289f528714b12cd95da859d78a32e39e2abf46bdc7d19c867c570b2ff6a28e0030ebc6a1ba72b483d7f0aadd833539f145767f3ec058f294ff88b2430e01eb4a34f1c348acc5e8df66f11e28aa486ccff127ee0dda880fc46bc3445cec81a5b6cdc834bab3d9cda57be9615d1a448f186ed20bb8f379e81b8740852e2d0bfcd99cc37a9d2e519b5b0e2513846e07ca574e2f82b73513bb5ae3d699491e6b9396a6ac4b32c0548d054bbe575be75c9d78738dc6b3f95", 0xfa}], 0x7) (async) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="e00000017f0500010000000001000000ac1414aa"], 0x14) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e22, @loopback}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x0, {0x2, 0x4e20, @multicast1}, 'veth1_to_bridge\x00'}) [ 2033.358338][T14521] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 07:34:37 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1d, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 07:34:37 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 32) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) r2 = socket(0x2, 0x80802, 0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x2006}) (async) r4 = socket(0x2, 0x80802, 0x0) (async) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)) close(r5) (async) epoll_pwait(r5, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f0000000140)={[0x3]}, 0x8) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000000)) (async, rerun: 32) close(r3) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000000}) 07:34:44 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002500)={0x0, 0x2, &(0x7f00000012c0)=@raw=[@map_idx_val], &(0x7f00000013c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 07:34:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x12) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback, 0x0, 0x1, [@dev]}, 0x14) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r2 = socket(0x2, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @empty}, &(0x7f0000000140)=0xc) r4 = socket(0x2, 0x80802, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) ioctl$sock_ifreq(r4, 0x8910, &(0x7f00000001c0)={'veth1_to_hsr\x00', @ifru_flags=0x1}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @loopback, 0x0, 0x1, [@local]}, 0x14) 07:34:44 executing program 5: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x862076349c793811, 0x0, 0x0}, 0x20) 07:34:44 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x400}, {r2, 0x100}], 0x2, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300), 0x8) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x250, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x80802, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) connect$unix(r3, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0400002001000000020000c018050000704a059a674400e5c5f653ef94cdefa34b4a8afabd8bc598e435888d4c789166d5d164a3cfa376f192e547fcd721c181544470d75bd469933e53bb9b3f1fd641"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x488d5) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r5, &(0x7f0000019180)=""/102395, 0x18ffb) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, &(0x7f0000000180)) 07:34:44 executing program 3: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000000)=0xe8) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02000000000000000500000000000000000000a53aa261081c9719c035e631f837e202ed338ff5692737e6c04f04f13fd253e4728040c96d0de2c80b9c6f030ca6b02dee47af8df0ad627c7081abcaba415798a35b04f34e06c8be", @ANYRES32=r4, @ANYBLOB="10000400000000002000000000000000"], 0x2c, 0x0) fchown(r3, r2, r4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000ec00000018000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB='./file0\x00']) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={{0x1, r0, r4, 0xffffffffffffffff, r5, 0x1ab, 0xdfad}, 0x0, 0x0, 0xfff, 0xf94, 0x7fffffff, 0x1, 0x5, 0x8, 0x7fff, 0xdc, 0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./bus\x00', 0x0, 0x10}, 0x10) sync_file_range(r7, 0x4, 0xe48d, 0x0) read$char_usb(r6, &(0x7f0000019180)=""/102395, 0x18ffb) 07:34:44 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f00000000c0)=0x4, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r4 = socket(0x2, 0x80802, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb535}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fff}]}]}, 0x74}}, 0x20000000) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x4, 0x0, 0x0, {}, {}, {0x3}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "a7a80e1ea3468f8938edeae721a1edd6d2cdcb4c5c8e36f4af45778ef6d463a5bcc03c8ef76b636c57401dfa3fde781575da324bc0cb831f5285f6f1d418d5ef"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=@gettfilter={0x74, 0x2e, 0x0, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xc}, {0xc, 0xfff2}, {0xc, 0xf}}, [{0x8, 0xb, 0x5c1}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x7fff}, {0x8, 0xb, 0x19}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x401}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pwritev(r6, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) 07:34:44 executing program 5: getresgid(&(0x7f0000001440), 0x0, 0x0) 07:34:44 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x11, 0x3, &(0x7f00000015c0)=@framed, &(0x7f0000001600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001700), 0x10}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)={0x14}, 0x14}}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001fc0)={&(0x7f0000001f80)='./file0\x00'}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 07:34:44 executing program 5: socketpair(0x1e, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001440)={0x0}}, 0x0) [ 2040.486348][ T24] audit: type=1400 audit(1662449684.814:337): avc: denied { create } for pid=14569 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 07:34:44 executing program 3: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000000)=0xe8) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02000000000000000500000000000000000000a53aa261081c9719c035e631f837e202ed338ff5692737e6c04f04f13fd253e4728040c96d0de2c80b9c6f030ca6b02dee47af8df0ad627c7081abcaba415798a35b04f34e06c8be", @ANYRES32=r4, @ANYBLOB="10000400000000002000000000000000"], 0x2c, 0x0) (async, rerun: 32) fchown(r3, r2, r4) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000ec00000018000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB='./file0\x00']) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={{0x1, r0, r4, 0xffffffffffffffff, r5, 0x1ab, 0xdfad}, 0x0, 0x0, 0xfff, 0xf94, 0x7fffffff, 0x1, 0x5, 0x8, 0x7fff, 0xdc, 0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./bus\x00', 0x0, 0x10}, 0x10) sync_file_range(r7, 0x4, 0xe48d, 0x0) (async) read$char_usb(r6, &(0x7f0000019180)=""/102395, 0x18ffb) 07:34:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x12) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback, 0x0, 0x1, [@dev]}, 0x14) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r2 = socket(0x2, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @empty}, &(0x7f0000000140)=0xc) r4 = socket(0x2, 0x80802, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) ioctl$sock_ifreq(r4, 0x8910, &(0x7f00000001c0)={'veth1_to_hsr\x00', @ifru_flags=0x1}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @loopback, 0x0, 0x1, [@local]}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) (async) socket$netlink(0x10, 0x3, 0x12) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback, 0x0, 0x1, [@dev]}, 0x14) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) socket(0x2, 0x80802, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) (async) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @empty}, &(0x7f0000000140)=0xc) (async) socket(0x2, 0x80802, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) (async) ioctl$sock_ifreq(r4, 0x8910, &(0x7f00000001c0)={'veth1_to_hsr\x00', @ifru_flags=0x1}) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @loopback, 0x0, 0x1, [@local]}, 0x14) (async) 07:34:44 executing program 5: r0 = socket(0x2, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) [ 2040.526761][ T24] audit: type=1400 audit(1662449684.844:338): avc: denied { setattr } for pid=14573 comm="syz-executor.3" name="AF_VSOCK" dev="sockfs" ino=53528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 07:34:44 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) r3 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="941a5c47180000", @ANYRES32=0x0, @ANYBLOB="00000100000000000c0000000700010066770000680802005008020004040300"/1019], 0x894}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48880) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="24000000260007031dfffd866fa28300202002acb43b76479d3b70490dee64f315cd0000", 0x24}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000008b40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/1, 0x1}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/224, 0xe0}, {&(0x7f0000000340)=""/235, 0xeb}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 07:34:44 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x0, 0x0, 0x0, 0x8}, 0x10) 07:34:44 executing program 3: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000000)=0xe8) (async) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02000000000000000500000000000000000000a53aa261081c9719c035e631f837e202ed338ff5692737e6c04f04f13fd253e4728040c96d0de2c80b9c6f030ca6b02dee47af8df0ad627c7081abcaba415798a35b04f34e06c8be", @ANYRES32=r4, @ANYBLOB="10000400000000002000000000000000"], 0x2c, 0x0) (async) fchown(r3, r2, r4) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000ec00000018000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB='./file0\x00']) (async) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={{0x1, r0, r4, 0xffffffffffffffff, r5, 0x1ab, 0xdfad}, 0x0, 0x0, 0xfff, 0xf94, 0x7fffffff, 0x1, 0x5, 0x8, 0x7fff, 0xdc, 0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./bus\x00', 0x0, 0x10}, 0x10) sync_file_range(r7, 0x4, 0xe48d, 0x0) (async) read$char_usb(r6, &(0x7f0000019180)=""/102395, 0x18ffb) 07:34:45 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x400}, {r2, 0x100}], 0x2, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300), 