b9d21d40753148d9a032d1d4ebc48a4ac55edeb", @ANYRES16=r1, @ANYBLOB="0303000000020000000003000000"], 0x14}}, 0x0) 14:36:43 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf5ffffff) [ 192.476858][T14664] FAULT_INJECTION: forcing a failure. [ 192.476858][T14664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.489953][T14664] CPU: 1 PID: 14664 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 192.498808][T14664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.508868][T14664] Call Trace: [ 192.512189][T14664] dump_stack_lvl+0xb7/0x103 [ 192.516779][T14664] dump_stack+0x11/0x1a [ 192.520937][T14664] should_fail+0x23c/0x250 14:36:43 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xfeffffff00000000) [ 192.525365][T14664] should_fail_usercopy+0x16/0x20 [ 192.530390][T14664] _copy_from_user+0x1c/0xd0 [ 192.534973][T14664] do_recvmmsg+0x250/0x9f0 [ 192.539399][T14664] ? fsnotify_perm+0x59/0x2e0 [ 192.544071][T14664] ? __fsnotify_parent+0x32f/0x430 [ 192.549181][T14664] ? __fget_light+0x21b/0x260 [ 192.553872][T14664] ? __cond_resched+0x11/0x40 [ 192.558612][T14664] __x64_sys_recvmmsg+0xcf/0x150 [ 192.563562][T14664] ? exit_to_user_mode_prepare+0x65/0x190 [ 192.569314][T14664] do_syscall_64+0x3d/0x90 [ 192.573731][T14664] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 192.579624][T14664] RIP: 0033:0x4665e9 [ 192.583518][T14664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 192.603662][T14664] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 192.612104][T14664] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x284d5}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) [ 192.620070][T14664] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 192.628398][T14664] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 192.636361][T14664] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 192.645368][T14664] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:43 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xb638000000000000) 14:36:43 executing program 3 (fault-call:4 fault-nth:55): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 192.814918][T14685] FAULT_INJECTION: forcing a failure. [ 192.814918][T14685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.827999][T14685] CPU: 1 PID: 14685 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 192.836775][T14685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.846926][T14685] Call Trace: [ 192.850256][T14685] dump_stack_lvl+0xb7/0x103 [ 192.854846][T14685] dump_stack+0x11/0x1a [ 192.859003][T14685] should_fail+0x23c/0x250 [ 192.863416][T14685] should_fail_usercopy+0x16/0x20 [ 192.868460][T14685] _copy_from_user+0x1c/0xd0 [ 192.873048][T14685] do_recvmmsg+0x250/0x9f0 [ 192.877528][T14685] ? fsnotify_perm+0x59/0x2e0 [ 192.882208][T14685] ? __fsnotify_parent+0x32f/0x430 [ 192.887320][T14685] ? __fget_light+0x21b/0x260 [ 192.891997][T14685] ? __cond_resched+0x11/0x40 [ 192.896686][T14685] __x64_sys_recvmmsg+0xcf/0x150 [ 192.901661][T14685] ? exit_to_user_mode_prepare+0x65/0x190 [ 192.907387][T14685] do_syscall_64+0x3d/0x90 [ 192.911884][T14685] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 192.917836][T14685] RIP: 0033:0x4665e9 [ 192.921727][T14685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 192.941421][T14685] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 192.949930][T14685] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:43 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xfdffffff) [ 192.957902][T14685] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 192.965975][T14685] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 192.974044][T14685] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 192.982017][T14685] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:43 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xff0f000000000000) 14:36:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r3, 0x1, 0x0, 0xffffffff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r2) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x40, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7e}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x5}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x850) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x820, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20000884) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xfffffffffffffdf3, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r7, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x42}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x404c840}, 0x8000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x34, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c021}, 0x240000c0) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:43 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x204) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:43 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xd7ff000000000000) 14:36:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="03030000a3a84cb3edb30766cc665e495dffed54b96336107721dd9b5f50f31bb4fbba039d7e482b45f500"/55], 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) 14:36:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r0) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x68, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '#\x00'}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, ',\\\'!*:#\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}]}, 0x68}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x10, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="df1905e00993f86562cbc791af38fb1bda67ab587b0435f7a6b1b35115098e38fdd0c0472dcca3dbbb5866cbc0888906672d9a4ca951621a95937141c5c4679ba3ca50ab16acc0553df029981cd02da0", @ANYRES16=r3, @ANYBLOB="0303000000000000000003000000"], 0x14}}, 0x0) 14:36:44 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xfeffffff) 14:36:44 executing program 3 (fault-call:4 fault-nth:56): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x20008840) 14:36:44 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xffffffff00000000) [ 193.450635][T14719] FAULT_INJECTION: forcing a failure. [ 193.450635][T14719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.463859][T14719] CPU: 0 PID: 14719 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 193.472659][T14719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.482705][T14719] Call Trace: [ 193.485977][T14719] dump_stack_lvl+0xb7/0x103 [ 193.490563][T14719] dump_stack+0x11/0x1a [ 193.494755][T14719] should_fail+0x23c/0x250 [ 193.499169][T14719] should_fail_usercopy+0x16/0x20 [ 193.504203][T14719] _copy_from_user+0x1c/0xd0 [ 193.508788][T14719] do_recvmmsg+0x250/0x9f0 [ 193.513202][T14719] ? fsnotify_perm+0x59/0x2e0 [ 193.517872][T14719] ? __fsnotify_parent+0x32f/0x430 [ 193.522978][T14719] ? __fget_light+0x21b/0x260 [ 193.527693][T14719] ? __cond_resched+0x11/0x40 [ 193.532372][T14719] __x64_sys_recvmmsg+0xcf/0x150 [ 193.537388][T14719] ? exit_to_user_mode_prepare+0x65/0x190 [ 193.543125][T14719] do_syscall_64+0x3d/0x90 [ 193.547537][T14719] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 193.553431][T14719] RIP: 0033:0x4665e9 [ 193.557311][T14719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 193.576942][T14719] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 193.585352][T14719] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 193.593368][T14719] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 14:36:44 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xd7ffffff00000000) 14:36:44 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x20c) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 193.601337][T14719] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 193.609309][T14719] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 193.617279][T14719] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r4) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r6, @ANYBLOB="04002cbd7000ffdbdf25010000000800010003000000080001000300000008040000020000000c0062a0ee138fad6162aa1b71ea7a9a09ed88cd085a0480050003000200000000000100030000002c000480050003000200000005000300060000631a0005000300010000000500030006000000050003000200000014000480050003000600000005d66f2723000000680008801c000780080006008c00000008000500d86ec61f08000500fa2c75033c000780080005001959b86d08000500a7fb951408000500a84abc17080006006b00e5ff07000600300000000c00078008000600940020000800020001000000525807541b9e11fb55e234dc639a4beae18ac9514323924736df8673cce8ac812587281367b9ece3dfe15f45db1f253e86f988b880fc33dc42bfcbd49883369d1825a7317488d371771675a63ecfcd078134018e13d8d61c1ec3cb7ad363e3ece83d5b782fc28da498528080c97eac0f096c222a748a976b4fccd669a2c1e176feffeee97fffb2b95b78fb68"], 0xf0}, 0x1, 0x0, 0x0, 0x20004883}, 0x4000000) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="02002bbd7000fbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4048041) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1e000200fffaa1894acf042ef7ecb9a6da5f01d36a7dd7c5e8166afb66f2e5d0970d4d1f48d1a431daaab4fe8499cc415a5110f4fc13dbab479b1f192a0f097dc9ca63657c38a462a857bb51afebace408ae98b3c4077be50679fb530c40af1c11", @ANYRES16=r1, @ANYRESOCT=r1], 0x14}, 0x1, 0x0, 0x0, 0x4000090}, 0x818) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44001}, 0x40) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000200)={'wpan4\x00'}) 14:36:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="069275ff", @ANYRES16=r1, @ANYBLOB="0303000000000000000003000000"], 0x14}}, 0x0) 14:36:44 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xff0f0000) 14:36:44 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000148000/0x2000)=nil, 0x2000, 0x1000000, 0x100010, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x4007, @fd=r0, 0x7, 0x3, 0x80000000, 0x10, 0x1, {0x3}}, 0x7f) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:36:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x58}, 0x1, 0x0, 0x0, 0x440d4}, 0x8004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:44 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xe803000000000000) 14:36:44 executing program 3 (fault-call:4 fault-nth:57): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\t', @ANYRES16=r1, @ANYBLOB="0303000000000000000003000000"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24028050}, 0x800) [ 194.087418][T14763] FAULT_INJECTION: forcing a failure. [ 194.087418][T14763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.100590][T14763] CPU: 0 PID: 14763 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 194.109436][T14763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.119481][T14763] Call Trace: [ 194.122752][T14763] dump_stack_lvl+0xb7/0x103 [ 194.127358][T14763] dump_stack+0x11/0x1a [ 194.131503][T14763] should_fail+0x23c/0x250 [ 194.135917][T14763] should_fail_usercopy+0x16/0x20 [ 194.140936][T14763] _copy_from_user+0x1c/0xd0 [ 194.145526][T14763] do_recvmmsg+0x250/0x9f0 [ 194.149944][T14763] ? fsnotify_perm+0x59/0x2e0 [ 194.154665][T14763] ? __fsnotify_parent+0x32f/0x430 [ 194.159773][T14763] ? __fget_light+0x21b/0x260 [ 194.164447][T14763] ? __cond_resched+0x11/0x40 [ 194.169122][T14763] __x64_sys_recvmmsg+0xcf/0x150 [ 194.174073][T14763] ? exit_to_user_mode_prepare+0x65/0x190 [ 194.179799][T14763] do_syscall_64+0x3d/0x90 [ 194.184225][T14763] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 194.190115][T14763] RIP: 0033:0x4665e9 [ 194.194002][T14763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 194.213604][T14763] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 194.222016][T14763] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 194.230125][T14763] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 14:36:44 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf401000000000000) 14:36:44 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x218) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x68, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x68}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r0) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r7, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xf0f29fe2a6a7f6cc) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x800, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x60011) 14:36:44 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 194.238116][T14763] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 194.246084][T14763] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 194.254195][T14763] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:44 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xffffff91) 14:36:45 executing program 3 (fault-call:4 fault-nth:58): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 194.405466][T14787] FAULT_INJECTION: forcing a failure. [ 194.405466][T14787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.418530][T14787] CPU: 1 PID: 14787 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 194.427290][T14787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.437429][T14787] Call Trace: [ 194.440748][T14787] dump_stack_lvl+0xb7/0x103 [ 194.445340][T14787] dump_stack+0x11/0x1a [ 194.449586][T14787] should_fail+0x23c/0x250 [ 194.454006][T14787] should_fail_usercopy+0x16/0x20 [ 194.459064][T14787] _copy_from_user+0x1c/0xd0 [ 194.463696][T14787] do_recvmmsg+0x250/0x9f0 [ 194.468195][T14787] ? fsnotify_perm+0x59/0x2e0 [ 194.472873][T14787] ? __fsnotify_parent+0x32f/0x430 [ 194.477979][T14787] ? __fget_light+0x21b/0x260 [ 194.482657][T14787] ? __cond_resched+0x11/0x40 [ 194.487336][T14787] __x64_sys_recvmmsg+0xcf/0x150 [ 194.492348][T14787] ? exit_to_user_mode_prepare+0x65/0x190 [ 194.498101][T14787] do_syscall_64+0x3d/0x90 [ 194.502523][T14787] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 194.508488][T14787] RIP: 0033:0x4665e9 [ 194.512370][T14787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 194.531970][T14787] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 194.540406][T14787] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 194.548438][T14787] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 194.556405][T14787] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 194.564372][T14787] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 194.572340][T14787] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:45 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf57c8a7200000000) 14:36:45 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xffffffd7) 14:36:45 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x241) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:45 executing program 3 (fault-call:4 fault-nth:59): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:45 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r6, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) r7 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r7, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r7, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r7, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r8 = io_uring_setup(0xe9a, &(0x7f0000000100)) r9 = syz_io_uring_setup(0x2fb4, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x8, 0x1000000, r10) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x7) [ 195.075141][T14808] FAULT_INJECTION: forcing a failure. [ 195.075141][T14808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.088207][T14808] CPU: 0 PID: 14808 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 195.096972][T14808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.107115][T14808] Call Trace: [ 195.110386][T14808] dump_stack_lvl+0xb7/0x103 [ 195.115051][T14808] dump_stack+0x11/0x1a [ 195.119270][T14808] should_fail+0x23c/0x250 [ 195.123690][T14808] should_fail_usercopy+0x16/0x20 [ 195.128791][T14808] _copy_from_user+0x1c/0xd0 [ 195.133386][T14808] do_recvmmsg+0x250/0x9f0 [ 195.137809][T14808] ? fsnotify_perm+0x59/0x2e0 [ 195.142513][T14808] ? __fsnotify_parent+0x32f/0x430 [ 195.147646][T14808] ? __fget_light+0x21b/0x260 [ 195.152388][T14808] ? __cond_resched+0x11/0x40 [ 195.157115][T14808] __x64_sys_recvmmsg+0xcf/0x150 [ 195.162088][T14808] ? exit_to_user_mode_prepare+0x65/0x190 [ 195.167858][T14808] do_syscall_64+0x3d/0x90 [ 195.172272][T14808] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 195.178167][T14808] RIP: 0033:0x4665e9 [ 195.182053][T14808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 195.201745][T14808] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 195.210171][T14808] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:45 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xfffffff5) [ 195.218141][T14808] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 195.226149][T14808] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 195.234281][T14808] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 195.242244][T14808] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:46 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f000099d000/0x1000)=nil, 0x1000, 0x200000b, 0x4000010, r0, 0x0) r4 = io_uring_setup(0xe9a, &(0x7f0000000100)) io_uring_enter(r0, 0x67d9, 0x83b5, 0x1, &(0x7f0000000500)={[0xd69a]}, 0x8) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x27ca8000) r5 = syz_io_uring_setup(0x2fb4, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x8, 0x1000000, r6) syz_io_uring_submit(r3, 0x0, &(0x7f00000004c0)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd=r0, 0xca48, 0x0, 0x1, 0x0, 0x0, {0x0, r6}}, 0x6f) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r7, r8, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r9, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) syz_io_uring_complete(r7) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) r11 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r11, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c0000000101000000000000000000000600000428000d8008000100ac1e01011400040000000000000000000000000108000200e000000208000c4000000003200016400000011b0000000700000003000008000000000100000054000010000800154000000001"], 0x6c}, 0x1, 0x0, 0x0, 0x804}, 0x20004014) 14:36:46 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf5ffffff00000000) 14:36:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001700e1fd35be0beb15bf303704"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r4, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x40, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7e}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x5}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x850) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fddbdf2520000000140022800500040000000000050001000400000008000300", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x814) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0x4c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048084}, 0x4000000) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES16=r2, @ANYRES16=r1, @ANYBLOB="060000a80061938fde3b0e000000"], 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x148c1) [ 195.488249][T14827] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 14:36:46 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xfffffffd) [ 195.582704][T14827] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 14:36:46 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x88800, 0x0) r1 = accept4$packet(r0, 0x0, &(0x7f0000000180), 0x80000) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000001c0)) r2 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x6558, r3, 0x1, 0x0, 0x6, @random="1402c4dabdae"}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@mcast1, 0x41, r3}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r5, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r7 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r7, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r7, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r7, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000140)={0x3, 'bond0\x00', {0x6}, 0xb94e}) 14:36:46 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x300) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:46 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = io_uring_setup(0xe9a, &(0x7f0000000100)) r5 = syz_io_uring_setup(0x2fb4, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x8, 0x1000000, r6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x6, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r6}}, 0x81) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:36:46 executing program 3 (fault-call:4 fault-nth:60): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 195.717846][T14852] FAULT_INJECTION: forcing a failure. [ 195.717846][T14852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.730923][T14852] CPU: 1 PID: 14852 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 195.739693][T14852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.749737][T14852] Call Trace: [ 195.753007][T14852] dump_stack_lvl+0xb7/0x103 [ 195.757593][T14852] dump_stack+0x11/0x1a [ 195.761744][T14852] should_fail+0x23c/0x250 14:36:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0303c78355ea0000c16b0162f537"], 0x14}}, 0x0) [ 195.766173][T14852] should_fail_usercopy+0x16/0x20 [ 195.771198][T14852] _copy_from_user+0x1c/0xd0 [ 195.775777][T14852] do_recvmmsg+0x250/0x9f0 [ 195.780193][T14852] ? fsnotify_perm+0x59/0x2e0 [ 195.784865][T14852] ? __fsnotify_parent+0x32f/0x430 [ 195.790003][T14852] ? __fget_light+0x21b/0x260 [ 195.794684][T14852] ? __cond_resched+0x11/0x40 [ 195.799421][T14852] __x64_sys_recvmmsg+0xcf/0x150 [ 195.804445][T14852] ? exit_to_user_mode_prepare+0x65/0x190 [ 195.810165][T14852] do_syscall_64+0x3d/0x90 14:36:46 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 195.814585][T14852] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 195.820479][T14852] RIP: 0033:0x4665e9 [ 195.824365][T14852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 195.843972][T14852] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 195.852383][T14852] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 195.860413][T14852] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 14:36:46 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xfeffffff00000000) 14:36:46 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xfffffffe) [ 195.868411][T14852] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 195.876379][T14852] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 195.884349][T14852] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x303, 0x0, 0x80000, {0x3}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x1c}}, 0x0) 14:36:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b000000", @ANYRES16=r1, @ANYBLOB="0303000000000000000003000000"], 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r3) sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0xc00, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040011) 14:36:46 executing program 3 (fault-call:4 fault-nth:61): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 196.097628][T14880] FAULT_INJECTION: forcing a failure. [ 196.097628][T14880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.110701][T14880] CPU: 1 PID: 14880 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 196.119539][T14880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.130020][T14880] Call Trace: [ 196.133291][T14880] dump_stack_lvl+0xb7/0x103 [ 196.137934][T14880] dump_stack+0x11/0x1a [ 196.142084][T14880] should_fail+0x23c/0x250 [ 196.146574][T14880] should_fail_usercopy+0x16/0x20 [ 196.151601][T14880] _copy_from_user+0x1c/0xd0 [ 196.156245][T14880] do_recvmmsg+0x250/0x9f0 [ 196.160685][T14880] ? fsnotify_perm+0x59/0x2e0 [ 196.165363][T14880] ? __fsnotify_parent+0x32f/0x430 [ 196.170480][T14880] ? __fget_light+0x21b/0x260 [ 196.175191][T14880] ? __cond_resched+0x11/0x40 [ 196.179873][T14880] __x64_sys_recvmmsg+0xcf/0x150 [ 196.184812][T14880] ? exit_to_user_mode_prepare+0x65/0x190 [ 196.190539][T14880] do_syscall_64+0x3d/0x90 14:36:46 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) io_uring_enter(r0, 0x78e5, 0xfc7a, 0x2, &(0x7f0000000000)={[0x4]}, 0x8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 196.195035][T14880] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 196.200940][T14880] RIP: 0033:0x4665e9 [ 196.204843][T14880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 196.224549][T14880] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 196.233025][T14880] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, r4, 0x500, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1d}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x38}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x68, 0x0, 0x71f, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2620}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6902e1fe}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d45c22d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60cd6c47}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc05d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f7124d2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4daf090}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd719}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x81}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x45}, 0x4040080) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, r1, 0x20, 0x0, 0x2, {0x3}, [@NLBL_MGMT_A_DOMAIN={0x8, 0x1, '[&.