0x8) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x250, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x80802, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) connect$unix(r3, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0400002001000000020000c018050000704a059a674400e5c5f653ef94cdefa34b4a8afabd8bc598e435888d4c789166d5d164a3cfa376f192e547fcd721c181544470d75bd469933e53bb9b3f1fd641"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x488d5) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r5, &(0x7f0000019180)=""/102395, 0x18ffb) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, &(0x7f0000000180)) socket$unix(0x1, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) (async) ppoll(&(0x7f0000000280)=[{r1, 0x400}, {r2, 0x100}], 0x2, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300), 0x8) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x250, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) (async) socket(0x2, 0x80802, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) (async) connect$unix(r3, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0400002001000000020000c018050000704a059a674400e5c5f653ef94cdefa34b4a8afabd8bc598e435888d4c789166d5d164a3cfa376f192e547fcd721c181544470d75bd469933e53bb9b3f1fd641"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x488d5) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$char_usb(r5, &(0x7f0000019180)=""/102395, 0x18ffb) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, &(0x7f0000000180)) (async) 07:34:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x12) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback, 0x0, 0x1, [@dev]}, 0x14) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r2 = socket(0x2, 0x80802, 0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) (async) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @broadcast, @empty}, &(0x7f0000000140)=0xc) r4 = socket(0x2, 0x80802, 0x0) (async, rerun: 64) r5 = epoll_create1(0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) ioctl$sock_ifreq(r4, 0x8910, &(0x7f00000001c0)={'veth1_to_hsr\x00', @ifru_flags=0x1}) (async, rerun: 64) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async, rerun: 64) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @loopback, 0x0, 0x1, [@local]}, 0x14) 07:34:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x5) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000000)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) 07:34:52 executing program 3: r0 = socket(0x2, 0x80802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) dup3(0xffffffffffffffff, r2, 0x80000) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) 07:34:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x1, [@dev]}, 0x14) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000000000ac1414aa2cecc3eefe2317685e9be1519b74ded00965b6bd600278eec37fe981d0e22629f25a05984caeca6b12a422d35b3d496f"], 0x14) 07:34:52 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f00000000c0)=0x4, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) (async) r4 = socket(0x2, 0x80802, 0x0) (async) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) (async) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb535}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fff}]}]}, 0x74}}, 0x20000000) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x4, 0x0, 0x0, {}, {}, {0x3}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "a7a80e1ea3468f8938edeae721a1edd6d2cdcb4c5c8e36f4af45778ef6d463a5bcc03c8ef76b636c57401dfa3fde781575da324bc0cb831f5285f6f1d418d5ef"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=@gettfilter={0x74, 0x2e, 0x0, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xc}, {0xc, 0xfff2}, {0xc, 0xf}}, [{0x8, 0xb, 0x5c1}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x7fff}, {0x8, 0xb, 0x19}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x401}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async) pwritev(r6, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) 07:34:52 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x400}, {r2, 0x100}], 0x2, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300), 0x8) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1f, 0x250, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x80802, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) (async) connect$unix(r3, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0400002001000000020000c018050000704a059a674400e5c5f653ef94cdefa34b4a8afabd8bc598e435888d4c789166d5d164a3cfa376f192e547fcd721c181544470d75bd469933e53bb9b3f1fd641"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x488d5) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r5, &(0x7f0000019180)=""/102395, 0x18ffb) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r5, 0x8008f511, &(0x7f0000000180)) 07:34:52 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040), 0x10) 07:34:52 executing program 5: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002e00)=[{{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000027c0)=[{&(0x7f0000001280)="d560b8bdcff7e94ff4c849c6b75178213a6390acd232547ce8dffcb68b62bbe5ed6deff19c28a7b18bec307636a3e918fafa5c16b880a2b7e1127ab7e6a0b45ab38b1dcabb43a336540c1cd444b60ffacb778f32f8dcf083a220914c6f03379c1af3cd9c1b4283872de7380b6e8b10e3593aef9194439f58dbbc8cb83c7481f36f2360a2b2062528a19ad1e5955587869c0fd7fc88f0b7d917938b005406bac46de32895076dc26c74950c79514ef8e06d31eee359fe75912dfa6d5eaf8206a98d1d2d2348211b4e2f54513b4066174c3ebf3787ec6f7715aad49bb99ed460fbd85ae8c08e", 0xe5}, {&(0x7f0000001380)="8d7bbdc2de4443837f9fbc4dc34bcf8ac1a346265bfcaaac3d54d1099b7f6d8de0ed81cee5de6b87b6813a0d6eeaba28b5db14f1ab159c363ddf6d18ca11a29ce94a5871a06834c2033c8374604b75002a8d5fda45c874e495adf13dd618cf74e50ee588d59b624999cf0edaf9222dc03f04286be7138bfc222f013399e2fb1d5033504b327c237ee012470d921f91757515fbeffb4c69917f377ff38f9aac08e026a209c6b3adfb5e7f6849b275f6a6641132fa3956c66d2f9d04196c8c7c39d4e86c98f766e52a890318732dd65f", 0xcf}, {&(0x7f0000001480)="e0a9b96661eadd0b71805dff8e6c3f8e550366557e379aeb634886d5b938b5c4d93cfc683d618722f3f0e3309017775ce2a2ea68d5e2d6079331eb4a5eeff286d103ded1de06d5fb389fbee633f1fa0705d8bcc6d79a22bb3f7a2115f7a675eef26326a87e5543ee177625baa8a425bda15e268e2e9d79f18f3a15fe4ac04000164cf2ee2a559640d0d520916c77", 0x8e}, {&(0x7f0000001540)="6be6c62168b9f665af0cce021e69ad58ab4027138484fc5fbbad2c77a9a81e01def64acf70ea8f1ef3d0c189aca83d64c782d5663c79db6f5dc612c149568890b3d69b01c4450a5549afd33de35dec42764e7dc2a8c7d50f9b428f667a4884a37e693d8d6387226aa134af100366bb2177078277c883c4f2a9077175b7e90d1a98e62de85559016b", 0x88}, {&(0x7f0000001600)="25b60eda603a99bcdd04d4a9c360d1778d9350494fda91022301cf6b4a89f851f3fd8b0c695bf33960b54f08f5778aeac0ef1cecf32fb360d78793f3285ce8df0282204e58401923dd23d9e1f3c766918c0c514a89ab01fa08792d9ed6d80505196b6314", 0x64}, {&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)="f5359aa0901b07b8e8eb7289f64823f93b86c6391e927d78bb5d95930272f03953a3f7e1fd7471c10395fe8a36520e16291746f48eed2ccfb590367b696f66b8699cd95fcbb34b21", 0x48}, {&(0x7f0000002700)="b49b138a2c8e5fd10e54f4637691c1b6fe7d7bf2cf37a70a60a4df122443cff14e118f459627624741ef3211faffe1c94cf0703966d0f023f22d2892fcf7c3e0205a132755d8f0c28ea035b6671ffa613642fe4f8638ccf96ba3bb2fe570528d9cdf0a208d2352ee3aee0de97c16010f4e586eb4e2dc27c69c066cb1b8a10e47e1c28fb5573bfef501469739c163843a41a6e972b0f6ee91316b2ac33b0f07bb1c95809b3e85ce613a2d6bd6d970a6", 0xaf}], 0x8, &(0x7f0000002e80)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="00030000000000000000000001f1ff0001000000", @ANYRES32, @ANYRESDEC, @ANYBLOB="0000000002000000d4bdb0c1f907fc76511b558b3d4508ea9b17322cfa3d5e0ae76ca9ee36cf483e2cce64503f2d631a20f9a48d31b4b4be48d8aead6ce44bd21738b366dbf714a90c481889bc2887eb8bfc2da759ff82aeaa3fc93426053292a14c2d5db1e047fb535a6c25079d921f0ceefe53737d5c01000970d9962862658b3e1c9ab753d0274e231ea1a3e40c00", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x5}}, {{&(0x7f0000002980)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002c00)=[{&(0x7f0000002a00)="810b11d6e199ba566bf2e8d04662d17da8394df59dea6a037e4f3abf83f08f4cd9a0dc6cf81260582c64cc25380ecdbceb99cf1d53965a45009e4af0a4a02354a5ba3cafa9b10ffcf1e0c37c6f4a701952d9cdd94968507296e37232d8fdecb3be15040777a7a3cfb07027d126154a8f012ea1fb3f05e535e67f62ea6a2dbc47bacf634dd3f2224f8fef0b33e1e01b269408e8f1a92d5282e4cc60a4b0befacc7a300ca748a720509796b0ca2defaec76ba1428db3b5713eed2b535a22c45e80337d6e2a37a438b5bc7c39f557519cc6c6e3", 0xd2}, {&(0x7f0000002b00)="a34a79a9cb479110ce799043a6c3579838858245375cd8b53f3fdd15636e2de451b12daff9020b4f498923fe185466ab0fcd9f36618d59813bfd107293bc6cf0f0d553f3510e9e63d2c1c00cda101ad320c59d1a82", 0x55}, {&(0x7f0000002b80)="944b9e4d740884e8299bdebbf4890f0187702c88e811586fc588490b94a03a40307c9473d72effa00d1a35c43d9073ac14c48e9631f99cb5339e8e19e0ae2339cf", 0x41}], 0x3, &(0x7f0000002c40)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="18000000000000000100000001000000c8c2a4538d5707a68b", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="1c00000000a1cfa80cb4d7000000010000002ae5d8f6874592052a2450237d8ee554ebb080f6f55bb88cec16f957426bfe3b5c19bed942dc1c49a5e78ebb0cee665b2699aade6ff7758bebab813ae6a8244a65bbf425c7242237870aabfb10e001c60efe20f17ad684e75967", @ANYRES32=r0, @ANYRES32=0xee00, @ANYBLOB, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32], 0x80, 0x10}}], 0x2, 0x44814) r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000280)={0xeeb, [], 0x0, "285cbe607ecdfb"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20004}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 07:34:52 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xfffffffd}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) 07:34:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x1, [@dev]}, 0x14) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000000000ac1414aa2cecc3eefe2317685e9be1519b74ded00965b6bd600278eec37fe981d0e22629f25a05984caeca6b12a422d35b3d496f"], 0x14) [ 2047.679027][T14648] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2047.715096][T14648] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 07:34:52 executing program 3: r0 = socket(0x2, 0x80802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) dup3(0xffffffffffffffff, r2, 0x80000) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) 07:34:52 executing program 0: r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r0, 0x12081ff) pwritev2(r0, &(0x7f0000000180)=[{&(0x7f0000000000)='Y', 0x1}], 0x1, 0x0, 0x7f, 0x12) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1e70c2, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) fallocate(r2, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000140)={0x30a4, r0}) 