\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048060}, 0x0) [ 196.241094][T14880] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 196.249065][T14880] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 196.257200][T14880] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 196.265170][T14880] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:47 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x3e8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:47 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x17d6c6974e) 14:36:47 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000000, 0x12, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x74, &(0x7f0000000200)=@in={0x2, 0x4e21, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:36:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0xd}}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '{^\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x24000000) 14:36:47 executing program 3 (fault-call:4 fault-nth:62): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:47 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xff0f000000000000) 14:36:47 executing program 2: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) mmap(&(0x7f00006ff000/0x2000)=nil, 0x2000, 0x1000008, 0x10, 0xffffffffffffffff, 0x742a1000) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000002c0)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/3, 0x3}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x73, &(0x7f0000000140)="f43970da7cfeb6d42fd54103666c5762306aa6000000006e59b65fa78fb184da00ecabbd4ef80a61cf7d92b17a04000000c54f4a36f76525d81ce5c3d04065b24f71b846e84785185abde7d01894a79025a799ce0761bdf0c91d32be313b558a8b5a3ae6a250d7123b2ae06d6c81dd27072844"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) [ 196.420319][T14903] FAULT_INJECTION: forcing a failure. [ 196.420319][T14903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.433394][T14903] CPU: 1 PID: 14903 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 196.442161][T14903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.452208][T14903] Call Trace: [ 196.455484][T14903] dump_stack_lvl+0xb7/0x103 [ 196.460074][T14903] dump_stack+0x11/0x1a [ 196.464271][T14903] should_fail+0x23c/0x250 [ 196.468713][T14903] should_fail_usercopy+0x16/0x20 [ 196.473780][T14903] _copy_from_user+0x1c/0xd0 [ 196.478363][T14903] do_recvmmsg+0x250/0x9f0 [ 196.482782][T14903] ? fsnotify_perm+0x59/0x2e0 [ 196.487534][T14903] ? __fsnotify_parent+0x32f/0x430 [ 196.492713][T14903] ? __fget_light+0x21b/0x260 [ 196.497383][T14903] ? __cond_resched+0x11/0x40 [ 196.502059][T14903] __x64_sys_recvmmsg+0xcf/0x150 [ 196.507035][T14903] ? exit_to_user_mode_prepare+0x65/0x190 [ 196.512812][T14903] do_syscall_64+0x3d/0x90 [ 196.517224][T14903] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 196.523156][T14903] RIP: 0033:0x4665e9 [ 196.527043][T14903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 196.547089][T14903] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 196.555497][T14903] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:47 executing program 3 (fault-call:4 fault-nth:63): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 196.563473][T14903] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 196.571431][T14903] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 196.579425][T14903] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 196.587394][T14903] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:47 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r5, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) r6 = io_uring_setup(0xe9a, &(0x7f0000000100)) r7 = syz_io_uring_setup(0x2fb4, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x8, 0x1000000, r8) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, r8}}, 0x40) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 196.650275][T14917] FAULT_INJECTION: forcing a failure. [ 196.650275][T14917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.663364][T14917] CPU: 1 PID: 14917 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 196.672132][T14917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 196.682184][T14917] Call Trace: [ 196.685459][T14917] dump_stack_lvl+0xb7/0x103 [ 196.690115][T14917] dump_stack+0x11/0x1a [ 196.694265][T14917] should_fail+0x23c/0x250 [ 196.698686][T14917] should_fail_usercopy+0x16/0x20 [ 196.703720][T14917] _copy_from_user+0x1c/0xd0 [ 196.708316][T14917] do_recvmmsg+0x250/0x9f0 [ 196.712730][T14917] ? fsnotify_perm+0x59/0x2e0 [ 196.717434][T14917] ? __fsnotify_parent+0x32f/0x430 [ 196.722582][T14917] ? __fget_light+0x21b/0x260 [ 196.727254][T14917] ? __cond_resched+0x11/0x40 [ 196.731931][T14917] __x64_sys_recvmmsg+0xcf/0x150 [ 196.736906][T14917] ? exit_to_user_mode_prepare+0x65/0x190 [ 196.742627][T14917] do_syscall_64+0x3d/0x90 [ 196.747123][T14917] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 196.753089][T14917] RIP: 0033:0x4665e9 [ 196.756973][T14917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 196.776618][T14917] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 196.785084][T14917] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 196.793050][T14917] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 14:36:47 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x402) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 196.801057][T14917] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 196.809046][T14917] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 196.817092][T14917] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:47 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000000000000) 14:36:47 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xffffffff00000000) 14:36:47 executing program 3 (fault-call:4 fault-nth:64): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 197.082363][T14937] FAULT_INJECTION: forcing a failure. [ 197.082363][T14937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.095450][T14937] CPU: 0 PID: 14937 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 197.104206][T14937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.114249][T14937] Call Trace: [ 197.117526][T14937] dump_stack_lvl+0xb7/0x103 [ 197.122119][T14937] dump_stack+0x11/0x1a [ 197.126282][T14937] should_fail+0x23c/0x250 [ 197.130778][T14937] should_fail_usercopy+0x16/0x20 [ 197.135823][T14937] _copy_from_user+0x1c/0xd0 [ 197.140427][T14937] do_recvmmsg+0x250/0x9f0 [ 197.144894][T14937] ? fsnotify_perm+0x59/0x2e0 [ 197.149573][T14937] ? __fsnotify_parent+0x32f/0x430 [ 197.154675][T14937] ? __fget_light+0x21b/0x260 [ 197.159347][T14937] ? __cond_resched+0x11/0x40 [ 197.164093][T14937] __x64_sys_recvmmsg+0xcf/0x150 [ 197.169030][T14937] ? exit_to_user_mode_prepare+0x65/0x190 [ 197.174793][T14937] do_syscall_64+0x3d/0x90 [ 197.179278][T14937] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 197.185191][T14937] RIP: 0033:0x4665e9 [ 197.189074][T14937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 197.208778][T14937] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 197.217214][T14937] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 197.225198][T14937] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 14:36:47 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x7795, &(0x7f0000000000)={0x0, 0xbc09, 0x10, 0x4, 0x2319}, &(0x7f0000fff000/0x1000)=nil, &(0x7f00008e1000/0x3000)=nil, &(0x7f0000001840)=0x0, &(0x7f0000001800)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000017c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x6000, @fd, 0x6, &(0x7f0000001740)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="39b35b6710610304a417655174db4edcf925103ce24c727b26cf96f3ccb54d8493436231bc9d181f2631fd0938791233d3c4b7ef70464bc3fcedd10aeebe79349664ce9b5408da144ce7e51996876cd11e07ba906c", 0x55}, {&(0x7f0000001500)="abfa429b460ef8ab6f467d8a1c8f64f20baca0b976132506416ac3048a360e1c7b9d21f8970dad310dac5641708caf26b4fea742124fad0e81e6f0545754c7bc013154e861e64956407208837bda76a8dbe9b8cc72a8af8261f0b85d77f91df97282ea44caadbf6df8277543cce1424b21a13682dbb3ce5cd23355b5f3342b90898403b3e90de59df8e883fdf936b4a18037bf3ce4c866ad3e3d37475d4a6098ea24618f3c2fa500529d5a95a2eac6459fed33c14f8c3321494eeef69c297f0440e81173496e6da3b282c812997f1c", 0xcf}, {&(0x7f0000001600)="ca18", 0x2}, {&(0x7f0000001640)="e06f5ba334fc710d5e0ec7a4ddcd15ac486e7e93ed41a42f7e83a5899d8645c8fadd7ce1eef450db9ad281bdd86aea91d77d80d105aeb197cf126cedcf20448ffe7b491d7365f4a15ceaaf9aecabb5b6ddce77796c5c287ef5dcb480e53931f4fa4464f6aaf63288c5b31373ef1b886fae517d9a512036459cf7d5dc8e6e802aa44a91fb84f2da177615198437ecdca0df6d1d1b379fb13dcca53af6420594aa304ea72467a53cd3d11733008eacdba5bc333f2da13d2c180abafe9b8786b599df0c423b552e06e4e3dce0819280a80befc0ca1621715c6a37d1fb7708403893a7963d52d462150e376aac527a1149f87ff3251ff0fb46ab63037c35dfc6", 0xfe}], 0x5, 0x11, 0x1, {0x0, r5}}, 0x1000) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r6, r7, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r8, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x4000, @fd_index=0x8, 0x20, 0x7a0b, 0x20a5, 0x6, 0x0, {0x2}}, 0x0) r9 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r9, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r9, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r9, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r9, &(0x7f0000006040)=[{{0x0, 0xfffffffffffffec8, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_mreqsrc(r9, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @private=0xa010102, @loopback}, 0xc) syz_io_uring_submit(r4, r7, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x7, 0x1, &(0x7f0000000180)="0fd5ffa6a98ddb9e0349b6d7ea2fb6b289f9508dd11b786483715334633d73f9d0a025b9089f031662a36c794f8fafd519f7445554fb5a2d77ab34853f2a3fd59730a351843e614421d379ae9901e246b05b90f779379d01388bffc09a82ab0ca1f12bac25bac8d31b", 0x7fffffff}, 0x101b) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:36:47 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x406) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 197.233182][T14937] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 197.241228][T14937] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 197.249196][T14937] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:47 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4000000000000) 14:36:47 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) syz_io_uring_setup(0x4eea, &(0x7f0000000040)={0x0, 0x6c45, 0x4, 0x0, 0x3d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) 14:36:48 executing program 3 (fault-call:4 fault-nth:65): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 197.372782][T14954] FAULT_INJECTION: forcing a failure. [ 197.372782][T14954] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 197.386060][T14954] CPU: 0 PID: 14954 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 197.394827][T14954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.404876][T14954] Call Trace: [ 197.408147][T14954] dump_stack_lvl+0xb7/0x103 [ 197.412736][T14954] dump_stack+0x11/0x1a [ 197.416886][T14954] should_fail+0x23c/0x250 [ 197.421312][T14954] __alloc_pages+0x102/0x320 [ 197.425982][T14954] alloc_pages_vma+0x513/0x680 [ 197.430742][T14954] ? page_add_new_anon_rmap+0x26d/0x2c0 [ 197.436390][T14954] wp_page_copy+0x121/0x10c0 [ 197.440979][T14954] do_wp_page+0x5a8/0xba0 [ 197.445357][T14954] handle_mm_fault+0xb11/0x1a50 [ 197.450308][T14954] ? __skb_try_recv_from_queue+0x3d0/0x430 [ 197.456118][T14954] do_user_addr_fault+0x609/0xbe0 [ 197.461134][T14954] exc_page_fault+0x91/0x220 [ 197.465774][T14954] asm_exc_page_fault+0x1e/0x30 [ 197.470632][T14954] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 197.476375][T14954] Code: 00 00 48 39 d9 73 54 0f 1f 00 66 89 01 31 c9 0f 1f 00 c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 1f 00 <89> 01 31 c9 0f 1f 00 c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 197.495977][T14954] RSP: 0018:ffffc9000192fc00 EFLAGS: 00010202 [ 197.502041][T14954] RAX: 0000000000000020 RBX: 0000000020007030 RCX: 0000000020007030 [ 197.510004][T14954] RDX: 0001c9000192fdb8 RSI: 0000000000000022 RDI: ffffc9000192fdb8 [ 197.517967][T14954] RBP: ffffc9000192fdb8 R08: 0000000000000000 R09: 0001c9000192fdbb [ 197.525927][T14954] R10: 0001ffffffffffff R11: 0000000000000000 R12: 0000000000000022 [ 197.533888][T14954] R13: 0000000000000014 R14: 0000000000000022 R15: 000000000000003f [ 197.541925][T14954] ____sys_recvmsg+0x201/0x310 [ 197.547191][T14954] ? import_iovec+0x69/0x80 [ 197.551703][T14954] do_recvmmsg+0x35c/0x9f0 [ 197.556133][T14954] ? fsnotify_perm+0x59/0x2e0 [ 197.560833][T14954] ? __fsnotify_parent+0x32f/0x430 [ 197.566039][T14954] ? __fget_light+0x21b/0x260 [ 197.570710][T14954] ? __cond_resched+0x11/0x40 [ 197.575437][T14954] __x64_sys_recvmmsg+0xcf/0x150 [ 197.580401][T14954] ? exit_to_user_mode_prepare+0x65/0x190 [ 197.586124][T14954] do_syscall_64+0x3d/0x90 [ 197.590605][T14954] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 197.596500][T14954] RIP: 0033:0x4665e9 [ 197.600383][T14954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 197.620040][T14954] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 197.628465][T14954] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 197.636470][T14954] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 197.644438][T14954] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 197.652426][T14954] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 197.660394][T14954] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r4, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40084}, 0x4004050) 14:36:50 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x5000000000000) 14:36:50 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x1c) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x6dd0, &(0x7f00000002c0)={0x0, 0x9cba, 0x0, 0x0, 0xfffffffc, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) sendfile(r0, r0, 0x0, 0x6) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private=0x40}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r5, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) mmap(&(0x7f00003df000/0x1000)=nil, 0x1000, 0x100000c, 0x30, 0xffffffffffffffff, 0xf5224000) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r5, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}, 0x101}], 0x4b, 0x0, 0x0) fchdir(r5) io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:36:50 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x500) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:50 executing program 3 (fault-call:4 fault-nth:66): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:50 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = io_uring_setup(0xf9a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffe}) r4 = syz_io_uring_setup(0x2fb4, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x8, 0x1000000, r5) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0xffff) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:36:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x25dfdbfb, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) [ 199.491263][T14973] FAULT_INJECTION: forcing a failure. [ 199.491263][T14973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.504396][T14973] CPU: 1 PID: 14973 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 199.513154][T14973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.523210][T14973] Call Trace: [ 199.526480][T14973] dump_stack_lvl+0xb7/0x103 [ 199.531075][T14973] dump_stack+0x11/0x1a [ 199.535231][T14973] should_fail+0x23c/0x250 14:36:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x28, r2, 0x303, 0x0, 0x0, {0x3}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x10) [ 199.539717][T14973] should_fail_usercopy+0x16/0x20 [ 199.544870][T14973] _copy_from_user+0x1c/0xd0 [ 199.549461][T14973] do_recvmmsg+0x250/0x9f0 [ 199.553878][T14973] ? fsnotify_perm+0x59/0x2e0 [ 199.558562][T14973] ? __fsnotify_parent+0x32f/0x430 [ 199.563688][T14973] ? __fget_light+0x21b/0x260 [ 199.568353][T14973] ? __cond_resched+0x11/0x40 [ 199.573057][T14973] __x64_sys_recvmmsg+0xcf/0x150 [ 199.578065][T14973] ? exit_to_user_mode_prepare+0x65/0x190 [ 199.583870][T14973] do_syscall_64+0x3d/0x90 [ 199.588288][T14973] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 199.594198][T14973] RIP: 0033:0x4665e9 [ 199.598120][T14973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 199.617760][T14973] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 199.626164][T14973] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 199.634155][T14973] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 14:36:50 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x100000000000000) 14:36:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) [ 199.642122][T14973] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 199.650088][T14973] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 199.658083][T14973] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:50 executing program 3 (fault-call:4 fault-nth:67): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 199.731166][T14991] FAULT_INJECTION: forcing a failure. [ 199.731166][T14991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.744241][T14991] CPU: 1 PID: 14991 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 199.753015][T14991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.763121][T14991] Call Trace: [ 199.766392][T14991] dump_stack_lvl+0xb7/0x103 [ 199.770998][T14991] dump_stack+0x11/0x1a [ 199.775221][T14991] should_fail+0x23c/0x250 [ 199.779686][T14991] should_fail_usercopy+0x16/0x20 [ 199.784714][T14991] _copy_from_user+0x1c/0xd0 [ 199.789295][T14991] do_recvmmsg+0x250/0x9f0 [ 199.793714][T14991] ? fsnotify_perm+0x59/0x2e0 [ 199.798449][T14991] ? __fsnotify_parent+0x32f/0x430 [ 199.803551][T14991] ? __fget_light+0x21b/0x260 [ 199.808222][T14991] ? __cond_resched+0x11/0x40 [ 199.812939][T14991] __x64_sys_recvmmsg+0xcf/0x150 [ 199.817940][T14991] ? exit_to_user_mode_prepare+0x65/0x190 [ 199.823661][T14991] do_syscall_64+0x3d/0x90 [ 199.828167][T14991] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 199.834060][T14991] RIP: 0033:0x4665e9 [ 199.837957][T14991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 199.857565][T14991] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 199.865974][T14991] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:50 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r5, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) r6 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r6, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r6, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r6, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r6, &(0x7f0000000380)=0x80, &(0x7f0000000040)=@isdn}, 0x216) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@broadcast, @dev={0xac, 0x14, 0x14, 0x31}}, 0x8) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 199.873937][T14991] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 199.882083][T14991] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 199.890054][T14991] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 199.898026][T14991] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:50 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r6, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r7, r8, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r9, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000149000/0x4000)=nil, 0x4000, 0xc}, 0xa) 14:36:50 executing program 3 (fault-call:4 fault-nth:68): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 200.003724][T15009] FAULT_INJECTION: forcing a failure. [ 200.003724][T15009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.016804][T15009] CPU: 1 PID: 15009 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 200.025565][T15009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.035646][T15009] Call Trace: [ 200.038925][T15009] dump_stack_lvl+0xb7/0x103 [ 200.043563][T15009] dump_stack+0x11/0x1a [ 200.047746][T15009] should_fail+0x23c/0x250 [ 200.052193][T15009] should_fail_usercopy+0x16/0x20 [ 200.057268][T15009] _copy_from_user+0x1c/0xd0 [ 200.061864][T15009] do_recvmmsg+0x250/0x9f0 [ 200.066297][T15009] ? fsnotify_perm+0x59/0x2e0 [ 200.070980][T15009] ? __fsnotify_parent+0x32f/0x430 [ 200.076098][T15009] ? __fget_light+0x21b/0x260 [ 200.080779][T15009] ? __cond_resched+0x11/0x40 [ 200.085457][T15009] __x64_sys_recvmmsg+0xcf/0x150 [ 200.090495][T15009] ? exit_to_user_mode_prepare+0x65/0x190 [ 200.096237][T15009] do_syscall_64+0x3d/0x90 [ 200.100710][T15009] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 200.106728][T15009] RIP: 0033:0x4665e9 [ 200.110615][T15009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 200.130268][T15009] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 200.138682][T15009] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 200.146758][T15009] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 200.154725][T15009] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 200.162696][T15009] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 200.170663][T15009] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:51 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x10001, 0x0, 0x12}, 0x18) io_uring_enter(r3, 0xcb, 0x5280, 0x2, &(0x7f0000000080)={[0x1]}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x4}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@ipx={0x4, 0x8, 0x1f, "a5af8c68f16b", 0x7}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:36:51 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x200000000000000) 14:36:51 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x604) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:51 executing program 3 (fault-call:4 fault-nth:69): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 200.476293][T15026] FAULT_INJECTION: forcing a failure. [ 200.476293][T15026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.489430][T15026] CPU: 0 PID: 15026 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 200.498219][T15026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.508270][T15026] Call Trace: [ 200.511545][T15026] dump_stack_lvl+0xb7/0x103 [ 200.516138][T15026] dump_stack+0x11/0x1a [ 200.520304][T15026] should_fail+0x23c/0x250 [ 200.524805][T15026] should_fail_usercopy+0x16/0x20 [ 200.529838][T15026] _copy_from_user+0x1c/0xd0 [ 200.534450][T15026] do_recvmmsg+0x250/0x9f0 [ 200.539101][T15026] ? fsnotify_perm+0x59/0x2e0 [ 200.543775][T15026] ? __fsnotify_parent+0x32f/0x430 [ 200.548975][T15026] ? __fget_light+0x21b/0x260 [ 200.553648][T15026] ? __cond_resched+0x11/0x40 [ 200.558396][T15026] __x64_sys_recvmmsg+0xcf/0x150 [ 200.563337][T15026] ? exit_to_user_mode_prepare+0x65/0x190 [ 200.569061][T15026] do_syscall_64+0x3d/0x90 [ 200.573542][T15026] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 200.579460][T15026] RIP: 0033:0x4665e9 [ 200.583349][T15026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 200.602952][T15026] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 200.611383][T15026] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:51 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000000)=r4, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 200.619389][T15026] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 200.627353][T15026] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 200.635319][T15026] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 200.643286][T15026] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20000, 0x180) r1 = syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, r0}, &(0x7f0000000000/0xc00000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000082000/0x2000)=nil, 0x2000, 0x2, 0x110, r4, 0xea70000) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x45f5, 0x165b, 0x5, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x6109, 0x10, 0x3, 0x196, 0x0, r1}, &(0x7f0000a66000/0x3000)=nil, &(0x7f0000937000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) r6 = mmap$IORING_OFF_SQES(&(0x7f00007c7000/0x3000)=nil, 0x3000, 0xc, 0x50, r0, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x8}}, 0x1) 14:36:51 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000) 14:36:51 executing program 3 (fault-call:4 fault-nth:70): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:51 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r4}, 0x82374d2, 0x7, 0x3}) r5 = io_uring_setup(0xe9a, &(0x7f0000000100)) r6 = syz_io_uring_setup(0x2fb4, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x8, 0x1000000, r7) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4000, @fd_index=0x5, 0xb3b, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 200.896968][T15043] FAULT_INJECTION: forcing a failure. [ 200.896968][T15043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.910078][T15043] CPU: 0 PID: 15043 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 200.918836][T15043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 200.928926][T15043] Call Trace: [ 200.932199][T15043] dump_stack_lvl+0xb7/0x103 [ 200.936785][T15043] dump_stack+0x11/0x1a [ 200.940988][T15043] should_fail+0x23c/0x250 [ 200.945439][T15043] should_fail_usercopy+0x16/0x20 [ 200.950491][T15043] _copy_from_user+0x1c/0xd0 [ 200.955097][T15043] do_recvmmsg+0x250/0x9f0 [ 200.959507][T15043] ? fsnotify_perm+0x59/0x2e0 [ 200.964190][T15043] ? __fsnotify_parent+0x32f/0x430 [ 200.969316][T15043] ? __fget_light+0x21b/0x260 [ 200.974019][T15043] ? __cond_resched+0x11/0x40 [ 200.978715][T15043] __x64_sys_recvmmsg+0xcf/0x150 [ 200.983655][T15043] ? exit_to_user_mode_prepare+0x65/0x190 [ 200.989389][T15043] do_syscall_64+0x3d/0x90 14:36:51 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x10, r0, 0x10000000) r5 = io_uring_setup(0xe9a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}) r6 = syz_io_uring_setup(0x2fb4, &(0x7f0000000280)={0x0, 0xd437}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x8, 0x1000000, r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) syz_io_uring_setup(0x1d11, &(0x7f0000000080)={0x0, 0x1e3b, 0x0, 0x2, 0x2d7}, &(0x7f000057c000/0x800000)=nil, &(0x7f0000893000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x3, 0x0, 0xffffffffffffffff, 0x0, r0, 0x2, 0x0, 0x0, {0x0, r7}}, 0x611e) 14:36:51 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x700) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 200.993804][T15043] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 200.999748][T15043] RIP: 0033:0x4665e9 [ 201.003712][T15043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 201.023375][T15043] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 201.031825][T15043] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 201.039865][T15043] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 14:36:51 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x8000000) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r6, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x208000, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x3, 0x0, r7, 0x0, r0, 0x2, 0x0, 0x1}, 0x81) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 201.047865][T15043] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 201.055967][T15043] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 201.063945][T15043] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:51 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc}, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000380)={0x4, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e24, @empty}}}, 0x108) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r4, 0xc11, 0x882c, 0x0, &(0x7f0000000040)={[0xffff]}, 0x8) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0xfffffffffffffffc) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r5, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r5, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'macvtap0\x00'}) 14:36:51 executing program 3 (fault-call:4 fault-nth:71): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:51 executing program 5: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x4d17, &(0x7f0000000000)={0x0, 0x3f73, 0x4, 0x1, 0x234}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = openat$cgroup_ro(r0, &(0x7f0000000180)='cpuacct.stat\x00', 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x2000009, 0x110, r2, 0x10000000) r4 = io_uring_setup(0xe9a, &(0x7f0000000100)) r5 = syz_io_uring_setup(0x2fb4, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x8, 0x1000000, r6) syz_io_uring_submit(r1, r3, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x4004, @fd=r0, 0x8, 0x7, 0x3, 0x5, 0x0, {0x3, r6}}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 201.323742][T15066] FAULT_INJECTION: forcing a failure. [ 201.323742][T15066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.336836][T15066] CPU: 0 PID: 15066 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 201.345727][T15066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.355822][T15066] Call Trace: [ 201.359097][T15066] dump_stack_lvl+0xb7/0x103 [ 201.363695][T15066] dump_stack+0x11/0x1a [ 201.367871][T15066] should_fail+0x23c/0x250 [ 201.372319][T15066] should_fail_usercopy+0x16/0x20 [ 201.377431][T15066] _copy_from_user+0x1c/0xd0 [ 201.382172][T15066] do_recvmmsg+0x250/0x9f0 [ 201.386679][T15066] ? fsnotify_perm+0x59/0x2e0 [ 201.391426][T15066] ? __fsnotify_parent+0x32f/0x430 [ 201.396543][T15066] ? __fget_light+0x21b/0x260 [ 201.401215][T15066] ? __cond_resched+0x11/0x40 [ 201.405977][T15066] __x64_sys_recvmmsg+0xcf/0x150 [ 201.410920][T15066] ? exit_to_user_mode_prepare+0x65/0x190 [ 201.416643][T15066] do_syscall_64+0x3d/0x90 [ 201.421057][T15066] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 201.426950][T15066] RIP: 0033:0x4665e9 [ 201.430830][T15066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 201.450906][T15066] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 201.459318][T15066] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:52 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x400000000000000) 14:36:52 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) mmap$IORING_OFF_SQES(&(0x7f000014a000/0x4000)=nil, 0x4000, 0x8, 0x8010, r4, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 201.467333][T15066] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 201.475313][T15066] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 201.483282][T15066] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 201.491275][T15066] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:52 executing program 3 (fault-call:4 fault-nth:72): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 201.581381][T15082] FAULT_INJECTION: forcing a failure. [ 201.581381][T15082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.594466][T15082] CPU: 0 PID: 15082 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 201.603261][T15082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 201.613313][T15082] Call Trace: [ 201.616587][T15082] dump_stack_lvl+0xb7/0x103 [ 201.621177][T15082] dump_stack+0x11/0x1a [ 201.625331][T15082] should_fail+0x23c/0x250 [ 201.629745][T15082] should_fail_usercopy+0x16/0x20 [ 201.634772][T15082] _copy_from_user+0x1c/0xd0 [ 201.639395][T15082] do_recvmmsg+0x250/0x9f0 [ 201.643810][T15082] ? fsnotify_perm+0x59/0x2e0 [ 201.648536][T15082] ? __fsnotify_parent+0x32f/0x430 [ 201.653682][T15082] ? __fget_light+0x21b/0x260 [ 201.658352][T15082] ? __cond_resched+0x11/0x40 [ 201.663117][T15082] __x64_sys_recvmmsg+0xcf/0x150 [ 