07:34:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x1, [@dev]}, 0x14) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000000000ac1414aa2cecc3eefe2317685e9be1519b74ded00965b6bd600278eec37fe981d0e22629f25a05984caeca6b12a422d35b3d496f"], 0x14) [ 2047.749203][T14663] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2047.786192][T14664] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 07:34:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback, 0x0, 0x1, [@dev]}, 0x14) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000400)="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", 0x1000}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @loopback, 0x0, 0x1, [@local]}, 0x14) r2 = socket(0x2, 0x80802, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r3 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r3, r4, &(0x7f0000000240)=0x208, 0x9) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r5, @ANYBLOB="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", @ANYRESOCT], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r1, r4}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00'}) 07:34:52 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xfffffffd}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) socket$unix(0x1, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xfffffffd}, 0x0, 0x8, 0xffffffffffffffff, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) (async) [ 2047.874781][T14677] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 07:34:59 executing program 2: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0069c8f38c2030152283acdbee06c3719900006949579aa9790a5b696c6530007ef2e49409cd4c26e9d133179ac2512903c5aabc1688c7a49492ce284a8f4cc4f7be496a13ea42f8b7266080ff7ebd38f4a109ee910340d7104c65b67f197d2a87647d1d3147ac7c30d9ee96e66fa49b65eef0d2bc097edba0b4f19da4caaaef53b21728cfff14ff89dc9dd36175e0a513c1815d7465cf93439347a8c0f50e27c4e78be2176638b0c8ffc6ec53568e8cb8321b172096113c510cdf04e47204bfc2ed25a4120cbfb193b412336cf43a9fb0d98fd5a29efdc26c88efb0f88223de2b77c69b6f6227e1b84ad04216d6b0870835a12798e25d16e525f0309d57c3270e6cd48167ab6e80053b"]) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f00000000c0)=0x4, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r4 = socket(0x2, 0x80802, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb535}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fff}]}]}, 0x74}}, 0x20000000) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x4, 0x0, 0x0, {}, {}, {0x3}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "a7a80e1ea3468f8938edeae721a1edd6d2cdcb4c5c8e36f4af45778ef6d463a5bcc03c8ef76b636c57401dfa3fde781575da324bc0cb831f5285f6f1d418d5ef"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=@gettfilter={0x74, 0x2e, 0x0, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xc}, {0xc, 0xfff2}, {0xc, 0xf}}, [{0x8, 0xb, 0x5c1}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x7fff}, {0x8, 0xb, 0x19}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x401}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pwritev(r6, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="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"]) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f00000000c0)=0x4, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00'}) (async) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) (async) socket(0x2, 0x80802, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) (async) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb535}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fff}]}]}, 0x74}}, 0x20000000) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x4, 0x0, 0x0, {}, {}, {0x3}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "a7a80e1ea3468f8938edeae721a1edd6d2cdcb4c5c8e36f4af45778ef6d463a5bcc03c8ef76b636c57401dfa3fde781575da324bc0cb831f5285f6f1d418d5ef"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=@gettfilter={0x74, 0x2e, 0x0, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xc}, {0xc, 0xfff2}, {0xc, 0xf}}, [{0x8, 0xb, 0x5c1}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x7fff}, {0x8, 0xb, 0x19}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x401}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async) pwritev(r6, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) (async) 07:34:59 executing program 0: r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r0, 0x12081ff) pwritev2(r0, &(0x7f0000000180)=[{&(0x7f0000000000)='Y', 0x1}], 0x1, 0x0, 0x7f, 0x12) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1e70c2, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) fallocate(r2, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000140)={0x30a4, r0}) 07:34:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback, 0x0, 0x1, [@dev]}, 0x14) (async, rerun: 64) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (rerun: 64) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000400)="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", 0x1000}], 0x1) (async, rerun: 32) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @loopback, 0x0, 0x1, [@local]}, 0x14) (rerun: 32) r2 = socket(0x2, 0x80802, 0x0) (async) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) (async, rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async, rerun: 32) r3 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) (async) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r3, r4, &(0x7f0000000240)=0x208, 0x9) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r5, @ANYBLOB="00022dbd7000fedbdf250300000008000400e0000002c4bd4572333c6ec1b1fd5b8b01f7dfe7e3996772fc12b05b245ee1735be6071e583078abc90d94248538991e5fcf2dc96a8ed8defc60b1c608a1b8eecc0a2fc4dc983e0d29b79f0878db3b8c92ae16b7e3db182d2fcdd95c9d3422c0bb84dac0de0b39d3e19fbcfded53530b06b41c68baa2cc58db4e2166ce7a610000ffedff581bd7ba9d2c6aafce42270343107f695871e73e8bd41867ef145a9223bdb122aa29464c36aca08d609c170b21843de1ec2611cdb8f19b7f05e8296b2947cfac6543c3319cae2f62a524d8665397a63bb405c0a3eed31cc7b54e64e076b025cce944a1616177bc9d1b0bf31380fd81f762a446c31f9aaa1622b12fafd1a2c4f9779b44301d3de5fcd3eacec73ed41f6c882834e8a6ce1e036126446de3b839b2e3fb6707cf1bb64273b2d44b03360e9f209d2f005c9cca77f60d26d55ff7dd4f365ea86dc72279c9e9218ab09869cdbb2e5cb0a9c7f9e3cd20544feb15def710480227f681e9fb37dfd4186b4657d49c0d35ec2d5cc24b69568678fe1f70d361b88080", @ANYRESOCT], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) (async) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r1, r4}) (async) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000040)) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00'}) (rerun: 32) 07:34:59 executing program 3: r0 = socket(0x2, 0x80802, 0x0) (async) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) (async) dup3(0xffffffffffffffff, r2, 0x80000) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) 07:34:59 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xfffffffd}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) socket$unix(0x1, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xfffffffd}, 0x0, 0x8, 0xffffffffffffffff, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) (async) 07:34:59 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x300, 0x32, 0x0, 0x1c) 07:34:59 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) close(r0) 07:34:59 executing program 5: bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x10) [ 2054.802854][T14695] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2054.811106][T14695] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2054.828386][T14695] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2054.837511][T14695] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 07:34:59 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000340)={0x0, 0xfffffffffffffde6, &(0x7f0000000040)=[{&(0x7f0000000140)=""/92, 0x5c}], 0x1}, 0x40000122) sendmsg$sock(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d78f480ba52d72e863b750bfedcdf493edd53e8317003a99be6cc28f60f804a6e6c54e814fe049a9bb6790209e5a293eb45193fecf5aeee191488e345a4cdc6cb2439af46c2981086eb1cf30b329071ae06cec59b69bd02e83f3c3b8c7", 0x5d}], 0x1}, 0x0) 07:34:59 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) sendfile(r0, r0, &(0x7f0000000040)=0x10000, 0x7f) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r1, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x5, 0x10, 0x3, {0x0, 0xea60}, {0x77359400}, {0x1, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x3}, 0x0, 0x1, 0x0, 0x0, "7775d4a4997364d89a82067d46ddbbc5a35b735bb42b0ac9cfc3d9093cba4a34416db9e81cd4ab5ed47d135997e26dc586742bc2c029aa5919a2eb973d649045"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="01000700000000002e2f46696c653000"]) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r4, &(0x7f0000019180)=""/102395, 0x18ffb) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x480, 0x268, 0x328, 0x268, 0xe8, 0x328, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x6, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0xee}}}, {{@ip={@remote, @private=0xa010102, 0x0, 0xffffffff, 'ip_vti0\x00', 'bond0\x00', {}, {0xff}, 0x8, 0x2, 0x20}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xfc, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x3}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xff, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) 07:34:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback, 0x0, 0x1, [@dev]}, 0x14) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async, rerun: 32) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000400)="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", 0x1000}], 0x1) (rerun: 32) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @loopback, 0x0, 0x1, [@local]}, 0x14) (async) r2 = socket(0x2, 0x80802, 0x0) (async) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) (async, rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (rerun: 64) r3 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r3, r4, &(0x7f0000000240)=0x208, 0x9) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r5, @ANYBLOB="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", @ANYRESOCT], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) (async) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r1, r4}) (async) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000040)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'sit0\x00'}) [ 