201.668058][T15082] ? exit_to_user_mode_prepare+0x65/0x190 [ 201.673864][T15082] do_syscall_64+0x3d/0x90 [ 201.678454][T15082] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 201.684353][T15082] RIP: 0033:0x4665e9 [ 201.688286][T15082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 201.708000][T15082] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 201.716416][T15082] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 201.724409][T15082] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 201.732380][T15082] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 201.740504][T15082] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 201.748507][T15082] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:52 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x800000000000000) 14:36:52 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r5, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r6, r7, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r8, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xa4, 0x2, 0x1, 0x101, 0x0, 0x0, {0x1}, [@CTA_TUPLE_REPLY={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000011}, 0x0) syz_io_uring_submit(r3, r7, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x400, 0x4000, 0x1}, 0x5) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r9, r10, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r11, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000540)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000380)='./file0\x00', 0x800, 0x6000, 0x1}, 0x3) r12 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r12, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:36:52 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0xa00) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:52 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x20040011, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) recvmmsg(r4, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/230, 0xe6}, {&(0x7f0000000380)=""/175, 0xaf}, {&(0x7f0000000180)=""/19, 0x13}], 0x3, 0xe506, 0x9) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:36:52 executing program 3 (fault-call:4 fault-nth:73): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:52 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r4 = socket(0x2a, 0x1, 0xfffff801) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x8, 0xff, 0x8235, 0x2, @mcast1, @empty, 0x1, 0x10, 0x8, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000180)={'syztnl0\x00', r5, 0x29, 0x0, 0x80, 0x7fff, 0x28, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7800, 0x7800, 0x5, 0x800}}) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 202.223540][T15104] FAULT_INJECTION: forcing a failure. [ 202.223540][T15104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.236671][T15104] CPU: 0 PID: 15104 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 202.245437][T15104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.255498][T15104] Call Trace: [ 202.258781][T15104] dump_stack_lvl+0xb7/0x103 [ 202.263438][T15104] dump_stack+0x11/0x1a [ 202.267626][T15104] should_fail+0x23c/0x250 [ 202.272052][T15104] should_fail_usercopy+0x16/0x20 [ 202.277154][T15104] _copy_from_user+0x1c/0xd0 [ 202.281764][T15104] do_recvmmsg+0x250/0x9f0 [ 202.286233][T15104] ? fsnotify_perm+0x59/0x2e0 [ 202.290910][T15104] ? __fsnotify_parent+0x32f/0x430 [ 202.296031][T15104] ? __fget_light+0x21b/0x260 [ 202.300704][T15104] ? __cond_resched+0x11/0x40 [ 202.305394][T15104] __x64_sys_recvmmsg+0xcf/0x150 [ 202.310338][T15104] ? exit_to_user_mode_prepare+0x65/0x190 [ 202.316122][T15104] do_syscall_64+0x3d/0x90 [ 202.320542][T15104] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 202.326487][T15104] RIP: 0033:0x4665e9 [ 202.330381][T15104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 202.350037][T15104] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 202.358532][T15104] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:53 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xa00000000000000) [ 202.366508][T15104] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 202.374486][T15104] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 202.382545][T15104] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 202.390638][T15104] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:53 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x1, 0x0, 0x1}, 0x7) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:36:53 executing program 3 (fault-call:4 fault-nth:74): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:53 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000000)) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 202.574603][T15123] FAULT_INJECTION: forcing a failure. [ 202.574603][T15123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.587751][T15123] CPU: 1 PID: 15123 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 202.596516][T15123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.606658][T15123] Call Trace: [ 202.609937][T15123] dump_stack_lvl+0xb7/0x103 [ 202.614535][T15123] dump_stack+0x11/0x1a [ 202.618695][T15123] should_fail+0x23c/0x250 [ 202.623185][T15123] should_fail_usercopy+0x16/0x20 [ 202.628352][T15123] _copy_from_user+0x1c/0xd0 [ 202.632948][T15123] do_recvmmsg+0x250/0x9f0 [ 202.637372][T15123] ? fsnotify_perm+0x59/0x2e0 [ 202.642175][T15123] ? __fsnotify_parent+0x32f/0x430 [ 202.647378][T15123] ? __fget_light+0x21b/0x260 [ 202.652054][T15123] ? __cond_resched+0x11/0x40 [ 202.656746][T15123] __x64_sys_recvmmsg+0xcf/0x150 [ 202.661695][T15123] ? exit_to_user_mode_prepare+0x65/0x190 [ 202.667424][T15123] do_syscall_64+0x3d/0x90 [ 202.671843][T15123] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 202.677819][T15123] RIP: 0033:0x4665e9 [ 202.681745][T15123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 202.701378][T15123] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 202.709817][T15123] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:53 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6b0000000038f5d506a2f1a956000000000000", @ANYRES16=r1, @ANYBLOB="0303000000000000000003000000"], 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x1}, @NL802154_ATTR_MAX_BE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8000) [ 202.717791][T15123] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 202.726166][T15123] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 202.734155][T15123] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 202.742138][T15123] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:53 executing program 5: r0 = syz_io_uring_setup(0x6f23, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x200000a, 0x8010, r0, 0x8000000) syz_io_uring_setup(0x6328, &(0x7f0000000000)={0x0, 0xa31b, 0x4, 0x2, 0x32b, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r6 = io_uring_setup(0xe9a, &(0x7f0000000100)) r7 = syz_io_uring_setup(0x2fb4, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f00000004c0)=0xe8) fchownat(r8, &(0x7f0000000380)='./file0\x00', r9, 0x0, 0x400) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x8, 0x1000000, r10) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4000, @fd=r3, 0x200, &(0x7f0000000180)=""/47, 0x2f, 0x19, 0x0, {0x0, r10}}, 0x27821db7) 14:36:53 executing program 3 (fault-call:4 fault-nth:75): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:53 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x25dfdbff, {0x3}}, 0x14}}, 0x20000004) [ 202.872401][T15142] FAULT_INJECTION: forcing a failure. [ 202.872401][T15142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.885511][T15142] CPU: 0 PID: 15142 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 202.894276][T15142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.904378][T15142] Call Trace: [ 202.907656][T15142] dump_stack_lvl+0xb7/0x103 [ 202.912252][T15142] dump_stack+0x11/0x1a [ 202.916397][T15142] should_fail+0x23c/0x250 [ 202.920834][T15142] should_fail_usercopy+0x16/0x20 [ 202.925859][T15142] _copy_from_user+0x1c/0xd0 [ 202.930455][T15142] do_recvmmsg+0x250/0x9f0 [ 202.934864][T15142] ? fsnotify_perm+0x59/0x2e0 [ 202.939625][T15142] ? __fsnotify_parent+0x32f/0x430 [ 202.944813][T15142] ? __fget_light+0x21b/0x260 [ 202.949486][T15142] ? __cond_resched+0x11/0x40 [ 202.954165][T15142] __x64_sys_recvmmsg+0xcf/0x150 [ 202.959288][T15142] ? exit_to_user_mode_prepare+0x65/0x190 [ 202.965366][T15142] do_syscall_64+0x3d/0x90 [ 202.969787][T15142] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 202.975684][T15142] RIP: 0033:0x4665e9 [ 202.979632][T15142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 202.999430][T15142] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 203.007860][T15142] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:53 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0xc02) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 203.015896][T15142] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 203.023871][T15142] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 203.031837][T15142] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 203.039838][T15142] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:53 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r5, &(0x7f0000000380)="7544d8c232254e09752d159333c8f16a23f3182b885a86c853aa9c463a2ce213af7437825ff42bcc4657b1", 0x2b, 0x4004081, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r4, &(0x7f0000006040), 0x1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r6, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, 0x1, 0x0, 0x1}, 0x0) r7 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000180)=0x1c, 0x80800) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000400)=@IORING_OP_SEND={0x1a, 0x3, 0x0, r7, 0x0, &(0x7f00000001c0)="11990c", 0x3, 0x4000000, 0x0, {0x0, r8}}, 0x7) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) 14:36:53 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xc02000000000000) 14:36:53 executing program 1: r0 = syz_io_uring_setup(0x15d7, &(0x7f0000000000)={0x0, 0xead2, 0x0, 0x3, 0x2af}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = syz_io_uring_setup(0x2e94, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x1, 0x0, r0}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f000014b000/0x1000)=nil, 0x1000, 0x2000000, 0x10011, r0, 0x8000000) r7 = io_uring_setup(0xe9a, &(0x7f0000000100)) r8 = syz_io_uring_setup(0x2fb4, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x8, 0x1000000, r9) syz_io_uring_submit(r6, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x6000, @fd_index=0x7, 0x626e3576, &(0x7f0000000180)=""/7, 0x7, 0x2, 0x0, {0x0, r9}}, 0x79) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:36:54 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r5 = syz_io_uring_setup(0x6992, &(0x7f0000000040)={0x0, 0x5b34, 0x10, 0x0, 0xbe, 0x0, r4}, &(0x7f000014a000/0x4000)=nil, &(0x7f0000149000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1c31, &(0x7f0000000380)={0x0, 0xaf9a, 0x0, 0x3, 0xc6, 0x0, r5}, &(0x7f0000148000/0x1000)=nil, &(0x7f0000149000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000400)=0x0) r7 = io_uring_setup(0xe9a, &(0x7f0000000100)) r8 = syz_io_uring_setup(0x2fb4, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x8, 0x1000000, r9) syz_io_uring_submit(r1, r6, &(0x7f0000000440)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r5, 0x3, 0x0, 0x8, 0x0, 0x1, {0x0, r9}}, 0x5) 14:36:54 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB='\x00'/14], 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001700e1fd35be0beb15bf303704"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x40, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7e}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x5}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x850) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x9391291397393b67}, 0x24000001) 14:36:54 executing program 3 (fault-call:4 fault-nth:76): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 203.400083][T15168] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 203.419793][T15168] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 14:36:54 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0xf00) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:54 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000225bd7000feb14019774c55ca1a7d2eb629656a0000000c00060002000000020000000800030029628e1e3105849fec6ceb6b3d33df8097bb0d8f1f35aaaf1af37321bef6fba84e153a4922222b3ce18a6248443f9bc6abfd23f10f015e7bff32b24522d01b4be83eaaa044286a1a558683ed3e3a64a24ba20142942b2d29f5857dc16ef3441d3c7d3c9d2b553767b309bda6f68403608613402990a8d54bbe1d232e56f172f0e4e872ac39fbc05ac166fe1e5c9005d974148d0ff1bd88a0db78894d6554c50ca709fe6820dbc2", @ANYRES32=r6, @ANYBLOB="0c00060001000000010000000c000600020000000200000006000a00a1aa000006000a00ffff0000"], 0x50}, 0x1, 0x0, 0x0, 0xc1545842a54b6441}, 0x8000) r7 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r7, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r7, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r3) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x20, r8, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r7, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES64=r7, @ANYBLOB="0303000000070000000000000000830480d51e63feecf525dcc1c11ad3835119d2b960e4abf494b15f2420b500c07ced5a3472c725ea65c38eec73751338ef09b33fed2a83750e6b705af27598eebba11d80ca855be21697dbb4a583531abf041833f3653b811c0a7db2d85ff2837d0df1"], 0x14}}, 0x11) [ 203.520134][T15176] FAULT_INJECTION: forcing a failure. [ 203.520134][T15176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.533245][T15176] CPU: 0 PID: 15176 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 203.542134][T15176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 203.552201][T15176] Call Trace: [ 203.555476][T15176] dump_stack_lvl+0xb7/0x103 [ 203.560162][T15176] dump_stack+0x11/0x1a [ 203.564316][T15176] should_fail+0x23c/0x250 [ 203.568738][T15176] should_fail_usercopy+0x16/0x20 [ 203.573761][T15176] _copy_from_user+0x1c/0xd0 [ 203.578353][T15176] do_recvmmsg+0x250/0x9f0 [ 203.582783][T15176] ? fsnotify_perm+0x59/0x2e0 [ 203.587459][T15176] ? __fsnotify_parent+0x32f/0x430 [ 203.592563][T15176] ? __fget_light+0x21b/0x260 [ 203.597238][T15176] ? __cond_resched+0x11/0x40 [ 203.601937][T15176] __x64_sys_recvmmsg+0xcf/0x150 [ 203.606881][T15176] ? exit_to_user_mode_prepare+0x65/0x190 [ 203.612816][T15176] do_syscall_64+0x3d/0x90 [ 203.617262][T15176] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 203.623164][T15176] RIP: 0033:0x4665e9 [ 203.627055][T15176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 203.646731][T15176] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 203.655143][T15176] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:54 executing program 3 (fault-call:4 fault-nth:77): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 203.663119][T15176] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 203.671141][T15176] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 203.679110][T15176] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 203.687098][T15176] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 [ 203.758076][T15184] FAULT_INJECTION: forcing a failure. [ 203.758076][T15184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.771180][T15184] CPU: 1 PID: 15184 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 203.779951][T15184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 203.790195][T15184] Call Trace: [ 203.793469][T15184] dump_stack_lvl+0xb7/0x103 [ 203.798054][T15184] dump_stack+0x11/0x1a [ 203.802222][T15184] should_fail+0x23c/0x250 [ 203.806637][T15184] should_fail_usercopy+0x16/0x20 [ 203.811661][T15184] _copy_from_user+0x1c/0xd0 [ 203.816251][T15184] do_recvmmsg+0x250/0x9f0 [ 203.820678][T15184] ? fsnotify_perm+0x59/0x2e0 [ 203.825503][T15184] ? __fsnotify_parent+0x32f/0x430 [ 203.830614][T15184] ? __fget_light+0x21b/0x260 [ 203.835290][T15184] ? __cond_resched+0x11/0x40 [ 203.840004][T15184] __x64_sys_recvmmsg+0xcf/0x150 [ 203.845014][T15184] ? exit_to_user_mode_prepare+0x65/0x190 [ 203.850758][T15184] do_syscall_64+0x3d/0x90 [ 203.855188][T15184] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 203.861081][T15184] RIP: 0033:0x4665e9 [ 203.864985][T15184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 203.884673][T15184] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 203.893085][T15184] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:54 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf00000000000000) 14:36:54 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x1800) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 203.901074][T15184] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 203.909159][T15184] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 203.917151][T15184] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 203.925127][T15184] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:54 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, r1, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 14:36:54 executing program 3 (fault-call:4 fault-nth:78): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:54 executing program 1: r0 = syz_io_uring_setup(0x714e, &(0x7f00000002c0)={0x0, 0x286f}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r6, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x1, 0x0, &(0x7f0000000000)="0bffce115238b943fdd5cfce9bd092a8022a23db6f8f067ca73caf", 0x2, 0x0, 0x1}, 0x10000) [ 204.089501][T15208] FAULT_INJECTION: forcing a failure. [ 204.089501][T15208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.102575][T15208] CPU: 1 PID: 15208 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 204.111338][T15208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 204.121421][T15208] Call Trace: [ 204.124697][T15208] dump_stack_lvl+0xb7/0x103 [ 204.129295][T15208] dump_stack+0x11/0x1a [ 204.133616][T15208] should_fail+0x23c/0x250 [ 204.138101][T15208] should_fail_usercopy+0x16/0x20 [ 204.143237][T15208] _copy_from_user+0x1c/0xd0 [ 204.147834][T15208] do_recvmmsg+0x250/0x9f0 [ 204.152255][T15208] ? fsnotify_perm+0x59/0x2e0 [ 204.156966][T15208] ? __fsnotify_parent+0x32f/0x430 [ 204.162133][T15208] ? __fget_light+0x21b/0x260 [ 204.166815][T15208] ? __cond_resched+0x11/0x40 [ 204.171507][T15208] __x64_sys_recvmmsg+0xcf/0x150 [ 204.176514][T15208] ? exit_to_user_mode_prepare+0x65/0x190 [ 204.182261][T15208] do_syscall_64+0x3d/0x90 [ 204.186788][T15208] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 204.192812][T15208] RIP: 0033:0x4665e9 [ 204.196729][T15208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 204.216332][T15208] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 204.224829][T15208] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 204.232812][T15208] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 204.240859][T15208] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 204.248823][T15208] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 204.256790][T15208] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:54 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1800000000000000) 14:36:55 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x2, 0x80) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:36:55 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x1802) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:55 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = io_uring_setup(0xe9a, &(0x7f0000000100)) r5 = syz_io_uring_setup(0x2fb4, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x8, 0x1000000, r6) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:36:55 executing program 3 (fault-call:4 fault-nth:79): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 204.749507][T15235] FAULT_INJECTION: forcing a failure. [ 204.749507][T15235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.762578][T15235] CPU: 1 PID: 15235 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 204.771342][T15235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 204.781393][T15235] Call Trace: [ 204.784669][T15235] dump_stack_lvl+0xb7/0x103 [ 204.789267][T15235] dump_stack+0x11/0x1a [ 204.793502][T15235] should_fail+0x23c/0x250 14:36:55 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x1700}, 0x1}, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x1, &(0x7f0000000040)="be54e97e2a2e3903d020451586d5ad72094e7bc7d63534ccbbb43eaea6a39e097b38b678fb140ddf4535c710b2884944d44c44c0665cc7ca9ac32cfea778876d8c", 0x6, 0x0, 0x1, {0x2, r4}}, 0x80000001) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 204.798061][T15235] should_fail_usercopy+0x16/0x20 [ 204.803113][T15235] _copy_from_user+0x1c/0xd0 [ 204.807785][T15235] do_recvmmsg+0x250/0x9f0 [ 204.812236][T15235] ? fsnotify_perm+0x59/0x2e0 [ 204.816911][T15235] ? __fsnotify_parent+0x32f/0x430 [ 204.822022][T15235] ? __fget_light+0x21b/0x260 [ 204.826695][T15235] ? __cond_resched+0x11/0x40 [ 204.831464][T15235] __x64_sys_recvmmsg+0xcf/0x150 [ 204.836411][T15235] ? exit_to_user_mode_prepare+0x65/0x190 [ 204.842138][T15235] do_syscall_64+0x3d/0x90 [ 204.846594][T15235] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 204.852504][T15235] RIP: 0033:0x4665e9 [ 204.856402][T15235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 204.876033][T15235] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 204.884449][T15235] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:55 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000148000/0x4000)=nil, 0x4000, 0x4, 0x1010, r4, 0x10000000) [ 204.892432][T15235] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 204.900447][T15235] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 204.908433][T15235] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 204.916412][T15235] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:55 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1802000000000000) 14:36:55 executing program 5: r0 = syz_io_uring_setup(0x49bf, &(0x7f00000002c0)={0x0, 0x38c2}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = accept(r2, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x80) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r6, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@nfc={0x27, 0x1, 0x1, 0x4}}, 0x1000) io_uring_enter(r0, 0x45f5, 0x8000000, 0x0, 0x0, 0x0) 14:36:56 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd_index=0x7, 0x8001, 0x0, 0x0, 0x6, 0x1, {0x2, r4}}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:36:56 executing program 3 (fault-call:4 fault-nth:80): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 205.580759][T15268] FAULT_INJECTION: forcing a failure. [ 205.580759][T15268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.594040][T15268] CPU: 1 PID: 15268 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 205.602806][T15268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.612858][T15268] Call Trace: [ 205.616147][T15268] dump_stack_lvl+0xb7/0x103 [ 205.620747][T15268] dump_stack+0x11/0x1a [ 205.624952][T15268] should_fail+0x23c/0x250 [ 205.629407][T15268] should_fail_usercopy+0x16/0x20 [ 205.634434][T15268] _copy_from_user+0x1c/0xd0 [ 205.639029][T15268] do_recvmmsg+0x250/0x9f0 [ 205.643479][T15268] ? fsnotify_perm+0x59/0x2e0 [ 205.648158][T15268] ? __fsnotify_parent+0x32f/0x430 [ 205.653305][T15268] ? __fget_light+0x21b/0x260 [ 205.657983][T15268] ? __cond_resched+0x11/0x40 [ 205.662666][T15268] __x64_sys_recvmmsg+0xcf/0x150 [ 205.667609][T15268] ? exit_to_user_mode_prepare+0x65/0x190 [ 205.673332][T15268] do_syscall_64+0x3d/0x90 [ 205.677760][T15268] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 205.683699][T15268] RIP: 0033:0x4665e9 [ 205.687657][T15268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 205.707262][T15268] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 205.715693][T15268] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 205.723739][T15268] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 205.731710][T15268] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 205.739683][T15268] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 205.747659][T15268] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:58 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:36:58 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x2000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:58 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2000000000000000) 14:36:58 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x810, r0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x10010, r0, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f0000000000), 0x1004) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:36:58 executing program 3 (fault-call:4 fault-nth:81): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe8, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x380000000}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0x9c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_ID={0x68, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "18cb2ca14925d2249927acd77db54aeb"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1e4b7d1d3ddc5d6cffae131bd219d910"}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) [ 207.474950][T15284] FAULT_INJECTION: forcing a failure. [ 207.474950][T15284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.488079][T15284] CPU: 0 PID: 15284 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 207.496919][T15284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.507410][T15284] Call Trace: [ 207.510691][T15284] dump_stack_lvl+0xb7/0x103 [ 207.515446][T15284] dump_stack+0x11/0x1a [ 207.519603][T15284] should_fail+0x23c/0x250 [ 207.524029][T15284] should_fail_usercopy+0x16/0x20 [ 207.529062][T15284] _copy_from_user+0x1c/0xd0 [ 207.533688][T15284] do_recvmmsg+0x250/0x9f0 [ 207.538119][T15284] ? fsnotify_perm+0x59/0x2e0 [ 207.542799][T15284] ? __fsnotify_parent+0x32f/0x430 [ 207.547948][T15284] ? __fget_light+0x21b/0x260 [ 207.552721][T15284] ? __cond_resched+0x11/0x40 [ 207.557401][T15284] __x64_sys_recvmmsg+0xcf/0x150 [ 207.562447][T15284] ? exit_to_user_mode_prepare+0x65/0x190 [ 207.568171][T15284] do_syscall_64+0x3d/0x90 [ 207.572588][T15284] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 207.578533][T15284] RIP: 0033:0x4665e9 [ 207.582517][T15284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 207.602133][T15284] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 207.610649][T15284] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 207.618654][T15284] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 207.626649][T15284] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 207.634652][T15284] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 207.642652][T15284] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:58 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x9}, 0x8001) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x80000001, 0x240040) fcntl$setstatus(r4, 0x4, 0x400) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:36:58 executing program 3 (fault-call:4 fault-nth:82): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 207.790309][T15302] FAULT_INJECTION: forcing a failure. [ 207.790309][T15302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.805003][T15302] CPU: 0 PID: 15302 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 207.813869][T15302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.823941][T15302] Call Trace: [ 207.827211][T15302] dump_stack_lvl+0xb7/0x103 [ 207.831911][T15302] dump_stack+0x11/0x1a [ 207.836064][T15302] should_fail+0x23c/0x250 [ 207.840486][T15302] should_fail_usercopy+0x16/0x20 [ 207.848787][T15302] _copy_from_user+0x1c/0xd0 [ 207.853498][T15302] do_recvmmsg+0x250/0x9f0 [ 207.857911][T15302] ? fsnotify_perm+0x59/0x2e0 [ 207.862598][T15302] ? __fsnotify_parent+0x32f/0x430 [ 207.867714][T15302] ? __fget_light+0x21b/0x260 [ 207.872385][T15302] ? __cond_resched+0x11/0x40 [ 207.877183][T15302] __x64_sys_recvmmsg+0xcf/0x150 [ 207.882194][T15302] ? exit_to_user_mode_prepare+0x65/0x190 [ 207.887951][T15302] do_syscall_64+0x3d/0x90 [ 207.892415][T15302] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 207.898307][T15302] RIP: 0033:0x4665e9 [ 207.902190][T15302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 207.921922][T15302] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 207.930453][T15302] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x94, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x74, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e2c4b6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfd1d8f5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e25edc6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11e6b955}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfdb814b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25ddfa62}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x222089b0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x94}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r5, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="a8020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x10000080}, 0x20000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r3) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)={0x128, r6, 0x24, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7a2019dbe0442080}, {0x5}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xd8, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c21ddfc}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ceb5a5a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x99cb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x16ca}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4be38c1e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x385e6f4b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6bd1ab6e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35328d3c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76172325}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7496}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10e1a7f2}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd1e8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2be52b3f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4b74}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4f63}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32ec622d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf18b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7643}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x409ab860}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9f1e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe1cb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5a99}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a123685}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x90}, 0x41040) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r8, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x30}}, 0x4000000) 14:36:58 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x2400000000000000) 14:36:58 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x8010, r4, 0x10000000) [ 207.938429][T15302] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 207.946401][T15302] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 207.954371][T15302] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 207.962355][T15302] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '^\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0xa0}, 0x1, 0x0, 0x0, 0x404c010}, 0x5) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:36:58 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x1, 0x0, 0xd) 14:36:58 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:36:58 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x2400) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:58 executing program 3 (fault-call:4 fault-nth:83): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1004}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x8c, r3, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '*#:.