2054.861427][T14695] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 07:34:59 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x703, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f00000000c0), 0x806014) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) [ 2054.910347][T14719] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2054.926114][ T24] audit: type=1400 audit(1662449699.254:339): avc: denied { write } for pid=14718 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 07:35:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) 07:35:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback, 0x0, 0x1, [@dev]}, 0x14) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @loopback, 0x0, 0x1, [@local]}, 0x14) 07:35:02 executing program 0: r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r0, 0x12081ff) pwritev2(r0, &(0x7f0000000180)=[{&(0x7f0000000000)='Y', 0x1}], 0x1, 0x0, 0x7f, 0x12) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1e70c2, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) fallocate(r2, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000140)={0x30a4, r0}) 07:35:02 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r1, r2, &(0x7f0000000240)=0x208, 0x9) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r3, @ANYBLOB="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", @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) read$char_usb(r2, &(0x7f00000000c0)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) 07:35:02 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r1) 07:35:02 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) sendfile(r0, r0, &(0x7f0000000040)=0x10000, 0x7f) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r1, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x5, 0x10, 0x3, {0x0, 0xea60}, {0x77359400}, {0x1, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x3}, 0x0, 0x1, 0x0, 0x0, "7775d4a4997364d89a82067d46ddbbc5a35b735bb42b0ac9cfc3d9093cba4a34416db9e81cd4ab5ed47d135997e26dc586742bc2c029aa5919a2eb973d649045"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="01000700000000002e2f46696c653000"]) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r4, &(0x7f0000019180)=""/102395, 0x18ffb) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x480, 0x268, 0x328, 0x268, 0xe8, 0x328, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x6, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0xee}}}, {{@ip={@remote, @private=0xa010102, 0x0, 0xffffffff, 'ip_vti0\x00', 'bond0\x00', {}, {0xff}, 0x8, 0x2, 0x20}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xfc, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x3}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xff, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) socket$unix(0x1, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) sendfile(r0, r0, &(0x7f0000000040)=0x10000, 0x7f) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) sendmsg$can_bcm(r1, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x5, 0x10, 0x3, {0x0, 0xea60}, {0x77359400}, {0x1, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x3}, 0x0, 0x1, 0x0, 0x0, "7775d4a4997364d89a82067d46ddbbc5a35b735bb42b0ac9cfc3d9093cba4a34416db9e81cd4ab5ed47d135997e26dc586742bc2c029aa5919a2eb973d649045"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="01000700000000002e2f46696c653000"]) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$char_usb(r4, &(0x7f0000019180)=""/102395, 0x18ffb) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x480, 0x268, 0x328, 0x268, 0xe8, 0x328, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x6, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0xee}}}, {{@ip={@remote, @private=0xa010102, 0x0, 0xffffffff, 'ip_vti0\x00', 'bond0\x00', {}, {0xff}, 0x8, 0x2, 0x20}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xfc, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x3}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xff, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) (async) 07:35:02 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$inet_sctp(r2, &(0x7f00000013c0)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000001380)=[@sndrcv={0x2c}], 0x2c}, 0x0) 07:35:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback, 0x0, 0x1, [@dev]}, 0x14) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @loopback, 0x0, 0x1, [@local]}, 0x14) 07:35:02 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=@un=@abs={0x8}, 0x8) [ 2057.801120][T14733] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2057.828701][T14733] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 07:35:02 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) sendfile(r0, r0, &(0x7f0000000040)=0x10000, 0x7f) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r1, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x5, 0x10, 0x3, {0x0, 0xea60}, {0x77359400}, {0x1, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x3}, 0x0, 0x1, 0x0, 0x0, "7775d4a4997364d89a82067d46ddbbc5a35b735bb42b0ac9cfc3d9093cba4a34416db9e81cd4ab5ed47d135997e26dc586742bc2c029aa5919a2eb973d649045"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="01000700000000002e2f46696c653000"]) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r4, &(0x7f0000019180)=""/102395, 0x18ffb) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x480, 0x268, 0x328, 0x268, 0xe8, 0x328, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x6, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0xee}}}, {{@ip={@remote, @private=0xa010102, 0x0, 0xffffffff, 'ip_vti0\x00', 'bond0\x00', {}, {0xff}, 0x8, 0x2, 0x20}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xfc, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x3}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xff, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) socket$unix(0x1, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) sendfile(r0, r0, &(0x7f0000000040)=0x10000, 0x7f) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) sendmsg$can_bcm(r1, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x5, 0x10, 0x3, {0x0, 0xea60}, {0x77359400}, {0x1, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x3}, 0x0, 0x1, 0x0, 0x0, "7775d4a4997364d89a82067d46ddbbc5a35b735bb42b0ac9cfc3d9093cba4a34416db9e81cd4ab5ed47d135997e26dc586742bc2c029aa5919a2eb973d649045"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="01000700000000002e2f46696c653000"]) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$char_usb(r4, &(0x7f0000019180)=""/102395, 0x18ffb) (async) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x480, 0x268, 0x328, 0x268, 0xe8, 0x328, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x6, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0xee}}}, {{@ip={@remote, @private=0xa010102, 0x0, 0xffffffff, 'ip_vti0\x00', 'bond0\x00', {}, {0xff}, 0x8, 0x2, 0x20}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xfc, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x3}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xff, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) (async) 07:35:02 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) r1 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) (async) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r1, r2, &(0x7f0000000240)=0x208, 0x9) (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r3, @ANYBLOB="00022dbd7000fedbdf250300000008000400e0000002c4bd4572333c6ec1b1fd5b8b01f7dfe7e3996772fc12b05b245ee1735be6071e583078abc90d94248538991e5fcf2dc96a8ed8defc60b1c608a1b8eecc0a2fc4dc983e0d29b79f0878db3b8c92ae16b7e3db182d2fcdd95c9d3422c0bb84dac0de0b39d3e19fbcfded53530b06b41c68baa2cc58db4e2166ce7a610000ffedff581bd7ba9d2c6aafce42270343107f695871e73e8bd41867ef145a9223bdb122aa29464c36aca08d609c170b21843de1ec2611cdb8f19b7f05e8296b2947cfac6543c3319cae2f62a524d8665397a63bb405c0a3eed31cc7b54e64e076b025cce944a1616177bc9d1b0bf31380fd81f762a446c31f9aaa1622b12fafd1a2c4f9779b44301d3de5fcd3eacec73ed41f6c882834e8a6ce1e036126446de3b839b2e3fb6707cf1bb64273b2d44b03360e9f209d2f005c9cca77f60d26d55ff7dd4f365ea86dc72279c9e9218ab09869cdbb2e5cb0a9c7f9e3cd20544feb15def710480227f681e9fb37dfd4186b4657d49c0d35ec2d5cc24b69568678fe1f70d361b88080", @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) read$char_usb(r2, &(0x7f00000000c0)=""/102400, 0x19000) (async) socket$nl_generic(0x10, 0x3, 0x10) 07:35:02 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f00000002c0), 0x8) 07:35:02 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f00000000c0), 0x4) [ 2057.914869][T14769] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2057.923290][T14764] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 07:35:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) (async) 07:35:09 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r1, r2, &(0x7f0000000240)=0x208, 0x9) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r3, @ANYBLOB="00022dbd7000fedbdf250300000008000400e0000002c4bd4572333c6ec1b1fd5b8b01f7dfe7e3996772fc12b05b245ee1735be6071e583078abc90d94248538991e5fcf2dc96a8ed8defc60b1c608a1b8eecc0a2fc4dc983e0d29b79f0878db3b8c92ae16b7e3db182d2fcdd95c9d3422c0bb84dac0de0b39d3e19fbcfded53530b06b41c68baa2cc58db4e2166ce7a610000ffedff581bd7ba9d2c6aafce42270343107f695871e73e8bd41867ef145a9223bdb122aa29464c36aca08d609c170b21843de1ec2611cdb8f19b7f05e8296b2947cfac6543c3319cae2f62a524d8665397a63bb405c0a3eed31cc7b54e64e076b025cce944a1616177bc9d1b0bf31380fd81f762a446c31f9aaa1622b12fafd1a2c4f9779b44301d3de5fcd3eacec73ed41f6c882834e8a6ce1e036126446de3b839b2e3fb6707cf1bb64273b2d44b03360e9f209d2f005c9cca77f60d26d55ff7dd4f365ea86dc72279c9e9218ab09869cdbb2e5cb0a9c7f9e3cd20544feb15def710480227f681e9fb37dfd4186b4657d49c0d35ec2d5cc24b69568678fe1f70d361b88080", @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) read$char_usb(r2, &(0x7f00000000c0)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) socket$inet6(0xa, 0x0, 0x9) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) (async) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (async) sendfile(r1, r2, &(0x7f0000000240)=0x208, 0x9) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r3, @ANYBLOB="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", @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) (async) read$char_usb(r2, &(0x7f00000000c0)=""/102400, 0x19000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 07:35:09 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) sendto$inet(r0, &(0x7f0000000000)="10", 0x1, 0x0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 07:35:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback, 0x0, 0x1, [@dev]}, 0x14) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @loopback, 0x0, 0x1, [@local]}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) (async) socket$netlink(0x10, 0x3, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback, 0x0, 0x1, [@dev]}, 0x14) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @loopback, 0x0, 0x1, [@local]}, 0x14) (async) 07:35:09 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x1000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) 07:35:09 executing program 0: r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r0, 0x12081ff) pwritev2(r0, &(0x7f0000000180)=[{&(0x7f0000000000)='Y', 0x1}], 0x1, 0x0, 0x7f, 0x12) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1e70c2, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r3, 0x100000011, 0x0, 0x2811fdff) fallocate(r2, 0x0, 0x0, 0x4003fe) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000140)={0x30a4, r0}) 07:35:09 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x108, &(0x7f00000000c0)={r2}, &(0x7f0000000180)=0x18) 07:35:09 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) read$char_usb(r0, &(0x7f00000000c0)=""/88, 0x58) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) 07:35:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000017f0ecefe709c227201e10000010000000001000000ac141400"], 0x14) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff, 0x48}}, './file0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x800, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0x9}, {0xfff2, 0xd}, {0xd, 0xf}}, [{0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @loopback, 0x0, 0x1, [@local]}, 0x14) [ 2064.960109][T14787] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2064.969726][T14787] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 07:35:09 executing program 5: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0), &(0x7f0000000080)) [ 2065.032777][T14815] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 07:35:09 executing program 5: futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f00000000c0), 0x2) 07:35:09 executing program 5: bpf$BPF_BTF_LOAD(0xc, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) [ 2065.076839][T14815] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 07:35:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) 07:35:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000017f0ecefe709c227201e10000010000000001000000ac141400"], 0x14) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff, 0x48}}, './file0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x800, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0x9}, {0xfff2, 0xd}, {0xd, 0xf}}, [{0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x14) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @loopback, 0x0, 0x1, [@local]}, 0x14) 07:35:16 executing program 5: r0 = openat$tun(0xffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 07:35:16 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x2, 0x300) sendmmsg$unix(r0, &(0x7f0000003680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x10, 0x1, 0x1, [r1]}}], 0x10}}], 0x1, 0x0) 07:35:16 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) read$char_usb(r0, &(0x7f00000000c0)=""/88, 0x58) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) (async) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) (async) read$char_usb(r0, &(0x7f00000000c0)=""/88, 0x58) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) (async) 07:35:16 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x1000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) 07:35:16 executing program 5: futex(&(0x7f00000003c0), 0x4, 0x0, 0x0, 0x0, 0x0) 07:35:16 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) accept4$inet(r0, 0x0, 0x0, 0x0) 07:35:16 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt(r0, 0x29, 0x49, 0x0, 0x0) 07:35:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x8}]}, 0x1c}}, 0x0) 07:35:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@security={'security\x00', 0xe, 0x4, 0x308, 0xffffffff, 0x220, 0x220, 0xd0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'pimreg\x00'}, 0x0, 0x70, 0xd0}, @common=@SET}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {}, [@common=@osf={{}, {'syz0\x00'}}, @common=@addrtype]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}, {{@uncond, 0x0, 0x70, 0xef}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xfe64) 07:35:16 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) (async) read$char_usb(r0, &(0x7f00000000c0)=""/88, 0x58) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) [ 2072.163901][T14839] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2072.200389][T14840] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 07:35:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 07:35:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vxcan1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x200003) 07:35:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00000017f0ecefe709c227201e10000010000000001000000ac141400"], 0x14) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff, 0x48}}, './file0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@gettfilter={0x2c, 0x2e, 0x800, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0x9}, {0xfff2, 0xd}, {0xd, 0xf}}, [{0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x14) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @loopback, 0x0, 0x1, [@local]}, 0x14) 07:35:25 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 07:35:25 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000000c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102385, 0x18ff1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) read$char_usb(r2, &(0x7f0000000040)=""/63, 0x3f) 07:35:25 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000, 0x1000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) 07:35:25 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 07:35:25 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x18000, 0x0) 07:35:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002680)=@newlink={0x20, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x300}}, 0x20}}, 0x0) 07:35:25 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FICLONERANGE(r0, 0x4020940d, 0x0) 07:35:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback, 0x0, 0x1, [@dev]}, 0x14) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0x7, 0x8201) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_getrule={0x1c, 0x22, 0x2, 0x70bd28, 0x25dfdbfe, {0x2, 0x20, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x20}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @loopback, 0x0, 0x1, [@local]}, 0x14) 07:35:25 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000002380)=@base={0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 07:35:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000a00)={{0x0, @loopback, 0x0, 0x0, 'ovf\x00'}, {@dev, 0x4e21}}, 0x44) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 2081.371660][T14877] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2081.399549][T14878] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2081.400750][T14885] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2081.452547][T14890] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2081.466484][T14894] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:0 [ 2081.493009][T14890] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 07:35:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vxcan1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x200003) 07:35:34 executing program 0: r0 = fsopen(&(0x7f0000000100)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x00', &(0x7f0000000140)='2', 0x1) 07:35:34 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x88d01, 0x0) 07:35:34 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000000c0)) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102385, 0x18ff1) (async) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) read$char_usb(r2, &(0x7f0000000040)=""/63, 0x3f) 07:35:34 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$unix(0x1, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) 07:35:34 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback, 0x0, 0x1, [@dev]}, 0x14) (async, rerun: 64) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async, rerun: 64) r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0x7, 0x8201) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_getrule={0x1c, 0x22, 0x2, 0x70bd28, 0x25dfdbfe, {0x2, 0x20, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x20}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @loopback, 0x0, 0x1, [@local]}, 0x14) 07:35:34 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt(r0, 0x29, 0x3e, 0x0, 0x0) 07:35:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) 07:35:34 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5451, 0x0) [ 2090.562050][T14907] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2090.586070][T14906] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 07:35:34 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r1, r2, &(0x7f0000000240)=0x208, 0x9) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r3, @ANYBLOB="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", @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) read$char_usb(r2, &(0x7f00000000c0)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) 07:35:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback, 0x0, 0x1, [@dev]}, 0x14) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f00000001c0)="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", 0xfffffffffffffc99}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="e00000017f001a010000000001000000ac1414aa"], 0x14) [ 2090.606701][T14907] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 07:35:35 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000000c0)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102385, 