*\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x28}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000000) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000019000000000020cebc3342d90001f0302f8d000403000000bb72184991c2afa9"], 0x28}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r1, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x881) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000440), r7) 14:36:58 executing program 2: setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='trusted.syz\x00', &(0x7f00000001c0)='*(-]\x00', 0x5, 0x2) r0 = openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x40000, 0x12, 0x8}, 0x18) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) [ 208.151878][T15327] FAULT_INJECTION: forcing a failure. [ 208.151878][T15327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.165008][T15327] CPU: 1 PID: 15327 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 208.173777][T15327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.183860][T15327] Call Trace: [ 208.187140][T15327] dump_stack_lvl+0xb7/0x103 [ 208.191809][T15327] dump_stack+0x11/0x1a [ 208.195958][T15327] should_fail+0x23c/0x250 [ 208.200370][T15327] should_fail_usercopy+0x16/0x20 [ 208.205416][T15327] _copy_from_user+0x1c/0xd0 [ 208.210005][T15327] do_recvmmsg+0x250/0x9f0 [ 208.214432][T15327] ? fsnotify_perm+0x59/0x2e0 [ 208.219109][T15327] ? __fsnotify_parent+0x32f/0x430 [ 208.224221][T15327] ? __fget_light+0x21b/0x260 [ 208.228891][T15327] ? __cond_resched+0x11/0x40 [ 208.233568][T15327] __x64_sys_recvmmsg+0xcf/0x150 [ 208.238511][T15327] ? exit_to_user_mode_prepare+0x65/0x190 [ 208.244304][T15327] do_syscall_64+0x3d/0x90 [ 208.248735][T15327] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 208.254710][T15327] RIP: 0033:0x4665e9 [ 208.258618][T15327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 208.278222][T15327] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 208.286756][T15327] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 208.294734][T15327] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 14:36:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080025bd7000ffdbdf25010000000800020005000000140006000000000000000000000000000000000008000c000000000014000600fe880000000000000000000000000101"], 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x20004000) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x26) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6a}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040041) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r5, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb4, 0x0, 0x9, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x101}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x27}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000) [ 208.302747][T15327] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 208.310718][T15327] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 208.318762][T15327] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:59 executing program 3 (fault-call:4 fault-nth:84): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:59 executing program 2: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0xfffffe75, 0x9, 0xb8b0, 0xffffa7ca, 0xffffff7b}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="00988ed5217735fc24000007", @ANYRES16=r2, @ANYBLOB="0303000000000000000003000000"], 0x14}}, 0x0) [ 208.420365][T15344] FAULT_INJECTION: forcing a failure. [ 208.420365][T15344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.433472][T15344] CPU: 0 PID: 15344 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 208.442236][T15344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.452292][T15344] Call Trace: [ 208.455570][T15344] dump_stack_lvl+0xb7/0x103 [ 208.460193][T15344] dump_stack+0x11/0x1a [ 208.464354][T15344] should_fail+0x23c/0x250 [ 208.468780][T15344] should_fail_usercopy+0x16/0x20 [ 208.473860][T15344] _copy_from_user+0x1c/0xd0 [ 208.478452][T15344] do_recvmmsg+0x250/0x9f0 [ 208.482870][T15344] ? fsnotify_perm+0x59/0x2e0 [ 208.487579][T15344] ? __fsnotify_parent+0x32f/0x430 [ 208.492730][T15344] ? __fget_light+0x21b/0x260 [ 208.497410][T15344] ? __cond_resched+0x11/0x40 [ 208.502185][T15344] __x64_sys_recvmmsg+0xcf/0x150 [ 208.507191][T15344] ? exit_to_user_mode_prepare+0x65/0x190 [ 208.512918][T15344] do_syscall_64+0x3d/0x90 [ 208.517335][T15344] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 208.523233][T15344] RIP: 0033:0x4665e9 [ 208.527122][T15344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 208.546729][T15344] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 208.555161][T15344] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 208.563136][T15344] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 14:36:59 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x3c00000000000000) 14:36:59 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r3, 0x0, 0x5, &(0x7f0000000000)=0xfffffff7, 0x4) 14:36:59 executing program 1: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmsg(r0, &(0x7f00000017c0)={&(0x7f0000000000)=@isdn, 0x80, &(0x7f0000001700)=[{&(0x7f0000000380)=""/198, 0xc6}, {&(0x7f0000000080)=""/32, 0x20}, {&(0x7f0000000480)=""/212, 0xd4}, {&(0x7f0000000580)=""/249, 0xf9}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/59, 0x3b}, {&(0x7f0000000180)=""/79, 0x4f}, {&(0x7f0000001680)=""/103, 0x67}], 0x8, &(0x7f0000001780)=""/28, 0x1c}, 0x12001) r1 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:36:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000008e7b15bc715ada4032e8d51684b2a5cf68d9aeca6001c725cfca54bbd2ead3296a022287ca", @ANYRES16=r1, @ANYBLOB="0303000000000000000003000000"], 0x14}}, 0x0) [ 208.571139][T15344] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 208.579113][T15344] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 208.587084][T15344] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff00cc7cf98e72d92acd382e6cc49c82a2a4b6c8962c8221b619c16b8c9db14502516f69a98ef39d1ab99b739072c6e40913d49c6b", @ANYRES16=r1, @ANYBLOB="0303000000000000000003000000"], 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) 14:36:59 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x3c00) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:36:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r1, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x14}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48001}, 0x4000800) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r4) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1407cf637673e7f7e229e8bc22cf7d5be23a14658a082c915ddb019e6fef6c527806250a9589e0b366cb69f992e05e01c5e6c7c7273608e74e711ebf180e949bf995fa20d3a693a39955c6e2b19d15fd36e5a64baa43a1604ae44d5e86c00fcd9d98f8d9804c1cf7aa70c88fef8dc9fa21548d77613acc58bfd9172714fb15824c1d573a7f4c", @ANYRES16=r2, @ANYBLOB="0303000000000000000003000000"], 0x14}}, 0x0) 14:36:59 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x5c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44090}, 0x40080) r3 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x45f5, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x38cf, 0x1176, 0x2, &(0x7f0000000000)={[0x8]}, 0x8) 14:36:59 executing program 3 (fault-call:4 fault-nth:85): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:36:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x20044814) [ 208.899065][T15376] FAULT_INJECTION: forcing a failure. [ 208.899065][T15376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.912223][T15376] CPU: 0 PID: 15376 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 208.921008][T15376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.931065][T15376] Call Trace: [ 208.934363][T15376] dump_stack_lvl+0xb7/0x103 [ 208.938988][T15376] dump_stack+0x11/0x1a [ 208.943144][T15376] should_fail+0x23c/0x250 [ 208.947604][T15376] should_fail_usercopy+0x16/0x20 [ 208.952639][T15376] _copy_from_user+0x1c/0xd0 [ 208.957241][T15376] do_recvmmsg+0x250/0x9f0 [ 208.961672][T15376] ? fsnotify_perm+0x59/0x2e0 [ 208.966364][T15376] ? __fsnotify_parent+0x32f/0x430 [ 208.971512][T15376] ? __fget_light+0x21b/0x260 [ 208.976185][T15376] ? __cond_resched+0x11/0x40 [ 208.980867][T15376] __x64_sys_recvmmsg+0xcf/0x150 [ 208.985813][T15376] ? exit_to_user_mode_prepare+0x65/0x190 [ 208.991536][T15376] do_syscall_64+0x3d/0x90 [ 208.995962][T15376] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 209.001873][T15376] RIP: 0033:0x4665e9 [ 209.005764][T15376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 209.025935][T15376] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 209.034547][T15376] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:36:59 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4102000000000000) [ 209.042526][T15376] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 209.050495][T15376] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 209.058484][T15376] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 209.066467][T15376] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:36:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4000094) 14:36:59 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r5, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r6, r7, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r8, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) r9 = io_uring_setup(0xe9a, &(0x7f0000000100)) r10 = syz_io_uring_setup(0x2fb4, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x8, 0x1000000, r11) syz_io_uring_submit(r3, r7, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x8, 0x1, {0x0, r11, r0}}, 0x8000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r12 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r12, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:36:59 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r6) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r8, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x48010}, 0xd1) 14:36:59 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x4102) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:37:00 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r4, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) listen(r4, 0x3d) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:00 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x428fc60400000000) 14:37:00 executing program 3 (fault-call:4 fault-nth:86): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 209.458504][T15412] FAULT_INJECTION: forcing a failure. [ 209.458504][T15412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.471734][T15412] CPU: 0 PID: 15412 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 209.480497][T15412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.490558][T15412] Call Trace: [ 209.493837][T15412] dump_stack_lvl+0xb7/0x103 [ 209.498459][T15412] dump_stack+0x11/0x1a [ 209.502613][T15412] should_fail+0x23c/0x250 [ 209.507038][T15412] should_fail_usercopy+0x16/0x20 [ 209.512073][T15412] _copy_from_user+0x1c/0xd0 [ 209.516665][T15412] do_recvmmsg+0x250/0x9f0 [ 209.521096][T15412] ? fsnotify_perm+0x59/0x2e0 [ 209.525783][T15412] ? __fsnotify_parent+0x32f/0x430 [ 209.530898][T15412] ? __fget_light+0x21b/0x260 [ 209.535712][T15412] ? __cond_resched+0x11/0x40 [ 209.540400][T15412] __x64_sys_recvmmsg+0xcf/0x150 [ 209.545414][T15412] ? exit_to_user_mode_prepare+0x65/0x190 [ 209.551142][T15412] do_syscall_64+0x3d/0x90 [ 209.555712][T15412] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 209.561695][T15412] RIP: 0033:0x4665e9 [ 209.565581][T15412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 209.585261][T15412] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 209.593673][T15412] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 209.601672][T15412] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 209.609644][T15412] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 209.617617][T15412] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 209.625589][T15412] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:37:00 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) r9 = io_uring_setup(0xe9a, &(0x7f0000000100)) r10 = syz_io_uring_setup(0x2fb4, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x8, 0x1000000, r11) syz_io_uring_submit(r4, r6, &(0x7f0000001a00)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r8, 0x0, &(0x7f00000019c0)={&(0x7f0000000000)=@hci={0x1f, 0x2, 0x2}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000080)="0f7063ffb826ebe064b4f657ddc6015d6fd143002cb0325bbe683acfcda29673516480f4c2c839329f5e6930e5632a4cc2d9a53a43bbc07ef7ac94d8c18c91972b02287f657cf0beacbbfc9800343c6b56", 0x51}, {&(0x7f0000000180)="e375b3e49019da9c5920c57120e5ed8539648206d25457050a9359539d824bba0fffd81d2db3", 0x26}, {&(0x7f0000000380)="797172c13d5b2ae4c71823d60253bc586da576129b130f9184533e4cfc5549b64db929a5533b370d5d570dc21157cc3a5153c6b9a2514557bea27971c3a1b6124a26", 0x42}, {&(0x7f0000000400)="651cf66ed7991c54d34392f4a55db1eac3dac20351a961caff83bfc8168bcbe6380cf1be2782cc88e5d44c154ad64cfb350f8e4e8c273664fd5de6a383975bd8020282ca97b5bc92f9fde6337c4671d6a1ad1311f64c16e255f460eb4eca67bdfac3be5b84814c7fbeb11f424758f2d0af5c22a2c1212257b94931c14af6a33dfc1149f8045193bfa981b86628946103627f902bef1663e8fd", 0x99}, {&(0x7f00000004c0)="047b32285aebe3eee2f3b7a641b91aaaaf8fa47b83830b2f910860bfc9de721d30c153f3bbf0df5ffa0d6c3a7792875fa47144138fae6295538a559e260fc7ae5f5648927256ac6042262cbc42361bc8393e693503170aa0124a506a3a3a1fa84f5ff3ff03ce6c137e1dbdacc9f1edef86a4ffe25b9bd85a54f86650e1587cb857cef7aa970b4019b961248a996b60c37a1f5b54296aea52ac49b1694a3998e91b2918b8fce54a88ae45bac98342d73829fe629b4b5beefd46c4cc9124668f1ffb78afb0e8715f1fd38e263d51548b9e6305f2e63a6128b5a46c1491bbf715e8f9c7de4d11be77bd55206d82d4bf00f85d34fc79d9e2", 0xf6}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="f08ec3d35fa7a9dd7a90c2d1917a6df573a6db7cb194a5d7df0658063ba71bedde6c8e9f0fc2063ac7c15ba0dd6629aad0ab8cb247e7167227c9c931a0e370fba73d742830b94071be08895005773c888f494fa6d1a74e6ca7b157e2abc00bb6f583d08d75533a69b605893a379a094a69d191a3037d61ed77f02e090072e2ae69b7e988d525b70943bb", 0x8a}, {&(0x7f00000001c0)="9953a39d266cd2c9d055ecf3d5dd9bf674b96a00feea71", 0x17}, {&(0x7f0000001680)="b64acffe1d072126e25e9a49b5d9ccf0861941d00ff340b5ea107f710490e50e4966ee7fce249b5e2293ec1e4a439482f3c4450391bd3557e57d938bf8d52a4dc1be3dd3d808021f6bc44bd5668fc554beaf145f3aac9f608c0896ca597ade0c9f35", 0x62}], 0x9, &(0x7f00000017c0)=[{0x30, 0x118, 0x401, "635fd54eddbe3f938c4ef240aabd8e9a9d6eb2ac005d6b6a225cc232ffb57e40"}, {0x20, 0x118, 0x10000, "e37f16ad608b480b8c"}, {0xf0, 0x10f, 0xc4, "fa92d1e5c5e3c0c1a8746262b4642d9cf251ce9366ab3ac958e67e64b6aa8c79574e477dc27d8502fb62f61582764ce551c22ea14b860126ea1eb0a52a414123f5ebd53192717c2f8b2c6e0dbdea3dd9f27ba4325da48ade91c9577299d457abea4973be9b8d0667bf9f60a99f44129092ab0afed1460e1b8fbc4f00571e81498cf76dca76ef69118f3ff36641fa364df19a089049e943f3178cb8071dd47023dbdc6720aba2ec9c355320acc1bed53fa08fc8d0ffc9e68b81c30e4fe9f51b05ed6e6bd9d3081e43641e1327f1c26d4784919f17d54d4ec92e96d96f"}, {0x30, 0x10c, 0xf6d, "39835ddc746c13b3a998d997bab4cb0f533745278e30bc7bfb67e2a64a"}, {0x68, 0x113, 0xffff, "bb56669d2425f6088b4434f4f98d75ae5389a658f8f6406bf1724ed4f82bada76c4e318eadaade2bf59e16ae82621212472d3e9b134e69e59cff4aac45f14d6e1b01c57f31fe155c2a91ef31d427643d1399"}], 0x1d8}, 0x0, 0x800, 0x0, {0x0, r11}}, 0x3) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:00 executing program 5: syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = syz_io_uring_setup(0x2fb4, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x8, 0x1000000, r3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001640)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001600)={&(0x7f0000000500)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, &(0x7f00000015c0)=""/2, 0x2}, 0x0, 0x30000, 0x0, {0x3, r3}}, 0x7fffffff) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r9 = io_uring_setup(0xe9a, &(0x7f0000000100)) r10 = syz_io_uring_setup(0x2fb4, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x8, 0x1000000, r11) syz_io_uring_submit(r0, r6, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r8, &(0x7f0000000000)={0x264200, 0x113, 0xb}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r11}}, 0x5) syz_io_uring_submit(r0, r1, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) 14:37:00 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4e97c6d617000000) 14:37:00 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f000047d000/0x2000)=nil, 0x2000, 0x280000d, 0x4010, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x114, &(0x7f00000000c0)=0x7fffffff, 0x0, 0x4) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x11c, &(0x7f0000000000)=0x6, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r3, 0x80, &(0x7f0000000200)=@generic={0x10, "ec609787bed706626c82557f3a67da3f9143110a3ee5b51667aa2e78da22f8720923a915c95159456ba2da0a29d12dbc491f9149dca01ef7acff6d267519f66b3e346b6d19f3ebc7f86e57603137117fd4ea26515d4444f5f15391d9eb46282c82391dd8e41427d1274c257ed119d905bf9ccbea58fa8044d59a8702c59f"}, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:00 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x4200) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:37:00 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040)=r3, 0x1) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000380)="cc57baccd409cc1daf38c5c70acb317d5a7ea02125be01f0181ce155d4eb02841bf41e849a8c97c89d45473fa30d9f58f3e5ef5ccc06a6e2ee71492c61ea639c82b8f67ef2cf847a48092488453a005152ce423ec38528d544eb8f279a70bf83aaad12ab007b9f5ec773571686a330af8fadd89a6cdc85223558d628995c86b3a6f80abe", 0x84, 0x8000}, {&(0x7f0000000440)="ba50412b7413a41104dba94f98d2f5458ffcbfbfd411e3ccd490e1eb63709657023bb6d5718ef7b6be29aaf5714afcf94245ec2c4b6e7354b0c3d4ed33d7e56cae335444e91b5729010152607ccad935e83579efa93fb9d551f78ed1551e95173825f07b58afeee3b64991cd64a16b8bc285133494e6bdd7fbfd6c2ef0a10e239de3789b9f2325c201abc29b09ec52e35395140856f7c76c1e72cd75e874d02e9f891acc0b1e8c0635ea85b0b5e8910c1d688c7c3876c8b62ea4f5c2c2b1cb7a970b42f57e5a48", 0xc7, 0x5}], 0x8002, &(0x7f0000000540)={[{@overriderock}, {@overriderock}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@nojoliet}, {@cruft}], [{@fsmagic={'fsmagic', 0x3d, 0x101}}, {@measure}, {@smackfstransmute}]}) renameat2(r3, &(0x7f0000000080)='./file0\x00', r5, &(0x7f00000005c0)='./file0\x00', 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) setsockopt$inet_int(r4, 0x0, 0xa, &(0x7f0000000000)=0x1ff, 0x4) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 209.958238][T15435] loop5: detected capacity change from 0 to 128 14:37:00 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) accept4$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x0) 14:37:00 executing program 3 (fault-call:4 fault-nth:87): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 210.059547][T15446] FAULT_INJECTION: forcing a failure. [ 210.059547][T15446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.072642][T15446] CPU: 0 PID: 15446 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 210.081462][T15446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.091556][T15446] Call Trace: [ 210.094860][T15446] dump_stack_lvl+0xb7/0x103 [ 210.099453][T15446] dump_stack+0x11/0x1a [ 210.103640][T15446] should_fail+0x23c/0x250 [ 210.108066][T15446] should_fail_usercopy+0x16/0x20 [ 210.113098][T15446] _copy_from_user+0x1c/0xd0 [ 210.117692][T15446] do_recvmmsg+0x250/0x9f0 [ 210.122189][T15446] ? fsnotify_perm+0x59/0x2e0 [ 210.126946][T15446] ? __fsnotify_parent+0x32f/0x430 [ 210.132085][T15446] ? __fget_light+0x21b/0x260 [ 210.136783][T15446] ? __cond_resched+0x11/0x40 [ 210.141474][T15446] __x64_sys_recvmmsg+0xcf/0x150 [ 210.146448][T15446] ? exit_to_user_mode_prepare+0x65/0x190 [ 210.152190][T15446] do_syscall_64+0x3d/0x90 [ 210.156646][T15446] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 210.162583][T15446] RIP: 0033:0x4665e9 [ 210.166478][T15446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 210.186165][T15446] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 210.194646][T15446] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 210.202629][T15446] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 210.210603][T15446] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 210.218671][T15446] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 210.226644][T15446] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 [ 210.251235][T15448] loop5: detected capacity change from 0 to 128 14:37:01 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nfsfs\x00') r1 = syz_io_uring_setup(0x185, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:01 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0xd7ff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:37:01 executing program 3 (fault-call:4 fault-nth:88): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 210.414459][T15460] FAULT_INJECTION: forcing a failure. [ 210.414459][T15460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.427548][T15460] CPU: 1 PID: 15460 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 210.436519][T15460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.446655][T15460] Call Trace: [ 210.449930][T15460] dump_stack_lvl+0xb7/0x103 [ 210.454523][T15460] dump_stack+0x11/0x1a [ 210.458742][T15460] should_fail+0x23c/0x250 [ 210.463167][T15460] should_fail_usercopy+0x16/0x20 [ 210.468190][T15460] _copy_from_user+0x1c/0xd0 [ 210.472814][T15460] do_recvmmsg+0x250/0x9f0 [ 210.477284][T15460] ? fsnotify_perm+0x59/0x2e0 [ 210.481959][T15460] ? __fsnotify_parent+0x32f/0x430 [ 210.487070][T15460] ? __fget_light+0x21b/0x260 [ 210.491757][T15460] ? __cond_resched+0x11/0x40 [ 210.496531][T15460] __x64_sys_recvmmsg+0xcf/0x150 [ 210.501887][T15460] ? exit_to_user_mode_prepare+0x65/0x190 [ 210.507679][T15460] do_syscall_64+0x3d/0x90 [ 210.512094][T15460] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 210.518073][T15460] RIP: 0033:0x4665e9 [ 210.521960][T15460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 210.541558][T15460] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 210.549995][T15460] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 210.558069][T15460] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 210.566041][T15460] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 210.574012][T15460] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 210.582001][T15460] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:37:01 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x5) r1 = syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0x41f6, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) openat(r0, &(0x7f0000000180)='./file0\x00', 0x2c4000, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) sendto$inet(r4, &(0x7f0000000000)="93385a3a48ffa99ceb0a62645235edd49350c8745efaf437a0c80d99f52c61", 0x1f, 0x4000180, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000080)={0x2, 'veth0_macvtap\x00', {0x9}, 0x8100}) io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:01 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x5800000000000000) 14:37:01 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r4 = io_uring_setup(0xe9a, &(0x7f0000000100)) r5 = syz_io_uring_setup(0x2fb4, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x8, 0x1000000, r6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r0, 0x5, 0x0, 0x5, 0x0, 0x1, {0x0, r6}}, 0x7fff) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:01 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0x80000000}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r6, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff05}, 0x0, 0x20004085}, 0x53) r7 = mmap$IORING_OFF_SQES(&(0x7f0000e04000/0x4000)=nil, 0x4000, 0x1000008, 0x10, r0, 0x10000000) r8 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r8, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r8, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r8, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r9 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14, 0x80000) r10 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000480)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000440)=[r8, r3, r0, r9, r10], 0x5}, 0x7) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@rc={0x1f, @any, 0xf5}}, 0x7fffffff) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:01 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x110, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:01 executing program 3 (fault-call:4 fault-nth:89): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:37:01 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r5, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@ll={0x11, 0x1, r6, 0x1, 0xe9, 0x6, @remote}}, 0xffffffff) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 210.960536][T15484] FAULT_INJECTION: forcing a failure. [ 210.960536][T15484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.973620][T15484] CPU: 1 PID: 15484 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 210.982476][T15484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.992534][T15484] Call Trace: [ 210.995815][T15484] dump_stack_lvl+0xb7/0x103 [ 211.000434][T15484] dump_stack+0x11/0x1a [ 211.005114][T15484] should_fail+0x23c/0x250 [ 211.009538][T15484] should_fail_usercopy+0x16/0x20 [ 211.014658][T15484] _copy_from_user+0x1c/0xd0 [ 211.019282][T15484] do_recvmmsg+0x250/0x9f0 [ 211.023707][T15484] ? fsnotify_perm+0x59/0x2e0 [ 211.028383][T15484] ? __fsnotify_parent+0x32f/0x430 [ 211.033492][T15484] ? __fget_light+0x21b/0x260 [ 211.038161][T15484] ? __cond_resched+0x11/0x40 [ 211.043073][T15484] __x64_sys_recvmmsg+0xcf/0x150 [ 211.048018][T15484] ? exit_to_user_mode_prepare+0x65/0x190 [ 211.053782][T15484] do_syscall_64+0x3d/0x90 14:37:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '^\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000010) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r5) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r6, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x80}, @IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}]}, 0x34}, 0x1, 0x0, 0x0, 0x4810}, 0x40008c0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001700e1fd35be0beb15bf303704"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r7, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x40, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7e}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x5}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x850) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r6, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000845}, 0x48800) 14:37:01 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0xe803) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 211.058244][T15484] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 211.064176][T15484] RIP: 0033:0x4665e9 [ 211.068075][T15484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 211.087679][T15484] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 211.096094][T15484] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:37:01 executing program 5: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000000)="5293b8ffddafba50789a1f4b18d7f080c7aa29d59203da2ccd841aaf0bd2edaae5cbe9624a35129de9e398e8b6afc5e84ff23a29b29bdd09c2d01fb7aede154e3fc40e675b04c80bea5486a475b25f3b2a8d5826bf9fecdca0c4c8bd8c5b2916fcbd08e858762c5359623efa1076774c69a3bd491c12d8e5c939847e69f64539d2e82a0c2b4c0dc6771953fc9b97877987eb513a15ea1fba161a4839729b73468c734898eef8aadbd41371f9dba9ada525d41433bb42a7f0a6d8b73a022c499bcc", 0xc1) r1 = syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0x80000000}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000380)="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", 0xfd, 0x40000, &(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10) [ 211.104112][T15484] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 211.112138][T15484] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 211.120130][T15484] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 211.128144][T15484] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 [ 211.166340][T15492] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 211.207368][T15502] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 14:37:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r4) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r3) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="17b80000", @ANYRES16=r2, @ANYBLOB="0303000000000040000003000000"], 0x14}}, 0x0) 14:37:01 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x303, 0x1, 0x0, {0x3}}, 0xfffffffffffffc39}}, 0x0) 14:37:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:37:02 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x91ffffff00000000) 14:37:02 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x301080, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000000)={0x0, 0x40, 0x20, 0x2, 0x1ee, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0xc5674000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x110, &(0x7f0000000140)=0x20307e, 0x0, 0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:02 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r6, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) r7 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd=r7, 0x3, 0x0, 0x5, 0x0, 0x1, {0x0, r8}}, 0x6) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f00009ac000/0x4000)=nil, 0x4000, 0x2, 0x4000010, r0, 0x0) syz_io_uring_setup(0x2c75, &(0x7f0000000440)={0x0, 0xe076, 0x8, 0x3, 0x2e3, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)=0x0) r12 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000380)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x2007, @fd=r12, 0x100000000, 0x400, 0x9, 0x2, 0x1, {0x1}}, 0x401) 14:37:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r5, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x2c}}, 0x48000) 14:37:02 executing program 3 (fault-call:4 fault-nth:90): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 211.584583][T15535] FAULT_INJECTION: forcing a failure. [ 211.584583][T15535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.597762][T15535] CPU: 0 PID: 15535 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 211.606547][T15535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.616695][T15535] Call Trace: [ 211.619969][T15535] dump_stack_lvl+0xb7/0x103 [ 211.624576][T15535] dump_stack+0x11/0x1a [ 211.628791][T15535] should_fail+0x23c/0x250 [ 211.633269][T15535] should_fail_usercopy+0x16/0x20 [ 211.638305][T15535] _copy_from_user+0x1c/0xd0 [ 211.642897][T15535] do_recvmmsg+0x250/0x9f0 [ 211.647394][T15535] ? fsnotify_perm+0x59/0x2e0 [ 211.652119][T15535] ? __fsnotify_parent+0x32f/0x430 [ 211.657260][T15535] ? __fget_light+0x21b/0x260 [ 211.661970][T15535] ? __cond_resched+0x11/0x40 [ 211.666655][T15535] __x64_sys_recvmmsg+0xcf/0x150 [ 211.671638][T15535] ? exit_to_user_mode_prepare+0x65/0x190 [ 211.677362][T15535] do_syscall_64+0x3d/0x90 [ 211.681877][T15535] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 211.687769][T15535] RIP: 0033:0x4665e9 [ 211.691653][T15535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 211.711297][T15535] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 211.719705][T15535] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:37:02 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f000014a000/0x3000)=nil, 0x3000, 0x3000002, 0x10, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f000014a000/0x4000)=nil, 0x4000, 0x3}, 0x9) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:02 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x3, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000140)="7384", 0x2}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(r1, 0x2, &(0x7f0000000340)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x5, 0xffffffffffffffff, &(0x7f0000000140)="814a76554ef212774fe6b6b662d4e24a7f33402accf75efe4046688f062f8e49d8f6108a4ec620a3b72bf83b6e370b5a9f1955810fba6e6250f82902782e5e7c8475ed2d141086857fbfca2957596d2040986b9b7c85c9d7526dddcb8c64becf554b9aad8340db2ede66b91df9f33de59046", 0x72, 0xffff, 0x0, 0x3, r2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x2, 0xffffffffffffffff, &(0x7f00000001c0)="f9dae077f1d2c06718ec77a1d5b03b0ce45f8876e1e3d70f7484b7f42dade69e7921ebb1d94e2ff0d4f02da0ac324a0f13fb6c016442fa2453d47879fc58ed331a78d105c392af8591a90a89f414b7885841e367ff5b65194a9c0f5bff62e50cb95203e24b9bcfd047cd728cc41ade4ba5f34f0ae7f5d893047a673a7d7fc5dcc4af2ebef26f94ccab45aab688ab6e79fcbbf4029b9387fe182cf19dbea20f328c298e9438a815eb6e016adef8174f503d960713c1d54cf6f4c2d82899e24b541d0f034ef66a0dbb33c9062e19cb07f6712d4a1e7abceaa161b185e9e0afa75818835a13", 0xe4, 0x2, 0x0, 0x1}]) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000006407f812631804050023a3021fa961950bdd19128635983b405de546610a34a7c9dd6c067edbb05b0bc35d77d0824969541c61e9eef8da69238a2d3e88a8303827c63691cd6ba608adc1981b49b829d6cb1a74af065206d114bd2b892b1d8581caa719c1fe", @ANYRES16=r4, @ANYBLOB="03030000000000000000030000009cd44f7750026399cb3550212fd0f371660270cbfa9837bb1ca6a22a9b57b3fe034248d6b87e360aef3472c6bddadcf8feb059d4034d7371"], 0x14}}, 0x0) 14:37:02 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0xf401) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:37:02 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xb17a000000000000) [ 211.727671][T15535] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 211.735643][T15535] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 211.743607][T15535] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 211.751582][T15535] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:37:02 executing program 3 (fault-call:4 fault-nth:91): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 211.821446][T15550] FAULT_INJECTION: forcing a failure. [ 211.821446][T15550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.834567][T15550] CPU: 1 PID: 15550 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 211.843372][T15550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.853452][T15550] Call Trace: [ 211.856741][T15550] dump_stack_lvl+0xb7/0x103 [ 211.861391][T15550] dump_stack+0x11/0x1a [ 211.865545][T15550] should_fail+0x23c/0x250 [ 211.869963][T15550] should_fail_usercopy+0x16/0x20 [ 211.875018][T15550] _copy_from_user+0x1c/0xd0 [ 211.879605][T15550] do_recvmmsg+0x250/0x9f0 [ 211.884019][T15550] ? fsnotify_perm+0x59/0x2e0 [ 211.888802][T15550] ? __fsnotify_parent+0x32f/0x430 [ 211.893911][T15550] ? __fget_light+0x21b/0x260 [ 211.898582][T15550] ? __cond_resched+0x11/0x40 [ 211.903350][T15550] __x64_sys_recvmmsg+0xcf/0x150 [ 211.908287][T15550] ? exit_to_user_mode_prepare+0x65/0x190 [ 211.914044][T15550] do_syscall_64+0x3d/0x90 14:37:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14fcff3a6e1f7939a8fb262cafbd6a049b", @ANYRES16=r1, @ANYBLOB="0303000000000000000003000000"], 0x14}}, 0x0) 14:37:02 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r4, 0x5, 0x0, 0x0) [ 211.918460][T15550] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 211.924353][T15550] RIP: 0033:0x4665e9 [ 211.928240][T15550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 211.947925][T15550] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 211.956366][T15550] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 211.964339][T15550] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 211.972317][T15550] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 211.980298][T15550] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 211.988272][T15550] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:37:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="212df1e16b0af76a75f400100000", @ANYRES16=r1, @ANYBLOB="0303000000000000000003080200"], 0x14}}, 0x0) 14:37:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000cd8777a922a9d80926a2d7a17e17d1c3e3155daf0363256672de985641ba811e7a967a8016efb15a73b6eec175ba9f", @ANYRESHEX=r1, @ANYBLOB="0303000000000000000003000000"], 0x14}}, 0x0) 14:37:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="03030000000010000000030000793000"], 0x14}}, 0x0) 14:37:02 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r6, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) syz_io_uring_setup(0x4c83, &(0x7f0000000000)={0x0, 0x1c47, 0x22, 0x3, 0x385, 0x0, r0}, &(0x7f0000149000/0x3000)=nil, &(0x7f0000148000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r7, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x6, &(0x7f0000000180)={0x0, 0x989680}, 0x1, 0x0, 0x1}, 0x7) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0) 14:37:02 executing program 3 (fault-call:4 fault-nth:92): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 212.238489][T15579] FAULT_INJECTION: forcing a failure. [ 212.238489][T15579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.251580][T15579] CPU: 0 PID: 15579 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 212.260449][T15579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 212.270499][T15579] Call Trace: [ 212.273811][T15579] dump_stack_lvl+0xb7/0x103 [ 212.278398][T15579] dump_stack+0x11/0x1a [ 212.282545][T15579] should_fail+0x23c/0x250 [ 212.286965][T15579] should_fail_usercopy+0x16/0x20 [ 212.291991][T15579] _copy_from_user+0x1c/0xd0 [ 212.296578][T15579] do_recvmmsg+0x250/0x9f0 [ 212.301075][T15579] ? fsnotify_perm+0x59/0x2e0 [ 212.305751][T15579] ? __fsnotify_parent+0x32f/0x430 [ 212.310876][T15579] ? __fget_light+0x21b/0x260 [ 212.315546][T15579] ? __cond_resched+0x11/0x40 [ 212.320230][T15579] __x64_sys_recvmmsg+0xcf/0x150 [ 212.325205][T15579] ? exit_to_user_mode_prepare+0x65/0x190 [ 212.330921][T15579] do_syscall_64+0x3d/0x90 [ 212.335351][T15579] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 212.341314][T15579] RIP: 0033:0x4665e9 [ 212.345202][T15579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 212.364809][T15579] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 212.373249][T15579] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 212.381221][T15579] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 14:37:03 executing program 1: ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000000)=0xfffffffffffffffc) r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0x2000}, &(0x7f000014a000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x1, 0xfffffffc) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:03 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xd7ff000000000000) 14:37:03 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0xff0f) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:37:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0303000000009e28e66219fac52b"], 0x14}}, 0x0) 14:37:03 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r4, 0x0, &(0x7f0000000040)='./file0\x00', 0x48, 0x129000, 0x0, {0x0, r3}}, 0x1) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) r8 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r8, 0x0, &(0x7f0000000180)="620dd97623b5fc999e52a95cdfc33fb6c5a7943eb10faffd963829fd564b454df50f1fdb49a8f166aae2e33e31196b981ab514eba34a98e9b3562396d8a174575b1d402ea8bb1932a53e35d3e0738b5ee79e57cb4108a6f10f062685f09a89d023645708260116e95ee149350facfdc97fb73e20b2aa8bba538e6dd027ed83b028f98f0e3df6326a04686bc6848a10d804fd67f7a12969b8b21b07699f1d00f68c21af24b1240daf714fa3df8a73bb4187b6", 0xb2, 0x40015, 0x1}, 0xffffff88) [ 212.389232][T15579] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 212.397205][T15579] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 212.405202][T15579] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:37:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0303001808000000000003000000a5f5731f6ff1a396dec26102a3526e0c5c4a729dd0a8f5fe9d40723e2f45aea4ca078299061f7027d6b1ca2bcec64362990ba78867860c07d42aa64e16981aa3c8bfb8582f7b4012f44aac5e02178c58199d004c755e2e3f843ccf72c6fdb4335c34fb02b986b5ae3c9988912df5d9b089340e0104e818428526b4d0244b8264e78778d5b24a9bf7007e04c182f391590b2648ec97ce5144f13375cdfd76b1ec1c2ce9751c4dc8a2e6730e592ad1e49357bf73a678f02066de5615ce5050378c1cee416e13217fe84e35020b6a1daa08585e8d507316a97f40321246d64142eeb8a04daec8d87a6001a4a5c92d7159e66ff96850dbee4fb3da32e10c55affe1eebdf44ed652a26337f5c8387b292d6113697d4f54b00355f83a6123f1ce05e33bf6d64209a4fa50e3ffca0f77425b365a9300d381ba424bc3b4b0e838ae9d9"], 0x14}}, 0x0) 14:37:03 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) syz_io_uring_setup(0x3ac4, &(0x7f0000000440)={0x0, 0xd188, 0x1, 0x0, 0x289, 0x0, r6}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000c83000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000380)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) r8 = open(&(0x7f0000000040)='./file0\x00', 0x2001, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd, 0x0, 0x0, 0x3ab, 0xf, 0x0, {0x0, 0x0, r8}}, 0x4) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)="344efdf0cf53101f001c913eab5e7dee762661123bb621cc548e1d1479766b77fea8ec7123a2d111be340432a4a83a86715cb414478a3d65593cb405295511b18ee9b5ca91e788157cb341d2dfe120a044ea36e76c0c068c76f0b39e41f85fb974b5603f8e2f02d97eff2d81d7227e63214ef276aae776da80463c4ed452504433682dcd3feb985a85025fe3789e381687d964df295e60ee0e32666c668b24ee9ff9838402dd2a797ca53acf70ceb99072ef95c05268f9bbba7406d89b94825128fd02450f14316b926163c3", 0xcc, 0x9040, &(0x7f00000005c0)={0x2, 0x4e20, @empty}, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x42080, 0x8c) 14:37:03 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0x8fa5, 0x0, 0xfffffffb}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:37:03 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 14:37:03 executing program 2: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x1800) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:37:03 executing program 3 (fault-call:4 fault-nth:93): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:37:03 executing program 1: syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x20100) io_uring_enter(0xffffffffffffffff, 0x7756, 0x40f2, 0x1, 0x0, 0x0) [ 212.765034][T15623] FAULT_INJECTION: forcing a failure. [ 212.765034][T15623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.778140][T15623] CPU: 1 PID: 15623 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 14:37:03 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xd7ffffff00000000) [ 212.778167][T15623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 212.778178][T15623] Call Trace: [ 212.778184][T15623] dump_stack_lvl+0xb7/0x103 [ 212.778338][T15623] dump_stack+0x11/0x1a [ 212.778355][T15623] should_fail+0x23c/0x250 14:37:03 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0xffd7) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:37:03 executing program 2: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r4}, 0x82374d2, 0x7, 0x3}) r5 = io_uring_setup(0xe9a, &(0x7f0000000100)) r6 = syz_io_uring_setup(0x2fb4, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x8, 0x1000000, r7) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4000, @fd_index=0x5, 0xb3b, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:03 executing program 3 (fault-call:4 fault-nth:94): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 212.778417][T15623] should_fail_usercopy+0x16/0x20 14:37:03 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x267}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:03 executing program 3 (fault-call:4 fault-nth:95): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 212.778442][T15623] _copy_from_user+0x1c/0xd0 [ 212.778461][T15623] do_recvmmsg+0x250/0x9f0 [ 212.778484][T15623] ? fsnotify_perm+0x59/0x2e0 14:37:03 executing program 2: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x241) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 212.778505][T15623] ? __fsnotify_parent+0x32f/0x430 [ 212.778575][T15623] ? __fget_light+0x21b/0x260 [ 212.778673][T15623] ? __cond_resched+0x11/0x40 [ 212.778729][T15623] __x64_sys_recvmmsg+0xcf/0x150 14:37:03 executing program 2: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x5e59e07312000000) 14:37:03 executing program 3 (fault-call:4 fault-nth:96): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 212.778829][T15623] ? exit_to_user_mode_prepare+0x65/0x190 14:37:03 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r3 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@qipcrtr, &(0x7f0000000140)=0x80, 0x80800) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4040000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008001}, 0x2000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, r6, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x38, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5740b667}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3f1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x64a0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b8f}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x403c9262}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x64, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc65471}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1cc4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23d1e3b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2374e2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48ffe9b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x23dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52a454a1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd148}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x536caab7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x48dc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3d51}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4002) [ 212.778853][T15623] do_syscall_64+0x3d/0x90 [ 212.778873][T15623] entry_SYSCALL_64_after_hwframe+0x44/0xae 14:37:03 executing program 3 (fault-call:4 fault-nth:97): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 212.778980][T15623] RIP: 0033:0x4665e9 [ 212.778992][T15623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 212.779008][T15623] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 212.779028][T15623] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 212.779040][T15623] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 212.779050][T15623] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 212.779062][T15623] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 212.779074][T15623] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 [ 212.913804][T15638] FAULT_INJECTION: forcing a failure. [ 212.913804][T15638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.913906][T15638] CPU: 1 PID: 15638 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 212.913956][T15638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 212.913967][T15638] Call Trace: [ 212.913974][T15638] dump_stack_lvl+0xb7/0x103 [ 212.913996][T15638] dump_stack+0x11/0x1a [ 212.914063][T15638] should_fail+0x23c/0x250 [ 212.914145][T15638] should_fail_usercopy+0x16/0x20 [ 212.914169][T15638] _copy_from_user+0x1c/0xd0 [ 212.914195][T15638] do_recvmmsg+0x250/0x9f0 [ 212.914233][T15638] ? fsnotify_perm+0x59/0x2e0 [ 212.914256][T15638] ? __fsnotify_parent+0x32f/0x430 [ 212.914285][T15638] ? __fget_light+0x21b/0x260 [ 212.914302][T15638] ? __cond_resched+0x11/0x40 [ 212.914326][T15638] __x64_sys_recvmmsg+0xcf/0x150 [ 212.914350][T15638] ? exit_to_user_mode_prepare+0x65/0x190 [ 212.914371][T15638] do_syscall_64+0x3d/0x90 [ 212.914421][T15638] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 212.914444][T15638] RIP: 0033:0x4665e9 [ 212.914457][T15638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 212.914475][T15638] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 212.914493][T15638] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 212.914529][T15638] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 212.914541][T15638] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 212.914553][T15638] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 212.914564][T15638] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 [ 212.990281][T15644] FAULT_INJECTION: forcing a failure. [ 212.990281][T15644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.990330][T15644] CPU: 0 PID: 15644 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 212.990352][T15644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 212.990363][T15644] Call Trace: [ 212.990370][T15644] dump_stack_lvl+0xb7/0x103 [ 212.990395][T15644] dump_stack+0x11/0x1a [ 212.990411][T15644] should_fail+0x23c/0x250 [ 212.990486][T15644] should_fail_usercopy+0x16/0x20 [ 212.990511][T15644] _copy_from_user+0x1c/0xd0 [ 212.990531][T15644] do_recvmmsg+0x250/0x9f0 [ 212.990555][T15644] ? fsnotify_perm+0x59/0x2e0 [ 212.990573][T15644] ? __fsnotify_parent+0x32f/0x430 [ 212.990590][T15644] ? __fget_light+0x21b/0x260 [ 212.990604][T15644] ? __cond_resched+0x11/0x40 [ 212.990686][T15644] __x64_sys_recvmmsg+0xcf/0x150 [ 212.990725][T15644] ? exit_to_user_mode_prepare+0x65/0x190 [ 212.990747][T15644] do_syscall_64+0x3d/0x90 [ 212.990765][T15644] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 212.990789][T15644] RIP: 0033:0x4665e9 [ 212.990803][T15644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 212.990821][T15644] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 212.990901][T15644] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 212.990912][T15644] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 212.990922][T15644] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 212.990933][T15644] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 212.990943][T15644] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 [ 213.066226][T15649] FAULT_INJECTION: forcing a failure. [ 213.066226][T15649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.066252][T15649] CPU: 1 PID: 15649 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 213.066273][T15649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 213.066283][T15649] Call Trace: [ 213.066290][T15649] dump_stack_lvl+0xb7/0x103 [ 213.066310][T15649] dump_stack+0x11/0x1a [ 213.066390][T15649] should_fail+0x23c/0x250 [ 213.066413][T15649] should_fail_usercopy+0x16/0x20 [ 213.066434][T15649] _copy_from_user+0x1c/0xd0 [ 213.066572][T15649] do_recvmmsg+0x250/0x9f0 [ 213.066595][T15649] ? fsnotify_perm+0x59/0x2e0 [ 213.066612][T15649] ? __fsnotify_parent+0x32f/0x430 [ 213.066629][T15649] ? __fget_light+0x21b/0x260 [ 213.066668][T15649] ? __cond_resched+0x11/0x40 [ 213.066693][T15649] __x64_sys_recvmmsg+0xcf/0x150 [ 213.066712][T15649] ? exit_to_user_mode_prepare+0x65/0x190 [ 213.066742][T15649] do_syscall_64+0x3d/0x90 [ 213.066762][T15649] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 213.066786][T15649] RIP: 0033:0x4665e9 [ 213.066799][T15649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 213.066816][T15649] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 213.066834][T15649] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 213.066847][T15649] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 213.066859][T15649] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 213.066940][T15649] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 213.066952][T15649] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 [ 213.184301][T15655] FAULT_INJECTION: forcing a failure. [ 213.184301][T15655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.751463][T15655] CPU: 0 PID: 15655 Comm: syz-executor.3 Not tainted 5.14.0-rc5-syzkaller #0 [ 213.760218][T15655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 213.770267][T15655] Call Trace: [ 213.773542][T15655] dump_stack_lvl+0xb7/0x103 [ 213.778130][T15655] dump_stack+0x11/0x1a [ 213.782282][T15655] should_fail+0x23c/0x250 [ 213.786745][T15655] should_fail_usercopy+0x16/0x20 [ 213.791771][T15655] _copy_from_user+0x1c/0xd0 [ 213.796392][T15655] do_recvmmsg+0x250/0x9f0 [ 213.800833][T15655] ? fsnotify_perm+0x59/0x2e0 [ 213.805515][T15655] ? __fsnotify_parent+0x32f/0x430 [ 213.810622][T15655] ? __fget_light+0x21b/0x260 [ 213.815289][T15655] ? __cond_resched+0x11/0x40 [ 213.819966][T15655] __x64_sys_recvmmsg+0xcf/0x150 [ 213.824900][T15655] ? exit_to_user_mode_prepare+0x65/0x190 [ 213.830620][T15655] do_syscall_64+0x3d/0x90 [ 213.835064][T15655] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 213.840985][T15655] RIP: 0033:0x4665e9 [ 213.844899][T15655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 14:37:04 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xe803000000000000) 14:37:04 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r3 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@qipcrtr, &(0x7f0000000140)=0x80, 0x80800) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4040000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008001}, 