0x18ff1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) read$char_usb(r2, &(0x7f0000000040)=""/63, 0x3f) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f00000000c0)) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$char_usb(r1, &(0x7f0000019180)=""/102385, 0x18ff1) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0) (async) read$char_usb(r2, &(0x7f0000000040)=""/63, 0x3f) (async) [ 2090.639629][T14907] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2090.654125][T14907] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2090.663095][T14922] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2090.694196][T14907] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2090.706884][T14907] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2090.715457][T14907] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2090.727818][T14907] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 07:35:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vxcan1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x200003) 07:35:42 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r1, r2, &(0x7f0000000240)=0x208, 0x9) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r3, @ANYBLOB="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", @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) read$char_usb(r2, &(0x7f00000000c0)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) 07:35:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x20300, 0x84) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback, 0x0, 0x1, [@dev]}, 0x14) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:35:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback, 0x0, 0x1, [@dev]}, 0x14) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0x7, 0x8201) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_getrule={0x1c, 0x22, 0x2, 0x70bd28, 0x25dfdbfe, {0x2, 0x20, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x20}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @loopback, 0x0, 0x1, [@local]}, 0x14) 07:35:42 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$kcm(0x29, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000000c0)="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") read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) 07:35:42 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$unix(0x1, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) socket$unix(0x1, 0x2, 0x0) (async) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) socket$unix(0x1, 0x0, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) (async) 07:35:42 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r1, r2, &(0x7f0000000240)=0x208, 0x9) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r3, @ANYBLOB="00022dbd7000fedbdf250300000008000400e0000002c4bd4572333c6ec1b1fd5b8b01f7dfe7e3996772fc12b05b245ee1735be6071e583078abc90d94248538991e5fcf2dc96a8ed8defc60b1c608a1b8eecc0a2fc4dc983e0d29b79f0878db3b8c92ae16b7e3db182d2fcdd95c9d3422c0bb84dac0de0b39d3e19fbcfded53530b06b41c68baa2cc58db4e2166ce7a610000ffedff581bd7ba9d2c6aafce42270343107f695871e73e8bd41867ef145a9223bdb122aa29464c36aca08d609c170b21843de1ec2611cdb8f19b7f05e8296b2947cfac6543c3319cae2f62a524d8665397a63bb405c0a3eed31cc7b54e64e076b025cce944a1616177bc9d1b0bf31380fd81f762a446c31f9aaa1622b12fafd1a2c4f9779b44301d3de5fcd3eacec73ed41f6c882834e8a6ce1e036126446de3b839b2e3fb6707cf1bb64273b2d44b03360e9f209d2f005c9cca77f60d26d55ff7dd4f365ea86dc72279c9e9218ab09869cdbb2e5cb0a9c7f9e3cd20544feb15def710480227f681e9fb37dfd4186b4657d49c0d35ec2d5cc24b69568678fe1f70d361b88080", @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) read$char_usb(r2, &(0x7f00000000c0)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) 07:35:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x20300, 0x84) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback, 0x0, 0x1, [@dev]}, 0x14) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:35:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001030000010000000001000001ac141400"], 0x14) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @loopback, 0x0, 0x1, [@local]}, 0x14) [ 2097.680227][T14939] validate_nla: 57 callbacks suppressed [ 2097.680240][T14939] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2097.695829][T14944] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2097.705676][T14944] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2097.717610][T14938] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 07:35:42 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) socket$unix(0x1, 0x0, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) 07:35:42 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000000)={0x80, {0x0, 0x7ff, 0x8c, 0x0, 0xf30e}}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) 07:35:42 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r1, r2, &(0x7f0000000240)=0x208, 0x9) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r3, @ANYBLOB="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", @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) read$char_usb(r2, &(0x7f00000000c0)=""/102400, 0x19000) [ 2097.765091][T14960] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2097.802933][T14961] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2097.824184][T14960] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2097.840802][T14961] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 07:35:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = fcntl$dupfd(r1, 0xe250369a6ed3a498, r0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) setsockopt$sock_int(r1, 0x1, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) 07:35:50 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r1, r2, &(0x7f0000000240)=0x208, 0x9) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) read$char_usb(r2, &(0x7f00000000c0)=""/102400, 0x19000) 07:35:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001030000010000000001000001ac141400"], 0x14) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @loopback, 0x0, 0x1, [@local]}, 0x14) 07:35:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x20300, 0x84) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback, 0x0, 0x1, [@dev]}, 0x14) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:35:50 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$kcm(0x29, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000000c0)="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") read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$kcm(0x29, 0x3, 0x0) (async) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000000c0)="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") (async) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) (async) 07:35:50 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = socket(0x2, 0x80802, 0x0) (async, rerun: 64) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000000)={0x80, {0x0, 0x7ff, 0x8c, 0x0, 0xf30e}}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) [ 2106.039947][T14987] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2106.072293][T14994] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 07:35:50 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket(0x2, 0x80802, 0x0) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000000)={0x80, {0x0, 0x7ff, 0x8c, 0x0, 0xf30e}}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) 07:35:50 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r1, r2, &(0x7f0000000240)=0x208, 0x9) read$char_usb(r2, &(0x7f00000000c0)=""/102400, 0x19000) 07:35:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x20300, 0x84) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback, 0x0, 0x1, [@dev]}, 0x14) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:35:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001030000010000000001000001ac141400"], 0x14) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)={@multicast1, @loopback, 0x0, 0x1, [@local]}, 0x14) 07:35:50 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r2, &(0x7f00000000c0)=""/102400, 0x19000) [ 2106.098746][T14987] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2106.122523][T14991] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 07:35:50 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) read$char_usb(0xffffffffffffffff, &(0x7f00000000c0)=""/102400, 0x19000) [ 2106.168238][T15010] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:35:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x20300, 0x84) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback, 0x0, 0x1, [@dev]}, 0x14) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:35:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = fcntl$dupfd(r1, 0xe250369a6ed3a498, r0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) setsockopt$sock_int(r1, 0x1, 0x0, 0x0, 0x0) (async) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) 07:35:59 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fremovexattr(r0, &(0x7f0000000000)=@random={'os2.', '(%\\\\j(,^)-:$\\-@/\x00'}) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) 07:35:59 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$kcm(0x29, 0x3, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000000c0)="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") (async) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) 07:35:59 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) read$char_usb(0xffffffffffffffff, &(0x7f00000000c0)=""/102400, 0x19000) 07:35:59 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) readahead(r0, 0x4, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) socket$unix(0x1, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x0, 0x0, 0x80, 0x3, 0x0, 0x7, 0xd1053d8bc5759db1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3a513b55}, 0x4020, 0x800000762e18bb, 0x10000, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r2, &(0x7f0000019180)=""/102395, 0x18ffb) socket(0x2, 0x80802, 0x0) r3 = epoll_create1(0x0) r4 = socket(0x27, 0x80802, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x7}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000040)={0x2000001c}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000000)) close(r3) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000040)={0x80000000, 0x782, 0x5, 0x1632, 0x6}) 07:35:59 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) read$char_usb(0xffffffffffffffff, &(0x7f00000000c0)=""/102400, 0x19000) 07:35:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x20300, 0x84) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback, 0x0, 0x1, [@dev]}, 0x14) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2115.278832][T15040] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:35:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x20300, 0x84) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback, 0x0, 0x1, [@dev]}, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:35:59 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) socket$inet6(0xa, 0x0, 0x9) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) 07:35:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x20300, 0x84) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback, 0x0, 0x1, [@dev]}, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2115.319755][T15047] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2115.354993][T15052] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:35:59 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) 07:35:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x20300, 0x84) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @loopback, 0x0, 0x1, [@dev]}, 0x14) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2115.397687][T15057] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2115.445858][T15062] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:36:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) r1 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) r2 = fcntl$dupfd(r1, 0xe250369a6ed3a498, r0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) (async, rerun: 32) setsockopt$sock_int(r1, 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) 07:36:06 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff2}, {0x1, 0xffe0}, {0xfff0, 0x3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x0, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) sync_file_range(r3, 0x400, 0x2f, 0x2) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000100)={{0x5, 0x52}, 0x100, './file0\x00'}) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f00000000c0)) 07:36:06 executing program 1: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@ipv6_getnexthop={0x1c, 0x6a, 0x201, 0x70bd2d, 0x25dfdbfe, {}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x195}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001d000e0025bd7000ffdbdf25bc21781535c6d5733d00b9fd601c000000", @ANYRES32=r1, @ANYBLOB="0200620808000b000002000005000c000900000008000400030000000a000200bbbbbbbbbbbb00"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4115) socket$unix(0x1, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', r1, 0x4, 0x1, 0x4, 0x4, 0x40, @dev={0xfe, 0x80, '\x00', 0x18}, @dev={0xfe, 0x80, '\x00', 0xf}, 0x20, 0xa31db93a74997a9d, 0x80000000, 0x5417}}) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=@deltclass={0xf4, 0x29, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xa, 0xe}, {0x5, 0x4}, {0xb, 0xfff2}}, [@tclass_kind_options=@c_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0x3}, @TCA_HTB_CEIL64={0xc, 0x7, 0x1}]}}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_hfsc={{0x9}, {0x74, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x4, 0x401, 0x4}}, @TCA_HFSC_FSC={0x10, 0x2, {0x101, 0xfffffeff, 0x15392df9}}, @TCA_HFSC_RSC={0x10, 0x1, {0xffffffc1, 0x100, 0x7}}, @TCA_HFSC_FSC={0x10, 0x2, {0x3f, 0x0, 0x8}}, @TCA_HFSC_RSC={0x10, 0x1, {0x9, 0x7, 0x1}}, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0x0, 0xdd}}, @TCA_HFSC_USC={0x10, 0x3, {0x100, 0x2, 0x2}}]}}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_ingress={0xc}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4801}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000017c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="020029c10000000000000000000000006fd370541bed5838e0d24a2af611a81f68ba464eb75fa74c6478372bdbb58365d9bad1cdb1b39fb18bd270d6d9a607cf375a07eb9d267fb7ca750ff05d7b206b74120318c52091552f2ca341721ccd364133720fad55aa3afe1722271c72c6cd75fa9eb5701cb8b5bbb1f2c9f7ac3bf64ba96fad9c1709eb2f978fcbd34aed7ba40c791d832074ed43bfd0a7d9cc9b8fef4388bf588865af1a5b7c5ef70388c87dd8840f2e2bc58abc090c476b31afeb44a6bf5527633a7b50da9ea5f31cb1ca60a48aa26ea34a9e"]) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x5, 0x3f, 0x9, 0xb2, 0x0, 0x7fffffffffffffff, 0xa002, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x85, 0x2, @perf_bp={&(0x7f00000004c0), 0xa}, 0x1000, 0x7ff, 0x7, 0x9, 0x6, 0x7, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x2) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xff00, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) 07:36:06 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) readahead(r0, 0x4, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) (async) socket$unix(0x1, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x0, 0x0, 0x80, 0x3, 0x0, 0x7, 0xd1053d8bc5759db1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3a513b55}, 0x4020, 0x800000762e18bb, 0x10000, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r2, &(0x7f0000019180)=""/102395, 0x18ffb) socket(0x2, 0x80802, 0x0) (async) r3 = epoll_create1(0x0) r4 = socket(0x27, 0x80802, 0x0) (async, rerun: 64) r5 = epoll_create1(0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x7}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000040)={0x2000001c}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000000)) (async) close(r3) (async) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000040)={0x80000000, 0x782, 0x5, 0x1632, 0x6}) 07:36:06 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) 07:36:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x20300, 0x84) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:36:06 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) [ 2122.358291][T15070] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:36:06 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) 07:36:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:36:06 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) readahead(r0, 0x4, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) socket$unix(0x1, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x0, 0x0, 0x80, 0x3, 0x0, 0x7, 0xd1053d8bc5759db1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3a513b55}, 0x4020, 0x800000762e18bb, 0x10000, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r2, &(0x7f0000019180)=""/102395, 0x18ffb) socket(0x2, 0x80802, 0x0) r3 = epoll_create1(0x0) r4 = socket(0x27, 0x80802, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x7}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000040)={0x2000001c}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000000)) close(r3) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000040)={0x80000000, 0x782, 0x5, 0x1632, 0x6}) pipe2$9p(&(0x7f0000000000), 0x4800) (async) readahead(r0, 0x4, 0x1) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x0, 0x0, 0x80, 0x3, 0x0, 0x7, 0xd1053d8bc5759db1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3a513b55}, 0x4020, 0x800000762e18bb, 0x10000, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$char_usb(r2, &(0x7f0000019180)=""/102395, 0x18ffb) (async) socket(0x2, 0x80802, 0x0) (async) epoll_create1(0x0) (async) socket(0x27, 0x80802, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x7}, 0x48) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000040)={0x2000001c}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000000)) (async) close(r3) (async) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000040)={0x80000000, 0x782, 0x5, 0x1632, 0x6}) (async) [ 2122.398443][T15070] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:36:06 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) 07:36:06 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) [ 2122.452547][T15088] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2122.488713][T15088] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:36:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r3 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r3, r4, &(0x7f0000000240)=0x208, 0x9) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r5, @ANYBLOB="00022dbd7000fedbdf250300000008000400e0000002c4bd4572333c6ec1b1fd5b8b01f7dfe7e3996772fc12b05b245ee1735be6071e583078abc90d94248538991e5fcf2dc96a8ed8defc60b1c608a1b8eecc0a2fc4dc983e0d29b79f0878db3b8c92ae16b7e3db182d2fcdd95c9d3422c0bb84dac0de0b39d3e19fbcfded53530b06b41c68baa2cc58db4e2166ce7a610000ffedff581bd7ba9d2c6aafce42270343107f695871e73e8bd41867ef145a9223bdb122aa29464c36aca08d609c170b21843de1ec2611cdb8f19b7f05e8296b2947cfac6543c3319cae2f62a524d8665397a63bb405c0a3eed31cc7b54e64e076b025cce944a1616177bc9d1b0bf31380fd81f762a446c31f9aaa1622b12fafd1a2c4f9779b44301d3de5fcd3eacec73ed41f6c882834e8a6ce1e036126446de3b839b2e3fb6707cf1bb64273b2d44b03360e9f209d2f005c9cca77f60d26d55ff7dd4f365ea86dc72279c9e9218ab09869cdbb2e5cb0a9c7f9e3cd20544feb15def710480227f681e9fb37dfd4186b4657d49c0d35ec2d5cc24b69568678fe1f70d361b88080", @ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) 07:36:13 executing program 0: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) 07:36:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:36:13 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)) close(0xffffffffffffffff) fcntl$getflags(0xffffffffffffffff, 0x401) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) r2 = socket(0x2, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) close(r3) close(r3) socket$can_bcm(0x1d, 0x2, 0x2) r5 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x20, 0x80, 0x0, 0x2, 0x14, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x5, 0x7}, 0x4240, 0x3, 0x4, 0x4, 0x3ff, 0x402, 0x1000, 0x0, 0x80, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r5, 0x1) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xff, 0x5, 0xf4, 0x90, 0x0, 0x8dde, 0x20010, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x40, 0x2, @perf_config_ext={0x10001, 0x52}, 0x40008, 0x8000, 0x669d, 0x4, 0x3ff, 0xd9ac, 0x504d, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xb, r7, 0xb) read$char_usb(r6, &(0x7f0000019180)=""/102395, 0x18ffb) 07:36:13 executing program 1: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@ipv6_getnexthop={0x1c, 0x6a, 0x201, 0x70bd2d, 