0x2000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, r6, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x38, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5740b667}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3f1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x64a0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b8f}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x403c9262}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x64, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc65471}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1cc4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23d1e3b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2374e2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48ffe9b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x23dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52a454a1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd148}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x536caab7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x48dc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3d51}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4002) 14:37:04 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x20000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:37:04 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x40010, r0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) r8 = io_uring_setup(0xe9a, &(0x7f0000000100)) r9 = syz_io_uring_setup(0x2fb4, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x8, 0x1000000, r10) syz_io_uring_submit(r4, r6, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x6, 0x8, 0x1, {0x0, r10, r3}}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:04 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) r5 = accept$inet(r3, &(0x7f00000003c0)={0x2, 0x0, @multicast2}, &(0x7f0000000400)=0x10) vmsplice(r5, &(0x7f00000004c0)=[{&(0x7f0000000440)="1df6c6c7a7d0af7ae245569f5f095f120fcd3a466c582a4020732aa34f6848f4b888ecfe3f67c12a97af71536422d71adaf6f8dafd322439e31898b0c5de04e50b4d258f2bd96235279a5928877d44b6530f68ccf94146e5d6d321", 0x5b}], 0x1, 0x1) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r4, 0x5e1d, 0xd6f4, 0x2, &(0x7f0000000040), 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) r6 = openat2(r4, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x40581, 0x15a, 0x2}, 0x18) io_uring_enter(r6, 0x1f18, 0xd702, 0x2, &(0x7f0000000380)={[0x7f]}, 0x8) getsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080), &(0x7f00000000c0)=0x4) io_uring_enter(r0, 0x610e, 0x1174, 0x0, &(0x7f0000000000)={[0x221c]}, 0x8) [ 213.864505][T15655] RSP: 002b:00007fcabd144188 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 213.873082][T15655] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 213.881052][T15655] RDX: 00000000000000f7 RSI: 0000000020006040 RDI: 0000000000000003 [ 213.889027][T15655] RBP: 00007fcabd1441d0 R08: 0000000000000000 R09: 0000000000000000 [ 213.897002][T15655] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 213.904974][T15655] R13: 00007ffda0eeb54f R14: 00007fcabd144300 R15: 0000000000022000 14:37:04 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r3 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@qipcrtr, &(0x7f0000000140)=0x80, 0x80800) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4040000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008001}, 0x2000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb8, r6, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x38, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5740b667}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3f1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x64a0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b8f}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x403c9262}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x64, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc65471}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1cc4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23d1e3b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2374e2ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48ffe9b2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x23dc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52a454a1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd148}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x536caab7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x48dc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3d51}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4002) 14:37:04 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x39f3, &(0x7f0000000000)={0x0, 0xb9ec, 0x10, 0x3, 0x1ff, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f000014a000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:04 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r3 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@qipcrtr, &(0x7f0000000140)=0x80, 0x80800) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4040000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008001}, 0x2000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r2) 14:37:04 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f1, 0x2fac, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd, 0x0, 0x0, 0x9, 0x4, 0x1}, 0x1) 14:37:04 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r3 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@qipcrtr, &(0x7f0000000140)=0x80, 0x80800) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4040000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008001}, 0x2000000) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r2) 14:37:04 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x80, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:37:04 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf401000000000000) 14:37:04 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@qipcrtr, &(0x7f0000000140)=0x80, 0x80800) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r2) 14:37:04 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x50000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:37:04 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [0x1, 0x6, 0xb70, 0x36, 0x1ff, 0xffff]}, &(0x7f0000000100)=0x78) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x7, 0x0, '\x00', [{0x5, 0x2, 0x3, 0x2, 0x1000, 0x100000001}, {0x7, 0xae0a, 0x10001, 0xffffffff, 0x75f, 0x5}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:37:04 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@qipcrtr, &(0x7f0000000140)=0x80, 0x80800) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r2) 14:37:04 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r3 = syz_io_uring_setup(0x114, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r6, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x114, &(0x7f0000000140)=0x307e, 0x0, 0x4) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f000053c000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r0, 0x8000000) syz_io_uring_submit(r9, r2, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r7, 0x0, &(0x7f0000000000)="507eae4c164f5cc9942210408c925451eab78843286a723a1135", 0x1a, 0x20040000, 0x1}, 0x25aa4235) io_uring_enter(r3, 0x18aa, 0x546b, 0x2, &(0x7f00000001c0)={[0xffffffff]}, 0x8) 14:37:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) getsockopt$inet_buf(r0, 0x0, 0x11, &(0x7f0000000100)=""/192, &(0x7f0000000040)=0xc0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000080)={@remote, @remote}, 0x1a) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:37:04 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r2) 14:37:05 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x2}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:05 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r1) 14:37:05 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r2 = fsmount(0xffffffffffffffff, 0x1, 0x80) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000003080)={0x0, @multicast2, @multicast1}, &(0x7f00000030c0)=0xc) recvmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f0000000100)={0x8, 'batadv0\x00', {'sit0\x00'}, 0x2}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='ip6erspan0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:37:05 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xf5ffffff00000000) 14:37:05 executing program 5: r0 = syz_io_uring_setup(0x185, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000000)=0xa0, 0x0, 0x4) r3 = io_uring_setup(0xe9a, &(0x7f0000000600)={0x0, 0x1, 0x0, 0xfffffffe, 0x166, 0x0, r0}) r4 = syz_io_uring_setup(0x2fb4, &(0x7f0000000580), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_setup(0x1f24, &(0x7f0000000380)={0x0, 0x1f89, 0x10, 0x1, 0x1c5, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000400)=0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f000014a000/0x3000)=nil, 0x3000, 0x2000000, 0x50, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd=r4, 0x1000, 0x0, 0x0, 0x2, 0x1, {0x3}}, 0x2) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x8, 0x1000000, r8) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10002, 0x1, {0x0, r8}}, 0x6) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = io_uring_setup(0xe9a, &(0x7f0000000100)) r12 = syz_io_uring_setup(0x2fb4, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r11, 0x8, 0x1000000, r13) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r10, 0x80, &(0x7f0000000440)=@hci={0x1f, 0x3, 0x1}, 0x0, 0x0, 0x0, {0x0, r13}}, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000180)) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:05 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x1000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:37:05 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r1) 14:37:05 executing program 3: r0 = socket$inet(0x2, 0x5, 0x4) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000000)=0x2, 0x4) socket$inet(0x2, 0x4, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) flock(r0, 0xb) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) sendto$inet(r1, &(0x7f0000000240)="96d0a015aaf3947ba0581ae223a7e1509ae7dfd734aef4088424fd96a83db8b7cb027a427a05321e29f4e3ff148f870655bc93176d5f6910457dd8f58cfc8d77d87968f100595c4dc57235fd580b58fc2cece0573e9d45ffab14c5ca59654f2a9dce26a5439ff5b60740e2fd0279e4dc8359854e71bd51daf7d02d43716263a25c0e095d28a10b73c89ce39d74073fb5cff185da942d74007b768a4a8780c5434d9e", 0xa2, 0x8, &(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'}) r2 = perf_event_open$cgroup(&(0x7f0000000100)={0x4, 0x80, 0x3, 0x5, 0xff, 0x40, 0x0, 0x4, 0x10481, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x1, 0x2}, 0x10, 0x4, 0xf7c7, 0x8, 0x7, 0x9, 0x8, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xe) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) 14:37:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0x80000000, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0x1, 0x103ae, 0x0, r0}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = mmap$IORING_OFF_SQES(&(0x7f0000148000/0x1000)=nil, 0x1000, 0x1000001, 0x10010, r1, 0x10000000) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r5, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='macvtap0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r5, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r5, 0x3, 0x0, 0x3, 0xd}, 0x9) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) r7 = io_uring_setup(0xe9a, &(0x7f0000000100)) r8 = syz_io_uring_setup(0x2fb4, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x8, 0x1000000, r9) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd=r6, 0x7d7, &(0x7f0000000500)=[{&(0x7f0000000180)="52720d13797bbf0b20816df4d9ea0372b3f5d215c413675ddeecb58f5a604ba118fa4f3606b0e99600fecd7dadc259d130c9645b0d518869d2c89b2f5fb63f81ffc69810f990209047de13bcc065f07d387f3fc340b3", 0x56}, {&(0x7f0000000340)="bb388387140a7d6dd73f457e50e0478c8302bc074fe712a6a1f9b347ce36fea9143e49e4be43d1b814862ebc689dde2ffe4bf17beb789e27db66e1e5a6d652c607db2330c80a4a646a56ff014dc38ab407ae59204153a3030d253163aed90cc4f135e3fb85f28561e824229bf76de3a1a445e07cd3e152cfbfd0b5e6fdccd51be15b34bb1ec000779c3d275012fcb7ce320e0a5c1cf4500428c38a4272579f3e152d8c5c025cfdc445", 0xa9}, {&(0x7f0000000400)="fd15c41eb6b87642a51a0238e5af2e78281b3ad584f2c175de72f90d6a0eb511ee3552efb27dc5f0dc4191caaf393fcd41904f53e81c51612154289eb201736e68a42789e133a3753a69d9be5edcafcd44d64f076753862fc4983fe3f9e1e0f1c1f02dd7297f0ca2ebd9b429dc53a39dcb400e656b30ca98e6426d9e974e6cc13dbe7da7566d5a5ec82daa69c6ade236e79a0f002848d9febca8024b60eb1e49b3cf9ee05dd437b9b56f5daf484ce9f98ca45775f33463d5616110754d879852dcc4bfad5c419dfd8b0f50f9cef3c9e60b1b6b2864b61e59ec9edd3d52cf94b7ab9dd1bd09994a30a1837f638d7634105399", 0xf2}, {&(0x7f0000000100)="5dc07c4732ae22102d42bfce96f98b4c152c175594", 0x15}], 0x4, 0x4, 0x0, {0x2, r9}}, 0x6) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) 14:37:05 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') preadv2(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0x24}], 0x1, 0x401, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r6, 0x714a, 0x6a91, 0x1, &(0x7f00000000c0)={[0x7]}, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r8}}, 0x8) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:05 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r1) 14:37:05 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff) 14:37:05 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff) 14:37:05 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xfdffffff00000000) 14:37:05 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) recvmsg(r0, &(0x7f0000000600)={&(0x7f0000000040)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000100)=""/36, 0x24}, {&(0x7f0000000140)=""/105, 0x69}, {&(0x7f0000000240)=""/166, 0xa6}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/67, 0x43}, {&(0x7f0000000400)=""/107, 0x6b}, {&(0x7f00000001c0)}, {&(0x7f0000000480)=""/182, 0xb6}], 0x8, &(0x7f00000005c0)=""/19, 0x13}, 0x10001) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:37:05 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff) 14:37:05 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000100)=""/6, 0x6}, {&(0x7f0000000140)=""/191, 0xbf}], 0x3, &(0x7f0000000280)=""/4096, 0x1000}, 0x1ff}, {{&(0x7f0000001280)=@generic, 0x80, &(0x7f0000002380)=[{&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/85, 0x55}], 0x2, &(0x7f00000023c0)=""/143, 0x8f}, 0x1}], 0x2, 0x22, 0x0) 14:37:05 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x2000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:37:05 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r0) 14:37:05 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) sendto$inet(r4, &(0x7f0000000040)="a2e2c4f624cacb8095778f22f7edc0352416f97244c97d5e0ee3aba2887dc7b10b2a038e62bcfa1749ebdedf081393073ed0527ccde256db169130eed37d3ff45fe6463dd0712a116790f40ab7a3bfda3c1e549d1e84098add8ca8ac2ed9344eb9d8b96fc8f11f9d4f3d139174dea4067b5974b165b0b61c324199e8927e2a7827776f6b2d08244fd0f029b9abfa70b42a09d6d721336708ff", 0x99, 0x40081, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:06 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r0) 14:37:06 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xfeffffff00000000) 14:37:06 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0xa, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:06 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x2040000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:37:06 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x256}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r4, 0x3a14, 0xd7a8, 0x3, &(0x7f0000000040)={[0x570]}, 0x8) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x48040, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000180)={'filter\x00', 0x24, "7b3014fa4069923ac7feb268257756a0af90dc137402e185b94cf63f9b7074d5142d4307"}, &(0x7f0000000380)=0x48) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:06 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r0) 14:37:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = syz_io_uring_setup(0x184, &(0x7f0000000080), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000149000/0x3000)=nil, 0x3000, 0x0, 0x810, r1, 0x0) r6 = io_uring_setup(0xe9a, &(0x7f0000000100)) syz_io_uring_setup(0x6dd5, &(0x7f0000000540)={0x0, 0x6fbf, 0x8, 0x3, 0x326}, &(0x7f000014a000/0x2000)=nil, &(0x7f000014a000/0x1000)=nil, &(0x7f00000005c0)=0x0, &(0x7f0000000600)) syz_io_uring_submit(r7, r3, &(0x7f0000000680)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x3) r8 = syz_io_uring_setup(0x2fb4, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x8, 0x1000000, r9) syz_io_uring_submit(r5, r3, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x5, 0x2007, @fd, 0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000380)="101aff5172289a7b8bf8e8f77ce1c0705654b93a64f5b0fe77be18bbb9e24ef7b564c004a6dc853c4d245ff37af16e2980acadce431ad4edfacde1c3c641c364f776b181d881603a5ba1c62789a9fc5ddc95741c756f1c3227e17f06703115c9bacf96926da6da31e5adccb7039405e377b7115f5b88780f2db9e844585816f5fe", 0x81}, {&(0x7f0000000440)="16a60573a528ae410cb75805fa0331c732f945efbac4d99c96bef6a8f8c6499522a499a8c40da21a331e238ac2f4cab14e2224189f7d5ec0af57ca42ead0e37ffcb73e860dfdb1e26b8214dae21bff03cbd1987ac18a02ec2367a1b9c5c2ac1c1246259ba8cb3477cdc29e7537c756a52425b9761d9dfb542e1181e619adb73cd8c45d1c4d9625bdff3d9697bcf7f68394a5c92efccde09e49f59aa0ac9b8b7e71061aa8dae28567c1e95c9d7f266e3ff843b20955da5c8515648b110b44a3d1980f9b6a648af0d8b0", 0xc9}], 0x2, 0x2, 0x1, {0x3, r9}}, 0x9) io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:06 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0x0) recvmmsg$unix(r2, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000440)={0x64, r1, 0x101, 0xffffffff, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x4}, @NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="c5e7c47b2bdf"}}, 0x0, @random, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @val={0x25, 0x3, {0x0, 0x0, 0x7}}, @void, @val={0x3c, 0x4}, @void, @void, @val={0x71, 0x7}, @void}}]}, 0x64}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) r4 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r5) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001780)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f0000001880)=0xe8) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000380)='./file0\x00', 0x401, 0x6, &(0x7f00000016c0)=[{&(0x7f00000004c0)="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", 0x1000, 0x3f}, {&(0x7f00000003c0)="f985022137827005ef10fbd572ffb025cbbdd6f5e68b89b6151da4325f1156ab9001dc77467399ed86d09e0a4f5b08abe5aafcbb50c9c3d7039d8f9887debb03e71a0a85a663864d324fffc40fd03ee1a4b6a1b38aacaaf53407ace203d5", 0x5e, 0xa4}, {&(0x7f00000014c0)="ae4f01afcc140a4068a4825e6ce6715b64fdfe5df86b7fbc3fef18625b29281faa9834e3cf28315f99118477078bf846275a93a7452422c3ac2796047ddf0aefeb5ef22412055b404b1bfd2346b80291ff1db8ecbb402ef0ce0d4269475f1c515389d74c73dac5a150cfde7e5c4be7278ca96b22125ef1560b4657cfc0d89b7133e354f74e651b8b00428703d36bcbec230b5ac74d4c602056c7c37e88e75803d6048ff1e05b4f4e4d2de0ecf851aa3f0f63b78c456c71e7fa85ead97e1a9120d1e679c181970a3c727e2565e3cebd", 0xcf, 0x5}, {&(0x7f0000001a40)="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", 0x1000, 0x79a1}, {&(0x7f00000015c0)="2750ba54dd60a5bd05ff04a5b4c26525fc5fa717c7cce759a7e99af919ecd813f6202094abaccdb89d981d249d95f5394ce1ba4c1e77ca5d846e51a874e54e4cb871155a24d6476bdfc8348b4a9e1d7f87994ccfa3c82fdc025b023ff17b10be903a04e38679697e28f05489a10c01f817382de3a7d3e7a0d8f5aea98351c4794a2ccf37b338351e73e97b86d5a302430769b36a904698237de12dc2e9004fe97351ccc4", 0xa4, 0xffff}, {&(0x7f0000001680)="c36d83", 0x3, 0x2}], 0x1000002, &(0x7f00000018c0)={[{@abort}, {@nodelalloc}, {@debug}], [{@subj_role}, {@euid_eq={'euid', 0x3d, r3}}, {@fowner_lt={'fowner<', r5}}, {@uid_lt={'uid<', r6}}]}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r1, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x28, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x400}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6c03}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2ca}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xffffffff}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x200c884) r7 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r7, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:06 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80800) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000180)={0x0, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e23, @empty}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x22, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)='geneve1\x00', 0xe3, 0xffff, 0xfff}) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:37:06 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r0, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r1) 14:37:06 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r4 = socket(0x4, 0xa, 0x3) write$binfmt_misc(r4, &(0x7f0000000000)={'syz1', "9edc9c8c3f6c3533ba8b29a46f3c8afc5f69fb629beeb6064c33c32f3021fb95379aec4b59cec01ea3b742db25fb7e1a59d6bd1f7c7aeaca4ee46955ea8bdbdcadf37040dbbf4d6558d89da063d197def20bbd917524d0160e2e63421a046835c5dbc669e696985a77242bdfd714f371af4645634e70292e4d65b85bbf17cc4450d27628354dcda0c7ce2da2d779637445f2a827a8a8d5d035059108cdbb31b7880099649ccb2132b0963be3bf55f06cb3f193d11b8bf5608e"}, 0xbd) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r5, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r5, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r5, 0x80, &(0x7f0000000380)=@in={0x2, 0x4e20, @remote}, 0x0, 0x0, 0x1}, 0x9) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x10, r0, 0x8000000) r7 = eventfd2(0x1, 0x80000) fcntl$getown(r7, 0x9) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x480801, 0x0) syz_io_uring_submit(r6, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r8, 0x0, &(0x7f0000000180)='./file0\x00', 0x83, 0x800, 0x12345}, 0x0) 14:37:06 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xff0f000000000000) 14:37:06 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r0, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r1) 14:37:06 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000080)=0x9, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0x0, 0x22, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @loopback, @private=0xa010100}, 0xc) 14:37:06 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r0, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r1) 14:37:06 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x3000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:37:06 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) unshare(0x60400) r1 = mq_open(&(0x7f0000000140)='eth0\x00)m\xb7w`\x1c%e\xd1\n1\x94\xc0\t>C\x98\xf1\x85*a@{9z\b\x00\x18\xa0]\x19ST\x1b;)\x92sI\xbe\x02Nx\x11\x88\xc7\x93\x02\x88\x1cm\r\x1b\t\xb3$\xff\x9b\xe9\x95\xca\xd4D\x90\xbe)\x89o\xd1\x91\x8c\x12s*(\xaf\xf1\x1e\xfb+\xc9\xfc\x04\xc7\x9b\xba\x0f\x90e\xe6l\x1f\xd3\x98\xd4\xb6\xfe\xc6\xe7\x7f\xc1\xe1\xc9\xb6f31\xc9\xf3\xf7\xafed:\xbc<\xc59IP\xb3\xdb\xf0\xd6r\x94\xb4\xeb6\xe2\x0f\x06L\xd2\xa6\x11\xca\xff\xe9u\x00\xa8+\xae\x8c\x11\x93\xee\xd5\x97\xbf\xf2\v\xf0*f\xbc\xeb\x7f\xb0\xeb\xab\xa3@%\xff\xfa\x93m{{y\xf4\xf4.\x801\x17\xae\r\x11\x16\xe0\xe0\x81\xc4\x99E\xf1I\xb9#\xa0\x9e\x9a\xa7dg\\\xcbt\xe8\xee\x03\xb8vT\xbcW\xd3p\x94x\x03\x00\x86&\xa3>i\xd0\x94\x11\xf1', 0x842, 0x0, 0x0) mq_timedreceive(r1, 0x0, 0xed9fc23d, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:37:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r2) 14:37:06 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:06 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000ac3000/0x4000)=nil, &(0x7f0000cb7000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r6, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) socketpair(0x1e, 0x0, 0x8001, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(r7, &(0x7f0000000440)="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", 0x1000, 0x24000080, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x0, @fd_index=0x1, 0x6, 0x1ff, 0x7, 0x1f, 0x1}, 0xad3f) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r8, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r9, r10, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r11, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000380)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x4000, @fd_index=0x9, 0x7, 0xff, 0x6, 0xc, 0x1, {0x2}}, 0x4e99) 14:37:06 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@ipx={0x4, 0x7e, 0xffffffff, "86223231b095", 0x9}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="3ccbda64d7e19834c9595ed58909b1473fb5e1eb928be2215ca9e0405d449b03b75938dfd2b78c1826a469c5a7f5b2e494eed811c725c1f165121917aa756fc04089f9e81c06a5d0cf98883e710feaf79455289f5ef9a0dffa2b054e6d8c4bea95a41c0da996e655b06d837360ee42698542458afe5eacd82f44bfd2671c003aa31490ad24fd763888d87659ec908920f2", 0x91}], 0x1, &(0x7f0000000240)=[{0xe0, 0x10c, 0xfff, "5b5a660871e03e11aa86f49cb2168c98275e5b47fa78c3ab7b7d84b06ea4699bd8e1dfb8b144e35e0466f6017a083bfc6292437c9d96666351e1fee45ecf8509b7ab7b56bcfe61d34660783d699ea6fa696eb725c087057675b5b82c780c9aa1f98ff10a41c8210ecad32ea7a5bd4d41c74f09e0a37f38f177ff789a9c5bd45be20a9d03ac5d7f37f5530e9baa89a0cbbcc970f12f0986dac335e00bedbe00774fc78a7afe870108a716538d4e815b75ed4749b3642a4f9e782a5c1be9d63bfe0073c05a0e8fc02d551d80fa"}, {0xf8, 0x101, 0x7ff, "2f2acfa24a9bb48e2217f01edd45b53336bc9db5c36a10d3bc58ace3c6d9bbd7f24e6fe047408404a7796c982b4454adc8a186022e58688ea62596596a96c887005451336920e6dd0b92c5a888d7387061cc998e519c402799c22482c3f9f4f54b24e2aec6ad8f3983e419f6f949e75f736521f0546bf8bc7783660a1ba6447bd37ab4ec2b5ba6e66aeb01e9e8822b9cc8672f010046f1eec1467754becb2fac004df884d32ec15822bc7027bfe5e316caf783482a33d58965f7d0a785bdaf0188f9bd1158e37550ff49228d9296c4d100ea7e38a980e121fe71fabb2b9424d0b3ed2f8cab28"}, {0x28, 0x0, 0x1, "f7d6ffe5249b1d7bb4e25e53e5f0b11cd6355dde3f52e3d3"}, {0x88, 0x10b, 0x1ff, "98fd7f487cfa29b8449f361b4550d4482a332a515db541c8e96ba98a707a8de1f03237185acf19ca91cc244fd9cdf0f38f7943fd32c2323fef51eb79f484c8b222ac8a6c20511dc30734b067b4219e01ab51d7e33b296f497f39317dcec17dce3f4fcd828b9687f29601620e4b2a13845460385317dd8c"}], 0x288}, 0x40000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) r1 = accept$inet(r0, &(0x7f0000000540)={0x2, 0x0, @loopback}, &(0x7f0000000580)=0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r1, &(0x7f00000005c0)=0x80, &(0x7f0000000600)=@x25, 0x0, 0x800, 0x1}, 0x7ff) 14:37:06 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r2) 14:37:06 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r1 = socket(0x10, 0x2, 0x0) recvmmsg$unix(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffe}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x563}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 216.194029][T15890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15890 comm=syz-executor.3 [ 216.237287][T15893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15893 comm=syz-executor.3 14:37:07 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0xffffffff00000000) 14:37:07 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r2) 14:37:07 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) sendto$inet(r0, &(0x7f0000000040)="ffc819fbfb1b1831dde13bda", 0xc, 0x4, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) sendto$inet(r1, &(0x7f0000000240)="ea8dc992cc470f333e528cd996762da4ac1bf87c374bef337e3be7be228d061c4d7539376755291455231788316fd84e6fccfaca3d882b1e34f082f1cc75fdf48475a2901d3a90da8090812b44f4c77c45bbd5beffc1ccacc4d5f1f96894e6f2fad1c0e020ab4e7a68cd03cb91e5fc6840a726bde640556231a963963c527f7049bcfd14ab5dd23b5046c106054aca59faf851c927e86ccc8e0449b39bc0752c28927e7dfe09190a0ee936b076d2f83b716cef80f95ee7f951f4966e40aaa7cea2fdc178f596", 0xc6, 0x40040, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10) recvmmsg(r0, &(0x7f00000007c0)=[{{&(0x7f0000000180)=@tipc=@name, 0x80, &(0x7f0000000700)=[{&(0x7f0000000340)=""/51, 0x33}, {&(0x7f0000000380)=""/248, 0xf8}, {&(0x7f0000000480)=""/239, 0xef}, {&(0x7f0000000580)=""/190, 0xbe}, {&(0x7f0000000640)=""/144, 0x90}], 0x5, &(0x7f0000000780)=""/8, 0x8}, 0x7f}], 0x1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = openat(r3, &(0x7f0000000940)='./file0\x00', 0x20a002, 0xcb) sendto$inet(r2, &(0x7f0000000800)="d36ba68c2a23c47cdf0a59b0077f301a2e9a1cb1112de4644fcc55725eb7bdff5bf66dfc9e0cce5e4df705175c84d663ef65b253baca5766b0fd4be43fb6bd98dbee95fda836672800e9fefff5241746cf0cb17f6557b6e95b483749483605588ed3be15a530d564292332dcea04a49cf4b36ac2a0f941b85f71804df686dac6401976cac2ffbb0865c7f4f1402f662ed834b703446e9f826eea93c4c00aa47515c4c9c61f63a0787d4466dd6a2c75b89be7530b2e09fdb7a912c3f419e1792bfdb99c06ca3368", 0xc7, 0x44000, &(0x7f0000000900)={0x2, 0x4e22, @remote}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = fork() rt_sigqueueinfo(r5, 0x9, &(0x7f0000000140)={0x0, 0x0, 0x80000001}) wait4(r5, &(0x7f0000000080), 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002200)=[{{&(0x7f00000009c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000a40)="adc5eb0a17e89d2f4ade62b71744cf9367baa3f19df5b446f2d05b1854b7392992b3d5509b094943a482c3686ab97c3b8d03b53b0b53d0ad4ae3b2c6ef228f92546ccaf3048483e56cff9f25773bb477c380fe3a2cd59b70e286348b4850a92ea14f0b385dc9ef9dc61684", 0x6b}, {&(0x7f0000000ac0)="51f6443d443cf0ad6ad8d9e844ad9ce524103c2580566984e829d9abcc3e1a275b6c29e7c992a8186d603af7fdd0b65c96b2846e00feaf8a7afd242082abc97eaca19b478e17b6f5b3762d2bad43bf2dd1025dc63774", 0x56}, {&(0x7f0000000b40)="7aa37c76e91c102ee139b39a9d2d5c84c341d5", 0x13}, {&(0x7f0000000b80)="12c2578600bef594d31bbd7a8c2378a5d3bdb98f4913e26725ba1c8ae243909bb944b8ad25982279d3074782f265d271bd717e551fcaa7750dcf090b1d4a0b1e2d0d236e0ac671ce840ec0695808ebd710e5c8cd60779b72e3a993ab0df8a8862903c65a6518e4e3fe368f12e1cba912aa7ab53360e6132fde023f8dddf39e916bc1d54061c18e993d7edb11a1581e2d82412245eb7541e9058ea9fc6dfa48be6f7b064b1bdcb565223ee90bc4bee9bf31eb57", 0xb3}, {&(0x7f0000000c40)="376d8166", 0x4}, {&(0x7f0000000c80)="3e53e9f162834b9743024c0f70502395d961abc9033a1d77ef6e8054c5c5fe43ee2d30dae76ea428aa1b44cb6e36271aa4e1ba70bd2e8ddd126cdecfc6e5004f3e2ab4aa4b50d86e6bb8173d913dbd4317efbbfdaf0809e8ebcb3e", 0x5b}], 0x6, &(0x7f0000000fc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x4040000}}, {{&(0x7f0000001000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000001080)="0f83449a33f52a5584b7514d953f4fbecd7d0823b852b4072615277a1f6bfdfbcc0e4d1eef950be261ff2990e3535e844d8370ac6cbaadd566abd3d51b3c104b3248322bbfd564023bab080a0056e70936d089ccbd8aad0b4fc43fc3f34008bcf166d2d1cd80b68f9d6826044ad26fd7e88052d7572122b254f7a58a28b04d386ff18bdc82fd638481d12cace9649bc9aea3471f6cc841c7df80fa540e337bf0c6f89f90cc8e585210177437a20013d1849dcb34bb13cd4b51af347709e79a56b9e1c7715df038489c27ab65a056da71ab25712cd81466a660d559cb5e9992e6c9214821", 0xe4}, {&(0x7f0000001180)="1f12eb74f9d3dc1e6898248fb732a32714bb192066afbb9065c1346462ccc298558767157e6e12a0959f2b0d26ddc490e3993d6477e6b8b922c51500fa898bc47178a46b4745c6e00bcbd61a6a68fab438f0856e33575521e2920eedc9b45892bdba2f78344db7aff4f4c6f44023675c8d0501056d23e53ae63fc5e36b97679c578604f7a0a9066fe7bf31f4afc46c12215173a888c5d96bad56c391f42f764ea4f3763d91006a9a53c619edf8d6cbbbd2", 0xb1}, {&(0x7f0000001240)="48889fcabe0797af0cdd568773b236a9465845a0fc569826fbce2077", 0x1c}], 0x3, &(0x7f0000001840)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @rights={{0x24, 0x1, 0x1, [r0, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0xe0, 0x800}}, {{&(0x7f0000001940)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001a40)=[{&(0x7f00000019c0)="81ada674e32db560674a569be51d5848db20abf90bb23be24e1f00f7a936a5c200b19e9f92e77dc7001e8464d16736054f5593bbda72092bb36391f2bfe193c5bd1fddec199be3e1dc5fea7fa2a89ea40a33d5eb6f377519824526ed8bacb940311350672d9018f2ca1ec54eff0dcd8fece209502de1934cd2273f07b7416976", 0x80}], 0x1, &(0x7f0000001b00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r3]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000001b80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002100)=[{&(0x7f0000001c00)="1f263bee1f3605fde19030026255fc09dd5ab4c36fca1eb74522ff946a3badf7896db12f49fc986daf353662b1b7993dbbc63b9068b6a9770fccbae38a5e5a513f4adbbf76c731c35fc673af2085efd02d173619f8c62deab0bce3fec1424061b162c44454c0ed857b3cf7cfd62fc037044fe51bfb89efa69d95679dfd5681634e20da6dda27259d8cef4c57737201f4f93303c73ed4251b8b8a58bfa9571bd75db40731812bf88dfdd4eb03a437756884872087245816cc0a467d5f526bf682d095602be3df858e53665d3e06dcac94ad17cee407110d7139fb74398b4fc7b61e479604d14cfd652c8378be8c9809a51286", 0xf2}, {&(0x7f0000001d00)="e1adc861531061b6f58b1517ced4e270f55c85886efafcf42e51c82ec1990d7a49fb33146dfcc3489e63dfe61679d85f8957bb7508e50e987f94ad56ec82d9eb6f0cfe0d59ca0a17cd3446d963a7e36af512131308e24ca78706b3dc400c49c6c21049f56be1520885777a2b900d9594e687957693c2a2868aa79761e7abb62e4f9f46c7d6a174b632e6fc230f0d1a960cfe1ef35b9389b028a83b01b9ef2a0a4394b7c149056d47167cf7a72791074e29d1027915698201f63f5f15", 0xbc}, {&(0x7f0000001dc0)="6bb03ee0f2154090f8cb2989f2c85f052a2a05d49aee02ba8cc05852ff812a328371842f39cae7367e430336ab7d868fb0d40b2da2edd8b503549bf924b6f11b5bce1e34d807cde259ba7bbf76bdbd5e8ca339a066579d46083b49df77d1200912d47b7c77bbff9d866910fe03bca8591a678944a7d6", 0x76}, {&(0x7f0000001e40)="804dd7003a3d017f6db6f64c8268be8ef02d490b527b5902d0857b40fc17f8fb90b5bad94920faeb96f27bb6a3c49e0f547a25d9182e2c80ccc0f2d9266d43", 0x3f}, {&(0x7f0000001e80)="54d5e0537c5fb29dccb776272cde348131051217f4b3c6bc4e7bfd38532c506fa2c35e9f75d140840debae3e1ee70b79e885dc7866f23c06f47d34f925f337e7aa0ede4189cd7c1381bf5c132ac44158f1c1da7170365935ba1ceae416c0b8032dd9d7e45b8e19d1a36a018b00100e24a672d9ee055aa90f101f85215aa88037fd6aae44c463d5ef96b7fbac810c1f", 0x8f}, {&(0x7f0000001f40)="2ce77246545b1c08c40b7119cf2200469645e1b6a36f43e6e4b6f0b1febd1974d8fd04e89763cfe2d4f9067a32febe16d1a0b06b27d8c23f1b0f58ff07376c1f973e0f4e7dd2e27ac541f45697963fd09c13373ab099e7ce505eceee87a6cc88ae2b90f0471b7be9b09fb8cd601ca9e67225a8757cffd460d6e9b6e10ce4756a4eb9b306b76d13d49d84c0ac72e1d81d87ec0264bfc4caa846074f20619649056a420a6be3549815cefae5a6ed", 0xad}, {&(0x7f0000002000)}, {&(0x7f0000002040)="280285fc605e8701ab6ab1133a1c73d56f5411891581ff9ab56cd9b9d96d919fc0d59ffd91be5f9a48a6b5273ce6f27a688c38c4fffe8a3b28b949256062", 0x3e}, {&(0x7f0000002080)="ee60d05a24f369712577df25fcb693ed35d868ac207dae784c7e4125caa2532385354e314854033d425815c8a69c6f0bbc780931e99e43b00a51bc9b9e0b80766cc79c99ca0a7749", 0x48}], 0x9, &(0x7f00000021c0)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xffffffffffffffff}}}], 0x20, 0x8051}}], 0x4, 0x80) 14:37:07 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x40010, r0, 0x10000000) r4 = io_uring_setup(0xe9a, &(0x7f0000000100)) r5 = syz_io_uring_setup(0x2fb4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x8, 0x1000000, r8) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r8}}, 0x80000000) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x2000, @fd=r9, 0x2, 0x0, 0x0, 0x4, 0x1, {0x2, r10}}, 0x6) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) r11 = signalfd(r0, &(0x7f0000000080)={[0x5]}, 0x8) r12 = io_uring_setup(0xe9a, &(0x7f0000000100)) r13 = syz_io_uring_setup(0x2fb4, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r13, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r12, 0x8, 0x1000000, r14) io_uring_register$IORING_UNREGISTER_PERSONALITY(r11, 0xa, 0x0, r14) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, &(0x7f0000000380)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x10) 14:37:07 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x4000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:37:07 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r2) 14:37:07 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = signalfd(r0, &(0x7f0000000600)={[0x9]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0xfffc, @private=0xfffffffc}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r4, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r5, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r5, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) dup3(r4, r5, 0x80000) 14:37:07 executing program 1: r0 = socket(0x10, 0x2, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)={0x28, r2, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x57}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x48001}, 0x801) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000084}, 0x4) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x6b}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8011}, 0x8800) r4 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x6af2, &(0x7f0000000000)={0x0, 0x7, 0x2, 0x3, 0x30c, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000014a000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r8, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r9, 0x7, {0x0, r4}, 0x8, 0x0, 0x0, {0x0, r10, r7}}, 0x8000) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r4, 0xd5f5, 0x0, 0x0, 0x0, 0x0) 14:37:07 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r0, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r1) [ 216.707896][T15921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15921 comm=syz-executor.1 14:37:07 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0xc64, &(0x7f0000000000)={0x0, 0x64bd, 0x8, 0x2, 0x338}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000149000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x346e, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000380)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) r9 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r9, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r9, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r9, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r9, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x5, 0x0, r8, 0x0, r9, 0x2, 0x0, 0x1}, 0x2) 14:37:07 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r0, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r1) 14:37:07 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0xc409, 0x1, 0x10200, 0x140}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x0, 0x0, {0x0, r4}}, 0xfffffffc) io_uring_enter(r0, 0x45f5, 0xa0b, 0x0, 0x0, 0x0) 14:37:07 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r0, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r1) [ 217.013680][T15927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15927 comm=syz-executor.1 14:37:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x17) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040), 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r1, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:37:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r2) 14:37:08 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r6, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x2, 0x0, r7, &(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x800, 0x6000, 0x1}, 0x4) r8 = mmap$IORING_OFF_SQES(&(0x7f0000848000/0x3000)=nil, 0x3000, 0x1, 0x13, r7, 0x10000000) r9 = io_uring_setup(0xe9a, &(0x7f0000000100)) r10 = syz_io_uring_setup(0x2fb4, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x8, 0x1000000, r11) syz_io_uring_submit(r4, r8, &(0x7f0000000380)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r11}}, 0xb2a) syz_io_uring_submit(r4, r8, &(0x7f0000000500)=@IORING_OP_WRITE={0x17, 0x2, 0x4004, @fd=r3, 0x7, &(0x7f0000000440)="38ff7699478fe8fdbab53ff49269095ce522a5f2ebd84e3d84e605869843787bb509509d4211b831876863f55c7fc1702406edcd3d98b063e95e53718b9a236746eb25c01694a2f09c757a14d45c2e3675c2edf71931328b3250fc3be816ab54615cd966a01b449c2e951f04c53fb166cf651b336ddf27bfbe5b99d8f42cf7cfeee96ae5446537c55f19032e5a929da2f15fe1514fbfc9a441a77348", 0x9c, 0x8}, 0x7) 14:37:08 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r7, r8, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r9, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) r10 = io_uring_setup(0xe9a, &(0x7f0000000100)) r11 = syz_io_uring_setup(0x2fb4, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r10, 0x8, 0x1000000, r12) syz_io_uring_submit(r4, r8, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x1, 0x4007, @fd_index=0x3, 0x5, &(0x7f0000000780)=[{&(0x7f0000000440)="a812e1290d6a96c4d755904a07bf64d2dada323d00689a0e30060df5cb4de9ee0311132286d74dfbc9d87968fa5cbdfafc6ac9b309b51ca6e8f45d7173f2aac5f5c39749044fa36402f50585f736584a2cc83dcc35acbe42b7a219407aa0382b6a5ab291d3c26942deda90dc96ec1c3aadb1264eb281b6d17184c37ae0d7683265877b2a", 0x84}, {&(0x7f00000001c0)="8e2d4a1e9827179062ea9c635c20c11e42bcc4f5e963337ebdcca89c0959adcdd23894bcb5e7dab5", 0x28}, {&(0x7f0000000500)="60939a7dab31991b5634d587907bfc45dd60ea13bf9a57985b4397afbcdfedb5b5ff9d43313b775a8697fb706ff977af6903e9ba34289a7d7fe45765df7e8068d92a23e99c5119470c915754aa91b41af84b3bdff729ac37d033ba34608108cddaa9d427f6c1f2466f14cb20f39e260d9f57e028723aa99de85726275efefb9e98e7589f966f04fa087fca8ceac77cdefe983e1eeec32edd197c858b19f96e9aac7edcfb0e077d43c64cc5de5caa24887ddd2c4d8ed8dd41621e922d92e5bfff8920", 0xc2}, {&(0x7f0000000600)="6a3036e4d32348916423d9df6e77ee9a5a91641d3968d74b5b18c44df2edb65cafef0b529ebfad7578d707e97a5730dc24bb92b667cc64812422fbe4fc70ee950487f651e19cd2a558ce6b0402cb3c3ac8279e1393a40b1723b8d973a775bb2100702d412683d794f350614f3a40fdbe9ef97d8bba2001be8cbc423d29c7930206d06135d2d93e10e267915466", 0x8d}, {&(0x7f00000006c0)="99150f46b662e2bb75652a216efd7fbce6a4edd54e1e3360c47459c17d254ad7d60e5ccb0e8467ad4320bc4970dc3b0e93b0bb56bb9428fe9b2c6a262bbaeafd0754267fef88dcd8c745b69f80f289b8c611a346b4c9d210c10c50c3bae973bfe55d0e8ecd0c29b0368557c67d45c75bbedfeb372d6b7b1c95f6d32110f7e4ef5743a99fde30e0428dceed8ce8239394824fefd6902c129c411fb00e5141911a5ea5f4914ad518f8a14015d31f27157293c7d5d3", 0xb4}, {&(0x7f0000000380)="8fec7ed4", 0x4}], 0x6, 0x2, 0x0, {0x2, r12}}, 0x3) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r6, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r13, &(0x7f0000000000)=0x80, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}}}, 0x0, 0x0, 0x1}, 0x9) 14:37:08 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:08 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x6040000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:37:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r2) 14:37:08 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xfd63) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000000c0)={0x2a2, @time}) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r3, &(0x7f0000001540)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000100)=""/73, 0xffffffffffffffde}, {&(0x7f0000000180)=""/123, 0x7b}, {&(0x7f0000000240)=""/137, 0x89}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/168, 0xa8}, {&(0x7f0000001580)=""/79, 0x48}], 0x6, &(0x7f00000014c0)=""/127, 0x7f}, 0x7}], 0x1, 0x22, 0x0) 14:37:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r2) 14:37:08 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) recvmmsg(r2, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000100)="67ac669c9b243e95a7c0cedf6cb9b3cb663c5665d956079c91ceb584cdfc39562af15151f2859c34107de6c882ac53911a13c7b010da629f5bb942485976417b88a1c3f93c84cb8f4b6f7b9b87baf0e92d3a3b2a57205b8374bf57fcba51eb4677ca30f5c1628f65e8030fab2c30bbf8925d055c95e9240ce77f3197b6b7", 0x7e, 0x40, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)="fbf3ed27", 0x4, 0x10, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) 14:37:08 executing program 3: r0 = socket$inet(0x2, 0x6, 0x200) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:37:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r1) 14:37:08 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0xffffffff}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 217.566852][ T25] audit: type=1400 audit(1628779028.221:69): avc: denied { create } for pid=15980 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 14:37:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r1) 14:37:08 executing program 5: r0 = syz_io_uring_setup(0x182, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x0, 0x3bc}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:08 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="0c0100001500000126bd7000ffdbdf1c000000000000000000ea7e9918adca4995e60366cdfc732c000000000000000a01010000004e00"/64, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x50}, 0x4004000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x2}}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x24000040) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000001600)='cmdline\x00') sendto$inet(r4, &(0x7f0000001640)="e54c18e254fc736709063bb1b311b8", 0xf, 0x4000, &(0x7f0000001680)={0x2, 0x4e21, @broadcast}, 0x10) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r5, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r5, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c331ed10765babb7b9619ca2c709addb8478ffe9c8c1def92a466bc2d7abbd42f318687587c1f3428a5a4576c07846d089d4b1d0af4684b19b1653f374b159dc500a719832b95372b6e740d02b08b666d9a661935b88e2019587a7be98bd87b9a5698335ed4bac7092a2861ee91dd6b090982b81cd383d3c9694d85dc90faf5247641f91bcf410208926b9be030d63a460c27f5f5f255899abea3d1e5383d19a76cd9d961233cc948a4fca4c65e4b55e459783cc93e3bac3d301b594c46", 0xbe, 0x10, &(0x7f0000001380)={0x2, 0x4e20, @private=0xa010101}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000040)={{0x3b, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x4, 'wlc\x00', 0x20, 0x7, 0x2f}, {@empty, 0x4e24, 0x1, 0x800, 0x8, 0x3}}, 0x44) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r3, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:37:08 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 217.906583][T16005] ================================================================== [ 217.914718][T16005] BUG: KCSAN: data-race in tcp_done / tcp_poll [ 217.920877][T16005] [ 217.923193][T16005] write to 0xffff888100c0ebf0 of 1 bytes by interrupt on cpu 1: [ 217.930832][T16005] tcp_done+0x2ca/0x360 [ 217.934992][T16005] tcp_reset+0x89/0x130 [ 217.939148][T16005] tcp_rcv_state_process+0xc56/0x2840 [ 217.944525][T16005] tcp_v4_do_rcv+0x3e5/0x4f0 [ 217.949109][T16005] tcp_v4_rcv+0x217c/0x2480 [ 217.953600][T16005] ip_protocol_deliver_rcu+0x20e/0x410 [ 217.959043][T16005] ip_local_deliver+0x1d1/0x290 [ 217.963894][T16005] ip_rcv+0xd8/0x170 [ 217.967785][T16005] __netif_receive_skb+0x8b/0x1b0 [ 217.972827][T16005] process_backlog+0x23a/0x3f0 [ 217.977630][T16005] __napi_poll+0x65/0x3a0 [ 217.981949][T16005] net_rx_action+0x29f/0x680 [ 217.986532][T16005] __do_softirq+0x12c/0x26e [ 217.991030][T16005] run_ksoftirqd+0x13/0x20 [ 217.995445][T16005] smpboot_thread_fn+0x22f/0x330 [ 218.000380][T16005] kthread+0x262/0x280 [ 218.004444][T16005] ret_from_fork+0x1f/0x30 [ 218.008857][T16005] [ 218.011159][T16005] read to 0xffff888100c0ebf0 of 1 bytes by task 16005 on cpu 0: [ 218.018856][T16005] tcp_poll+0xf3/0x580 [ 218.022905][T16005] sock_poll+0x23e/0x260 [ 218.027127][T16005] __io_arm_poll_handler+0x1af/0x5c0 [ 218.032396][T16005] io_arm_poll_handler+0x2e8/0x6e0 [ 218.037488][T16005] __io_queue_sqe+0x135/0x360 [ 218.042149][T16005] io_submit_sqe+0x1695/0x3400 [ 218.046892][T16005] io_submit_sqes+0x822/0xe50 [ 218.051545][T16005] __se_sys_io_uring_enter+0x1c7/0xa20 [ 218.056982][T16005] __x64_sys_io_uring_enter+0x74/0x80 [ 218.062344][T16005] do_syscall_64+0x3d/0x90 [ 218.066739][T16005] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 218.072615][T16005] [ 218.074920][T16005] value changed: 0x00 -> 0x03 [ 218.079566][T16005] [ 218.081864][T16005] Reported by Kernel Concurrency Sanitizer on: [ 218.088075][T16005] CPU: 0 PID: 16005 Comm: syz-executor.5 Not tainted 5.14.0-rc5-syzkaller #0 [ 218.096811][T16005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 14:37:08 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x7000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:37:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r1) 14:37:08 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast2, @broadcast}, &(0x7f0000000080)=0xc) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:37:08 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) dup2(r3, r0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:08 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r5, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@nfc={0x27, 0x1, 0x1, 0x7}}, 0x7fff) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:08 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r6, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) r7 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r7, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r7, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r7, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44880}, 0x30040010) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r7, 0x0, 0x0, 0x0, {0x100}, 0x1}, 0x1) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 218.106839][T16005] ================================================================== 14:37:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r1) 14:37:08 executing program 1: setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000003c0)={0x40000000, 0x7, 0x7}, 0xc) r0 = syz_io_uring_setup(0x4ab7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x13, r0, 0x8000000) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x10000000) r6 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r6, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r6, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x2, 0x0, @private=0xa010100}, 0x10) recvmmsg(r6, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000480)=@hci, 0x80, &(0x7f0000000700)=[{&(0x7f0000000500)=""/158, 0x9e}, {&(0x7f00000005c0)=""/6, 0x6}, {&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/89, 0x59}], 0x4}, 0x1}], 0x2, 0x0, 0x0) setsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f0000000400)="386f6685bba556d4288d9f814f92b49ad32b34e39797544192922e0cb1b8404565d818d67ff051965bb3fb5b5323898053ef99c7fe787ce9cb8d697417c39a6dceec863194aa625358a0c04b96363da7542d82bd21649942aa4d41dcb76a2deb2afb619df53549850f574fa6b6d9df9f5b78f2", 0x73) r7 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000380)={0x200000, 0x20, 0x2}, 0x18) ioctl$BTRFS_IOC_BALANCE(r7, 0x5000940c, 0x0) r8 = open(&(0x7f0000000000)='./file0\x00', 0x20080, 0x82) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r8, 0x0, &(0x7f0000000040)="23eefa23dc48a4ab3f859ee4532b833b8cd128ea9946909529f400d75db6117cb374ee48051eda2a8435bf05452199bdc7b489865494af1794d48aa22e8bbe3a9f4ff72a38568c8d5bcfdcf63224cc33278df2ea390e8a95e88425ba62954bde65763883ed164f97e0cd2ad69849aa3d702522eb862535ef3c4822b28022c609f21f795bdd108f1f8032b5d9a661d445", 0x90, 0x2000, 0x1, {0x0, r9}}, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:08 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x44, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x4e21, @private=0xa010100}, 0x10) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/184, 0xb8}, {&(0x7f0000000240)=""/209, 0xd1}, {&(0x7f0000000340)=""/150, 0x96}], 0x3, 0x5, 0x1) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='bond0\x00', 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000004c0)='veth0_to_hsr\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000440)=0x20, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r1, &(0x7f0000006040), 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000480)="16ce81584f25d488074801be9b36dfe6011b1e6e158ace1e2db290fde36b5b20b7bf45d92cfd89b0b58a00", 0x2b, 0x885, &(0x7f00000001c0)={0x2, 0x4e24, @multicast2}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006040), 0x0, 0x22, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000540)=""/213, 0xd5, 0x0, 0x0, 0x0) 14:37:08 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xc, 0x11, r0, 0x9004d000) 14:37:08 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r4 = syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x4000010, r0, 0x10000000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(r9, 0xc57, 0x922c, 0x3, &(0x7f00000001c0)={[0x6]}, 0x8) syz_io_uring_submit(r5, r8, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x3, 0x4000, @fd=r9, 0x5, &(0x7f0000000040)="8c25783365a4d0b0ab6f0a08ca7d8d9f8a19094386bcf5b9", 0x18, 0x8}, 0xec) syz_io_uring_setup(0x5f46, &(0x7f0000000440)={0x0, 0x2efb, 0x1, 0x0, 0x114, 0x0, r9}, &(0x7f000036f000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000380), &(0x7f00000004c0)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r10, &(0x7f0000000580)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index=0x1, 0x3, &(0x7f0000000500)="38d487d0054bad38fc0ceb70bd0670fb33bb30d67c3b4f749374f5debe6cfb136cde8f2434b0a64e5777aedfc89e15025672df37428c2dc1fb7acc7358cfb68f500f6a8bce769787ee801e18d7fc0a063794fe7e7f", 0x55, 0x1e, 0x0, {0x0, r11}}, 0x786e) r12 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r12, 0x0) preadv(r12, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mknodat$null(r12, &(0x7f00000000c0)='./file0\x00', 0x1, 0x103) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r1) 14:37:09 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:37:09 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa0080, 0x20) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000080)=0x7, 0x4) 14:37:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r1) 14:37:09 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r4, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000149000/0x3000)=nil, 0x3000, 0x1000006, 0x8010, r4, 0x8f15e000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x104, &(0x7f0000000000), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x5285, &(0x7f0000000180)={0x0, 0xa475, 0x1, 0x3, 0x1ef, 0x0, r0}, &(0x7f000014b000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000380)) 14:37:09 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r4, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x1e0) preadv(r5, &(0x7f00000025c0)=[{&(0x7f0000000380)=""/252, 0xfc}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000002480)=""/105, 0x69}, {&(0x7f0000002500)=""/129, 0x81}], 0x6, 0x41, 0x2) r6 = io_uring_setup(0xe9a, &(0x7f0000000100)) r7 = syz_io_uring_setup(0x2fb4, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x8, 0x1000000, r8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r8}}, 0xffffffff) 14:37:09 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:37:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r1) 14:37:09 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0xfffffffd, 0x0, 0x0, 0x390}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r1) 14:37:09 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000001240)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x11, 0x0}}, 0x10) r2 = signalfd4(r0, &(0x7f0000000040)={[0x2]}, 0x8, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x6558, r4, 0x1, 0x20, 0x6, @random="1409000000ae"}, 0x14) recvfrom(0xffffffffffffffff, &(0x7f0000001300)=""/4096, 0x1000, 0x40000040, &(0x7f0000000180)=@xdp={0x2c, 0x0, r4, 0x3f}, 0x80) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000080)={'veth1_vlan\x00', {0x2, 0x0, @dev}}) getsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) bind(0xffffffffffffffff, &(0x7f0000001280)=@ll={0x11, 0x4, r4, 0x1, 0x99, 0x6, @multicast}, 0x80) recvmmsg(r0, &(0x7f0000006040), 0x0, 0x2022, 0x0) 14:37:09 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r3, 0x80, &(0x7f0000000200)=@ax25={{0x3, @bcast}, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}}, 0x9fda) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:09 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000148000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = io_uring_setup(0xe9a, &(0x7f0000000100)) r5 = syz_io_uring_setup(0x2fb4, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x8, 0x1000000, r6) sendto$inet(r3, &(0x7f0000000000)="d4b67793189f3815d9b7e6bb3a3fa5fea22f6069e06a6d42267cec998abe880850b40255a2fba189ac1f12e0560d780b1c0fa6c9bc01cca0ed6e7497106d37748e160ec5c366d921c0e232357969713514c9bdedf2bb4a4d7d0d271c98", 0x5d, 0xc0d0, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa010102}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd_index=0x6, 0x20000000000, 0x200, 0x8, 0x0, 0x0, {0x1, r6}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:09 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0xa000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:37:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r1) 14:37:09 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:37:09 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) r4 = dup2(r3, r0) r5 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x6558, r6, 0x1, 0x0, 0x6, @random="1402c4dabdae"}, 0x14) setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x33}, @broadcast, r6}, 0xc) 14:37:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r1) 14:37:09 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="f9ff00000000ffff00020004000000000a00000000000000", @ANYRES32=r1, @ANYBLOB="0000000090ed00000000000000000000000092b800"/30, @ANYRESOCT=0x0, @ANYBLOB='\x00\x00\x00\x00v\x00'/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28, @ANYRES32=r1, @ANYBLOB="000000000000000000002005000000a82500"/29]) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x5d}}], 0x1, 0x40000020, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x8080, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000640)="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"/316, 0x13c, 0x20000000, 0x0, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000000240)="fd6cc4bd239c06114e76659b8b29d70a7c96c0985d2562715fdd19f617b4a59a651758e05f6ebf3ae248b20ef8dc0a613287653a5b4ad505c218b1058dac8714b25f2c27642efe9bdf5aab8423456a5e003f270c156f390ac7dc315bac376d5a70cf84e0646c2ce46f05da8d686dd9cb3f55f325edc88dc3b1bb68f3a9adc7c76e2eb7c81422c3e349be018115514a6ecf90e55f99718b0b119cf24f36e822ca45e7554abcf490c0d36dfcd08e2f78ec8634b4f92d", 0xb5, 0x880, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0x0, 0x40000023, 0x0) 14:37:09 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r5, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r3, r2, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x5, 0x7, 0x64, 0xe27a, 0x3, 0x1}, 0x1f) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) r6 = io_uring_setup(0xe9a, &(0x7f0000000100)) r7 = syz_io_uring_setup(0x2fb4, &(0x7f0000000280)={0x0, 0x5935}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x8, 0x1000000, r8) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x63e, &(0x7f00000000c0)=[r0, r0, r0, r0], 0x4, 0x0, 0x1, {0x0, r8}}, 0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r9, r10, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r11, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}}, 0x0) syz_io_uring_submit(r1, r10, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x200) r12 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r12, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:10 executing program 1: r0 = syz_io_uring_setup(0x46c3, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x0, 0x3, 0x100020}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000040)={@remote, @remote}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x116) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)) 14:37:10 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4ea0, @multicast2}, 0x10) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000040)=0x1) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000008480)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000001600)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000180)=""/27, 0x1b}, {&(0x7f00000001c0)=""/45, 0x2d}, {&(0x7f0000000400)=""/76, 0x4c}, {&(0x7f0000000480)=""/46, 0x2e}, {&(0x7f00000004c0)=""/17, 0x11}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/216, 0xd8}], 0x9}}, {{&(0x7f00000016c0)=@abs, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000001740)=""/181, 0xb5}, {&(0x7f0000001800)=""/147, 0x93}, {&(0x7f00000018c0)=""/247, 0xf7}, {&(0x7f00000019c0)=""/81, 0x51}, {&(0x7f0000001a40)=""/218, 0xda}], 0x5, &(0x7f00000087c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000044684a9f0effbf98590d73f01ad526766c8e324c80ff4d2425f4c419fe21639a228535ff176be47b01d18f9a3f4a458a2d81be3125524d4b60ef4d9489de23072266b4c3eb820554"], 0x78}}, {{&(0x7f0000001c40)=@abs, 0x6e, &(0x7f0000003100)=[{&(0x7f0000001cc0)=""/59, 0x3b}, {&(0x7f0000001d00)=""/101, 0x65}, {&(0x7f0000001d80)=""/66, 0x42}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/253, 0xfd}, {&(0x7f0000002f00)=""/195, 0xc3}, {&(0x7f0000003000)=""/208, 0xd0}], 0x7}}, {{&(0x7f0000003180)=@abs, 0x6e, &(0x7f0000003280)=[{&(0x7f0000003200)=""/111, 0x6f}], 0x1, &(0x7f00000032c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}}, {{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f00000033c0)=""/213, 0xd5}, {&(0x7f00000034c0)=""/49, 0x31}, {&(0x7f0000003500)=""/232, 0xe8}, {&(0x7f0000003600)=""/186, 0xba}, {&(0x7f00000036c0)=""/228, 0xe4}, {&(0x7f00000037c0)=""/11, 0xb}, {&(0x7f0000003800)=""/93, 0x5d}], 0x7, &(0x7f0000003900)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000004c00)=[{&(0x7f0000003a00)=""/177, 0xb1}, {&(0x7f0000003ac0)=""/190, 0xbe}, {&(0x7f0000003b80)=""/4096, 0x1000}, {&(0x7f0000004b80)=""/120, 0x78}], 0x4}}, {{&(0x7f0000004c40)=@abs, 0x6e, &(0x7f0000004fc0)=[{&(0x7f0000004cc0)=""/238, 0xee}, {&(0x7f0000004dc0)=""/175, 0xaf}, {&(0x7f0000004e80)=""/111, 0x6f}, {&(0x7f0000004f00)=""/168, 0xa8}], 0x4, &(0x7f0000005000)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f0000005140)=@abs, 0x6e, &(0x7f0000008340)=[{&(0x7f00000051c0)=""/230, 0xe6}, {&(0x7f0000008740)=""/88, 0x58}, {&(0x7f0000005340)=""/4096, 0x1000}, {&(0x7f0000006340)=""/4096, 0x1000}, {&(0x7f0000007340)=""/4096, 0x1000}], 0x5, &(0x7f00000083c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}], 0x8, 0x100, &(0x7f0000008680)={0x0, 0x3938700}) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f00000086c0)={{0x2, 0x4e20, @remote}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x2c, {0x2, 0x4e21, @private=0xa010102}, 'macvtap0\x00'}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001bc0)={r2, 0x7, 0xa100000, 0xb0}) setsockopt$inet_opts(r4, 0x0, 0xb, &(0x7f0000001c00)="8ba27fc02722fa5eb8f7617797e7432ff21c", 0x12) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:37:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r1) 14:37:10 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r4, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair(0x25, 0x2, 0xfffff55a, &(0x7f0000000000)={0xffffffffffffffff}) syz_io_uring_setup(0x6c02, &(0x7f0000000180)={0x0, 0xd272, 0x2, 0x3, 0x2e3, 0x0, r0}, &(0x7f0000147000/0x3000)=nil, &(0x7f000014a000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r6, r2, &(0x7f0000000280)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index, 0x0, {0x0, r4}, 0x9, 0xc, 0x1, {0x0, r3, r5}}, 0xfffffffe) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:10 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x7, 0x0, @fd=r0}, 0x80) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r5 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) dup2(r5, 0xffffffffffffffff) recvmmsg(r4, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000040)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e21, @loopback}, 0x80, 0x0, 0x0, 0x0, 0xf000, &(0x7f0000000000)='xfrm0\x00', 0x5, 0xfffffffffffffffe, 0x9}) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r6 = syz_io_uring_complete(r1) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:10 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0xc020000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:37:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r1) 14:37:10 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0x200000}, &(0x7f0000148000/0x3000)=nil, &(0x7f000014a000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x728e, &(0x7f0000000000)={0x0, 0x75b0, 0x10, 0x1, 0x25d, 0x0, r0}, &(0x7f0000149000/0x1000)=nil, &(0x7f0000148000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r7, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0, 0x20004085}, 0x53) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x12345}, 0x4) syz_io_uring_submit(r4, r6, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r3}, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:10 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400e00, 0x0) io_uring_enter(r3, 0x27f7, 0xfbe, 0x0, &(0x7f0000000040)={[0xfffffffffffffff8]}, 0x8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1, 0x9c, 0x7, 0x8, 0x1, 0x6, 0x100, 0x48, 0x40, 0x22a, 0x7f, 0x5, 0x38, 0x2, 0xf2, 0x20, 0x5}, [{0x70000000, 0x9c, 0x6, 0x8c9, 0x80000000, 0x9, 0x800, 0x6}], "cc572a8f78b51c28fa544a11fc36e105ffdab739cecaa979f8bbad8e39ecdf826c9c9c04e45afbe45d706fa2d86ad010d0108807c3b99fea79df3ac9745eed54bd40be037026aab719fecda095ba4684658a9d73c6e8cfd22ac9f18b5f3d5faeb0362b4228d0fa7739689467caac17383ca80317ed524146a4426f86e398269d4a8328e57fa5af67a52d444bd4f640ae34e67931b498ee187ec851", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb13) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:10 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) r4 = syz_io_uring_setup(0x52b, &(0x7f0000000000)={0x0, 0xa5e9, 0x1, 0x3, 0xf0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f000014a000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000004, 0x10, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:10 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x0, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r2) 14:37:10 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = io_uring_setup(0x4652, &(0x7f0000000000)={0x0, 0x8bbb, 0x10, 0x0, 0x2a9}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r5, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r5, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0xffff, &(0x7f0000000480)=[0xffffffffffffffff, r5, r6, r3, r4], 0x5}, 0x6) syz_io_uring_setup(0x4188, &(0x7f0000000080)={0x0, 0x3436, 0x4, 0x1, 0xe2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000148000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 14:37:10 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) sendmsg(r0, &(0x7f0000001340)={&(0x7f0000000040)=@nfc_llcp={0x27, 0x0, 0x1, 0x4, 0x3f, 0x5, "1049c1b6f4c7750d12c5b8e0d3bb10d49631301e1e204406481d65c748552a7c512915013bd4b3173de95faf4bc0bd2e585b03ba051fe4b41429fee134029d", 0x3a}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000100)="e4809c486e4b26dfed2ecdfcd9a147be51", 0x11}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000000140)="dae58ef4f8d225ba08fb97a40f98bb1e5bf73ac062f3ef4aaa1f486eddeb19f4fc0bd776a9acadf3e1d678249b487a02df8c0afad7c4d8bd1a17b0b75507a37486b36aa69870c5a82d8e6115ab217e818cb70482be7e7ed824f23127b7275d0950e3a3158398e1d900220e8ba7597229526b98cde41f28159fba221821a2015599a2fe45379a1a5f2ac41996aa04413f43caddadf6d554a63866b67d494cd13e971fa03a909f7abb3d01359845e6fc0b", 0xb0}], 0x3, &(0x7f0000001280)=[{0x78, 0x115, 0x6, "a64aa2fd179d7881efb075b51539cc8c6a6b9e23e9f20e1715977dea8296c55cd4f6b1085534eee066963b374f7d2dae144868393c2833c0a5cd20e26e64d090d4e69db861f1f526fa04cc4863dde25b170ad03972e0d74dbe2617ab96d17df6b2"}, {0x40, 0x102, 0x930, "2aed598831d8cbd3dff0edc9940ed70f561e5b895fd6b16b0c0c8bb247dd10ed2aa8f155f0b9163abc2b"}], 0xb8}, 0x2000010) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:37:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x0, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r2) 14:37:11 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) r4 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0x1000}, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x10c, 0x80001, 0x12345, {0x0, r5}}, 0xfff) 14:37:11 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_setup(0x5582, &(0x7f0000000000)={0x0, 0x4f63, 0x8, 0x0, 0x2d6, 0x0, r3}, &(0x7f000014a000/0x2000)=nil, &(0x7f0000148000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:11 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)={0x80000, 0x15, 0xa}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:11 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0xf000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:37:11 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x200000}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x4}, 0x80000001) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x0, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r2) 14:37:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x4001, &(0x7f00000000c0)={0x2, 0xfffe, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvfrom$inet(r0, &(0x7f0000000100)=""/152, 0x98, 0x2, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) recvmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$getflags(r1, 0x1) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r2, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000240)="f118541d027c20c727219021ccc0f728ebdee6b01fec0426d5da2bd7b6b632cc27f0fdef165459501912190f105b2c7eaf3f337749b058b106e81d026ddbebe0d0736e64e6f927c8e7e221533ab72530b3601bd34b48d434700df056f14f8a2f0a97ae97303676627b3be9ef4dc1e9203886edcb2bb6467820b0512c33a0b392f9dccbac9e3d1853d8c4ee86a77063d2ec61aa108d329690aabd883166fbc110bc87db76bdbed36f48aa7d273e63246178aa1dbdac67dd5eb2272a17d0360331287eb08ed68c3cfdf1aa090fde58b8f2ab75827fee771379baa601d8d00c536a963b834dc1574f64020ea35617d1953153dd", 0xf2, 0x4c1dd6e59c9d8fd3, &(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10) 14:37:11 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r0, 0x10001, 0x0, 0x2, 0x2}, 0x1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, r2) 14:37:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="b851e5fc52d0718c6d66a575533df0f90d590c6a010086b9781ed31c4cfbcb96c3154c769975867932c8f1a72bee211ac779cd8632650caff53bc3c82e29714ca0061b0003f067f1d0b391d03c391e93c77ce99be7ee868344d0a0b26c30cf3b1dcd552315bd8bff3a99cb7932de196b6b3f78a6aadd75344595d4472b9898165aa98d918ab9f0bed1037923697df7a221ee554ddc612407dab003241dc1f7045e5b6db0ae6835750cbc23e9b5f8dc9b423e08d4f7a6e7fc9a79cea1332669777829fd5aa397fe5b92111d", 0xcb, 0x81, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) recvmmsg$unix(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x40440c0}, 0x4000810) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:37:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, r2) 14:37:11 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f000014a000/0x3000)=nil, 0x3000, 0x2000000, 0x80010, r0, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 220.625941][T16219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65280 sclass=netlink_route_socket pid=16219 comm=syz-executor.3 14:37:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, r2) 14:37:11 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r4, 0x0, 0x12, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r4, &(0x7f0000006040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f00000001c0)={@rand_addr=0x64010100, @empty}, 0xc) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000000)={0x0, 0x369c, 0x20, 0x3, 0x3e4, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000148000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000180)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0xc7b953f8ca7c84bf, 0x0, 0x0, 0x1, {0x0, r6}}, 0x7f2) [ 220.672993][T16224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65280 sclass=netlink_route_socket pid=16224 comm=syz-executor.3 14:37:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/12, 0xc}, {&(0x7f0000000080)=""/13, 0xd}], 0x2, &(0x7f0000000240)=""/210, 0xd2}, 0x5}, {{&(0x7f0000000140)=@phonet, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/97, 0x61}, {&(0x7f00000003c0)=""/156, 0x9c}], 0x2, &(0x7f0000000480)=""/103, 0x67}, 0x7}], 0x2, 0x22, 0x0) 14:37:11 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x114, &(0x7f00000003c0), &(0x7f0000836000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000080), 0x0) io_uring_enter(r0, 0x6887, 0x0, 0x0, 0x0, 0x18000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 14:37:11 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x200}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) sendto$inet(r3, &(0x7f0000000000)="f5a46e64de0973e85605692f59651a7fe5f456e60e414d12c117d82286841580e09e3120eff6b52a074a83fbbf64c93eaf507f9c9757ccbb5de7d7b1e662576a7f6e96869be35a0d950c7516936d7aec1beb634281f8f4607a890110b67c3300f05f9bb2d84982468995516410d56236d53713289ec52c2c2964f51763e55c5d62a8e7c004621b80590ad854e4c43edb31571f", 0x93, 0x24000001, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff) 14:37:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x4) r1 = open(&(0x7f0000000040)='./file0\x00', 0x80000, 0xb9) openat(r1, &(0x7f0000000080)='./file0\x00', 0x3f5841, 0x44) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000005, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000052ac0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052ec0)={0x4, [{}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "d45e60c15885f3"}) r9 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, r9, 0x0) ioctl$SG_IO(r9, 0x2285, &(0x7f0000001640)={0x53, 0x0, 0x4d, 0x0, @scatter={0x5, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000140)=""/218, 0xda}, {&(0x7f00000013c0)=""/57, 0x39}, {&(0x7f0000000240)=""/22, 0x16}, {&(0x7f0000000300)=""/186, 0xba}, {&(0x7f0000001580)=""/191, 0xbf}]}, &(0x7f00000000c0)="75689d2db59d502e99c5d5c3caa87e479e83968fd1eefb4ba6d941a22fb928f2f16a60e192ae2cb7afbf6e22e9fd0fe9f3f6c490df0b642685262142cd523b15e8a63a0243602599d5edb2df3f", 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000001000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r13, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r13, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r13, &(0x7f0000000240)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001740)=ANY=[@ANYBLOB="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", @ANYRES64=r12, @ANYRESHEX, @ANYRES32=r11, @ANYRESOCT, @ANYRES64, @ANYRESHEX=r10], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000053ec0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {0x0, r5}, {0x0, r11}], 0xd9, "71b19f6c0bca39"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001240)={0x0, r2, "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", "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"}) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:37:11 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002dc0)=[{{&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000480)=[{&(0x7f0000000080)=""/108, 0x6c}, {&(0x7f0000000180)=""/3, 0x3}, {&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f0000000380)=""/201, 0xc9}], 0x4, &(0x7f00000004c0)=""/57, 0x39}, 0x50f}, {{&(0x7f0000000500)=@generic, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000580)=""/45, 0x2d}, {&(0x7f00000005c0)=""/236, 0xec}, {&(0x7f00000006c0)=""/165, 0xa5}, {&(0x7f0000000780)=""/124, 0x7c}, {&(0x7f0000000800)=""/234, 0xea}, {&(0x7f0000000900)=""/86, 0x56}, {&(0x7f0000000980)=""/155, 0x9b}], 0x7}, 0x2}, {{&(0x7f0000000ac0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000b40)=""/121, 0x79}], 0x1}, 0x9}, {{&(0x7f0000000c00)=@xdp, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c80)=""/14, 0xe}, {&(0x7f0000000cc0)=""/117, 0x75}, {&(0x7f0000000d40)=""/178, 0xb2}, {&(0x7f0000000e00)=""/99, 0x63}, {&(0x7f0000000e80)=""/52, 0x34}, {&(0x7f0000000ec0)=""/85, 0x55}], 0x6, &(0x7f0000000fc0)=""/40, 0x28}, 0x6}, {{&(0x7f0000001000)=@ax25={{0x3, @default}, [@netrom, @bcast, @netrom, @netrom, @rose, @rose, @null, @rose]}, 0x80, &(0x7f0000001200)=[{&(0x7f0000001080)=""/49, 0x31}, {&(0x7f00000010c0)=""/248, 0xf8}, {&(0x7f00000011c0)=""/49, 0x31}], 0x3, &(0x7f0000001240)=""/219, 0xdb}}, {{&(0x7f0000001340)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f00000027c0)=[{&(0x7f00000013c0)=""/67, 0x43}, {&(0x7f0000001440)=""/66, 0x42}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/83, 0x53}, {&(0x7f0000002540)=""/235, 0xeb}, {&(0x7f0000002640)=""/124, 0x7c}, {&(0x7f00000026c0)=""/207, 0xcf}], 0x7, &(0x7f0000002840)=""/216, 0xd8}, 0x81}, {{&(0x7f0000002940)=@x25, 0x80, &(0x7f0000002c80)=[{&(0x7f00000029c0)=""/162, 0xa2}, {&(0x7f0000002a80)=""/38, 0x26}, {&(0x7f0000002ac0)=""/153, 0x99}, {&(0x7f0000002b80)=""/249, 0xf9}], 0x4, &(0x7f0000002cc0)=""/219, 0xdb}, 0x1}], 0x7, 0x2, &(0x7f0000002f80)={0x0, 0x3938700}) r1 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmmsg$unix(r0, &(0x7f0000005380)=[{{&(0x7f0000004040)=@abs, 0x6e, &(0x7f0000005300)=[{&(0x7f00000040c0)=""/4096, 0x1000}, {&(0x7f00000050c0)=""/200, 0xc8}, {&(0x7f00000051c0)=""/167, 0xa7}, {&(0x7f0000005280)=""/117, 0x75}], 0x4, &(0x7f0000005340)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x1, 0x3, &(0x7f00000053c0)) sendto$inet(r5, &(0x7f0000005400)="89e009248477cf8dabc162326f35660cd136a2b648db49076e3f3dc6d4d20c057a90eca7d691c48dbfb3a0b7f268c942adbf196bf3a477444da5b1839a74af0e1db326d5694ce492c3326009497be32442a20e29d5eae7e2e6f40ff62fff366dc63d1e12dafe31a7a72fb915e8937f0c2dbea17886f12a180e244a0ff9d9", 0x7e, 0x190, &(0x7f0000005480)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000003000)={0x4, &(0x7f0000002fc0)=[{0x5, 0x3f, 0x2, 0x5}, {0x4, 0xf1, 0x7, 0x7fff}, {0x1, 0xfe, 0x7}, {0x5, 0xff, 0x6d, 0x3}]}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f0000003040)={{r7}, 0x0, 0x2, @unused=[0x1, 0x100, 0x8, 0x2], @subvolid=0x5}) 14:37:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff) [ 220.959267][ C1] sd 0:0:1:0: [sg0] tag#3099 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 220.969679][ C1] sd 0:0:1:0: [sg0] tag#3099 CDB: opcode=0x75 (reserved) [ 220.976719][ C1] sd 0:0:1:0: [sg0] tag#3099 CDB[00]: 75 68 9d 2d b5 9d 50 2e 99 c5 d5 c3 ca a8 7e 47 [ 220.986324][ C1] sd 0:0:1:0: [sg0] tag#3099 CDB[10]: 9e 83 96 8f d1 ee fb 4b a6 d9 41 a2 2f b9 28 f2 [ 220.995907][ C1] sd 0:0:1:0: [sg0] tag#3099 CDB[20]: f1 6a 60 e1 92 ae 2c b7 af bf 6e 22 e9 fd 0f e9 14:37:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x303, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff) 14:37:11 executing program 4: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x3234c0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000380)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) [ 221.005483][ C1] sd 0:0:1:0: [sg0] tag#3099 CDB[30]: f3 f6 c4 90 df 0b 64 26 85 26 21 42 cd 52 3b 15 [ 221.015059][ C1] sd 0:0:1:0: [sg0] tag#3099 CDB[40]: e8 a6 3a 02 43 60 25 99 d5 ed b2 df 3f 14:37:11 executing program 5: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000f, 0x20010, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.self_freezing\x00', 0x0, 0x0) r5 = io_uring_setup(0xe9a, &(0x7f0000000100)) r6 = syz_io_uring_setup(0x2fb4, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x8, 0x1000000, r7) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r4, 0x0, &(0x7f0000000040)='./file0\x00', 0x101, 0x400400, 0x31713, {0x0, r7}}, 0x1) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) 14:37:11 executing program 2: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="b851e5fc52d0718c6d66a575533df0f90d590c6a010086b9781ed31c4cfbcb96c3154c769975867932c8f1a72bee211ac779cd8632650caff53bc3c82e29714ca0061b0003f067f1d0b391d03c391e93c77ce99be7ee868344d0a0b26c30cf3b1dcd552315bd8bff3a99cb7932de196b6b3f78a6aadd75344595d4472b9898165aa98d918ab9f0bed1037923697df7a221ee554ddc612407dab003241dc1f7045e5b6db0ae6835750cbc23e9b5f8dc9b423e08d4f7a6e7fc9a79cea1332669777829fd5aa397fe5b92111d", 0xcb, 0x81, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) recvmmsg$unix(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x40440c0}, 0x4000810) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) [ 221.158621][T16272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65280 sclass=netlink_route_socket pid=16272 comm=syz-executor.2 14:37:11 executing program 2: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="b851e5fc52d0718c6d66a575533df0f90d590c6a010086b9781ed31c4cfbcb96c3154c769975867932c8f1a72bee211ac779cd8632650caff53bc3c82e29714ca0061b0003f067f1d0b391d03c391e93c77ce99be7ee868344d0a0b26c30cf3b1dcd552315bd8bff3a99cb7932de196b6b3f78a6aadd75344595d4472b9898165aa98d918ab9f0bed1037923697df7a221ee554ddc612407dab003241dc1f7045e5b6db0ae6835750cbc23e9b5f8dc9b423e08d4f7a6e7fc9a79cea1332669777829fd5aa397fe5b92111d", 0xcb, 0x81, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) recvmmsg$unix(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x40440c0}, 0x4000810) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000006040), 0xf7, 0x22, 0x0) 14:37:11 executing program 1: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x8010, r0, 0x0) syz_io_uring_setup(0x4325, &(0x7f0000006a40)={0x0, 0x50be, 0x1, 0x2, 0x3b4, 0x0, r0}, &(0x7f0000149000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000003e40)=0x0) r5 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000006ac0)) r6 = io_uring_setup(0xe9a, &(0x7f0000000100)) r7 = syz_io_uring_setup(0x2fb4, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x8, 0x1000000, r8) syz_io_uring_submit(r3, r4, &(0x7f0000006b00)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2000, @fd=r5, 0x55, 0x73503a14, 0x2, 0x1c, 0x1, {0x1, r8}}, 0x7) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006900)=[{{&(0x7f0000000000)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f0000002780)=[{&(0x7f0000000080)="325196db3e76bbaa2f620ee3926a7aa14fb39d59cf34c9749aa29c0e3478325ad7724260651ca2033d5da772565d3f52a7ad4db5e450b5d6d41648486014925841a23c9ad28283e273f1", 0x4a}, {&(0x7f0000000380)="e391cdbdfd31cf9bb0384fd68b5c03f046f789a3a7ff381efcf20ca2d87b5e3de9a5617c9be64bf8d56b6df2ae17fcaae94f7489807244899738f3d63e6a3373238548befe0ed41e7d7dad640a7e8e707ded93f9faa81bcc0233c4c30a2d5b81a491f886fc76b7e0eedb749ce47214f7d21c88e4b348a1b4107cd23fbc92d096e65c11d5bd843b80304ff5d7c259e07cbc16f4bf9b056c014cd1fcb0aa416928c3c437b0beb25b383fce4bede99830d1d99d8d3183d1efaf9262acd63b160d0a6f8d14a174209af052be4306224dd8fc001e34d338f1d43743e49a2bcaf71e14432155db2844fca7630727908a40bea4", 0xf0}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000000180)}, {&(0x7f0000002480)="65d9fe6fffb4b4a0fc529ed35cb19cbc5198487c59331be0acac008825d4c7f66d15089c913b80eef8aa129f8a6e2aba1f8b8f0e88014ce1d09d9325d9b851085fcbad37f6cd19c37ffca0a44ce46b593eca7ecdd132d62ae539679787e45ad291f2541163cc8087053d9bf7027e2ff4648f29b1a06e83118cec4a139ae2c1c147394666948f43bf13be0b0eb76ee7281fd9c007fea1eaad43f3c13d01e055e38cab755b3e2720a088de694372e2ea5f411bfbacc568c6fc2bf34d613a1ed3c569e981ed388543f407401b7044f562fb44126a64c9bec1abb699c9facec0", 0xde}, {&(0x7f0000002580)="4176a2fa0ab652ef434b88e5b391dd7d4915cbaeab6b176f3907ab30fefc248187378a9f510f225ccd4db6f1ac93c3812d5dc4d3d962c88946bb0ad918f5b0d43574976c5c2640b5a709611220eb08a5927bb6450ea241327fc831bd8dc62433614829ff509c359f2b3c42da44b1208a99e4d6e3756b82fcd42a7349a2ce437b9bd0eba16e013c78d6f29f7425be66725ea02ef49d995509e3c9e6240b9959c07470d7aa6712ea21df9fd7327eabff6aebc627e807646f2bdc6b73d510a2ab2e9b3f379210", 0xc5}, {&(0x7f0000002680)="896db522db4d1f35af4aa57a8fc50c7cff8732756cf41c9be0160becdf4f890e896026818556535f5b14ab186e73ca3845d5bdbca2f12dfbab71ec9248ba2c928747103483c31413a24a5fab8d1d554305da71d0ae0015147c58d59ddba8014be425ea0484c9b73381640dde15", 0x6d}, {&(0x7f0000002700)="cd211fc49693be1c03f7bc6c7e01cd60e795b82f444f2a6c7531f4063a07ddc8949687394503754f263c5d5e39e7c4db696d39c60f38f5b7b1c02154a61cbf416e323de2662316f98809e48b971668d49ba88624e65f20dbc418291fbc4fade8785e17733c1c2c7b7afb316a758c92001b8354554fc6b9e54f83f8d9f7", 0x7d}], 0x9}}, {{&(0x7f0000002840)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000028c0)="02cbe46bcc80b757406ae176ac691069683bda05d421f5997caede1189c1ae71fb16cb4a17f78ab0a46058abc491b67a6ff1db75589cfa0843479d8ca5c2a83a5c2d878844538d2ba3cb1106bbb3708e7cf5fe1f54c449f08a664fc088fd8886cc2ea633ac484d54bb0d423110281d3e64d8d4f599456008d74933a0b46e9d932109cff0993e65142791d7d18767c07a2d2ab76729e263791eb4156be3172bffbd8cf720131c7b3bcb2281be64f2ea08c95057fde2149e37c334ba7def3c607363c8798d8e2423ea752aa544574cdcbded5fa0ae8fa5819f1a9633564f5b858646fd0554f1da71385f44c1bef73140400cb6be11c9", 0xf5}, {&(0x7f00000029c0)="1c74f91b2e798349752de80fc4f7dfbd41a411a4afee06326184c8b99540ca592683e57c46980a7f6aa4b3b1f874961a57e3203db2b8b64b0b511faf13fe1b954afe21cd1b9c3c1d8c5a13bb152fcf78b442b18952cdaab09fcb5963f3b8289ece4ff9ad45f24580834862888d09e6243da99bff0a2e78184cd8aaa6bbdfbdb948d7a923471c14fd8dede65d55bfc7e65e2aa98eb460860b06ec4215c656fa0806548d834374fa093559bc3fae3a16e63d33c8b8b543c3b91c12d0fcfb85ed2a3ce037fd173a8fc6b1cb9c3b23cc1822017a673be2fd1a753c134646afaee9b97d", 0xe1}], 0x2, &(0x7f0000002ac0)=[{0x58, 0x3a, 0x0, "d5c5ef4403a9874462bf8e23c699ea7814b63cd593e8fa548f7928d191277f0214511a112babdc4fce2965356e564101da46e0589e99ae937a9e49c95964611c65b0b8475eaa9570"}], 0x58}}, {{&(0x7f0000002b40)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x4, 0x0, 0x1, 0x4, {0xa, 0x4e23, 0x6, @loopback, 0x6}}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000002bc0)="c5a616555caebb5e4d36aa83a263d21bba25c1b9a0732e1822c29d4590621aa1826eb4fe9684ef68623efa50c80a2dfcb74e515d9ae2398d75876853829ed3175a4936b30277fe33791104f82aa04d8df350b53ec98fe7c3467c4448daa8377e1247253478f39e86c0358183d5f06c341b1caa7f903c7f0c03df8415c2104b5406ce10fd8ee6857722ea6aa7c2f47a05afe6c1b3431f4c8544d9b666b4dfd9be93f8dbe55d59ca80ce743c1d3ad785d4", 0xb0}, {&(0x7f0000002c80)="3cc332f2dec3fd7b64eb5071859cf5e68a5168feea78e909e2bb7f46ec9dae051af6fec5d36c7e0681484717f84256cc79252fe296af1b89744a70de541f12ead35dea604e7ea5c09f4b01f81165bcb8b4422431443dcc66af0436ecee2d0c3f21d4c6536e0f45aa409ef947f3596dde7705abc44ec736c1b8dadb613b6e9e0af11b22de0224776dcac97d4dde860a1cfb0d39ae92f1693f91f251eecdc4a03c7c3386bf61bc071aea1c674ae98cfe7e2e5716679269015b020122