0x25dfdbfe, {}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x195}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001d000e0025bd7000ffdbdf25bc21781535c6d5733d00b9fd601c000000", @ANYRES32=r1, @ANYBLOB="0200620808000b000002000005000c000900000008000400030000000a000200bbbbbbbbbbbb00"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4115) socket$unix(0x1, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', r1, 0x4, 0x1, 0x4, 0x4, 0x40, @dev={0xfe, 0x80, '\x00', 0x18}, @dev={0xfe, 0x80, '\x00', 0xf}, 0x20, 0xa31db93a74997a9d, 0x80000000, 0x5417}}) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=@deltclass={0xf4, 0x29, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xa, 0xe}, {0x5, 0x4}, {0xb, 0xfff2}}, [@tclass_kind_options=@c_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0x3}, @TCA_HTB_CEIL64={0xc, 0x7, 0x1}]}}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_hfsc={{0x9}, {0x74, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x4, 0x401, 0x4}}, @TCA_HFSC_FSC={0x10, 0x2, {0x101, 0xfffffeff, 0x15392df9}}, @TCA_HFSC_RSC={0x10, 0x1, {0xffffffc1, 0x100, 0x7}}, @TCA_HFSC_FSC={0x10, 0x2, {0x3f, 0x0, 0x8}}, @TCA_HFSC_RSC={0x10, 0x1, {0x9, 0x7, 0x1}}, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0x0, 0xdd}}, @TCA_HFSC_USC={0x10, 0x3, {0x100, 0x2, 0x2}}]}}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_ingress={0xc}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4801}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000017c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="020029c10000000000000000000000006fd370541bed5838e0d24a2af611a81f68ba464eb75fa74c6478372bdbb58365d9bad1cdb1b39fb18bd270d6d9a607cf375a07eb9d267fb7ca750ff05d7b206b74120318c52091552f2ca341721ccd364133720fad55aa3afe1722271c72c6cd75fa9eb5701cb8b5bbb1f2c9f7ac3bf64ba96fad9c1709eb2f978fcbd34aed7ba40c791d832074ed43bfd0a7d9cc9b8fef4388bf588865af1a5b7c5ef70388c87dd8840f2e2bc58abc090c476b31afeb44a6bf5527633a7b50da9ea5f31cb1ca60a48aa26ea34a9e"]) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x5, 0x3f, 0x9, 0xb2, 0x0, 0x7fffffffffffffff, 0xa002, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x85, 0x2, @perf_bp={&(0x7f00000004c0), 0xa}, 0x1000, 0x7ff, 0x7, 0x9, 0x6, 0x7, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x2) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xff00, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) 07:36:13 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) (async) r1 = socket(0x2, 0x80802, 0x0) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff2}, {0x1, 0xffe0}, {0xfff0, 0x3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x0, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) (async) sync_file_range(r3, 0x400, 0x2f, 0x2) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000100)={{0x5, 0x52}, 0x100, './file0\x00'}) (async) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f00000000c0)) 07:36:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:36:13 executing program 0: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) 07:36:13 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) (async) r1 = socket(0x2, 0x80802, 0x0) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff2}, {0x1, 0xffe0}, {0xfff0, 0x3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x0, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) sync_file_range(r3, 0x400, 0x2f, 0x2) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000100)={{0x5, 0x52}, 0x100, './file0\x00'}) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f00000000c0)) 07:36:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:36:13 executing program 0: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) 07:36:13 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ftruncate(r1, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200440c5}, 0x4) 07:36:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) r3 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) (async) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r3, r4, &(0x7f0000000240)=0x208, 0x9) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r5, @ANYBLOB="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", @ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) (async) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) 07:36:21 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) 07:36:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:36:21 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff2}, {0x1, 0xffe0}, {0xfff0, 0x3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x0, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) sync_file_range(r3, 0x400, 0x2f, 0x2) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000100)={{0x5, 0x52}, 0x100, './file0\x00'}) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f00000000c0)) 07:36:21 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ftruncate(r1, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200440c5}, 0x4) 07:36:21 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)) close(0xffffffffffffffff) (async) fcntl$getflags(0xffffffffffffffff, 0x401) (async) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) r2 = socket(0x2, 0x80802, 0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) (async) close(r3) (async) close(r3) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) r5 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x20, 0x80, 0x0, 0x2, 0x14, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x5, 0x7}, 0x4240, 0x3, 0x4, 0x4, 0x3ff, 0x402, 0x1000, 0x0, 0x80, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r5, 0x1) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xff, 0x5, 0xf4, 0x90, 0x0, 0x8dde, 0x20010, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x40, 0x2, @perf_config_ext={0x10001, 0x52}, 0x40008, 0x8000, 0x669d, 0x4, 0x3ff, 0xd9ac, 0x504d, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xb, r7, 0xb) (async) read$char_usb(r6, &(0x7f0000019180)=""/102395, 0x18ffb) 07:36:21 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) 07:36:21 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000000)) (async) close(0xffffffffffffffff) (async) fcntl$getflags(0xffffffffffffffff, 0x401) (async) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) r2 = socket(0x2, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) (async) close(r3) (async) close(r3) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) r5 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x20, 0x80, 0x0, 0x2, 0x14, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_config_ext={0x5, 0x7}, 0x4240, 0x3, 0x4, 0x4, 0x3ff, 0x402, 0x1000, 0x0, 0x80, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r5, 0x1) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xff, 0x5, 0xf4, 0x90, 0x0, 0x8dde, 0x20010, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x40, 0x2, @perf_config_ext={0x10001, 0x52}, 0x40008, 0x8000, 0x669d, 0x4, 0x3ff, 0xd9ac, 0x504d, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xb, r7, 0xb) read$char_usb(r6, &(0x7f0000019180)=""/102395, 0x18ffb) 07:36:21 executing program 0: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) [ 2136.724020][T15158] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:36:21 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) 07:36:21 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) 07:36:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x20300, 0x84) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2136.771729][T15158] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2136.821027][T15181] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 2136.843752][T15181] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 07:36:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) r3 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) (async) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r3, r4, &(0x7f0000000240)=0x208, 0x9) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r5, @ANYBLOB="00022dbd7000fedbdf250300000008000400e0000002c4bd4572333c6ec1b1fd5b8b01f7dfe7e3996772fc12b05b245ee1735be6071e583078abc90d94248538991e5fcf2dc96a8ed8defc60b1c608a1b8eecc0a2fc4dc983e0d29b79f0878db3b8c92ae16b7e3db182d2fcdd95c9d3422c0bb84dac0de0b39d3e19fbcfded53530b06b41c68baa2cc58db4e2166ce7a610000ffedff581bd7ba9d2c6aafce42270343107f695871e73e8bd41867ef145a9223bdb122aa29464c36aca08d609c170b21843de1ec2611cdb8f19b7f05e8296b2947cfac6543c3319cae2f62a524d8665397a63bb405c0a3eed31cc7b54e64e076b025cce944a1616177bc9d1b0bf31380fd81f762a446c31f9aaa1622b12fafd1a2c4f9779b44301d3de5fcd3eacec73ed41f6c882834e8a6ce1e036126446de3b839b2e3fb6707cf1bb64273b2d44b03360e9f209d2f005c9cca77f60d26d55ff7dd4f365ea86dc72279c9e9218ab09869cdbb2e5cb0a9c7f9e3cd20544feb15def710480227f681e9fb37dfd4186b4657d49c0d35ec2d5cc24b69568678fe1f70d361b88080", @ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) 07:36:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:36:28 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) 07:36:28 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ftruncate(r1, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200440c5}, 0x4) 07:36:28 executing program 1: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@ipv6_getnexthop={0x1c, 0x6a, 0x201, 0x70bd2d, 0x25dfdbfe, {}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x195}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001d000e0025bd7000ffdbdf25bc21781535c6d5733d00b9fd601c000000", @ANYRES32=r1, @ANYBLOB="0200620808000b000002000005000c000900000008000400030000000a000200bbbbbbbbbbbb00"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4115) socket$unix(0x1, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000200)={'ip6tnl0\x00', r1, 0x4, 0x1, 0x4, 0x4, 0x40, @dev={0xfe, 0x80, '\x00', 0x18}, @dev={0xfe, 0x80, '\x00', 0xf}, 0x20, 0xa31db93a74997a9d, 0x80000000, 0x5417}}) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=@deltclass={0xf4, 0x29, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xa, 0xe}, {0x5, 0x4}, {0xb, 0xfff2}}, [@tclass_kind_options=@c_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_CEIL64={0xc, 0x7, 0x3}, @TCA_HTB_CEIL64={0xc, 0x7, 0x1}]}}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_hfsc={{0x9}, {0x74, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x4, 0x401, 0x4}}, @TCA_HFSC_FSC={0x10, 0x2, {0x101, 0xfffffeff, 0x15392df9}}, @TCA_HFSC_RSC={0x10, 0x1, {0xffffffc1, 0x100, 0x7}}, @TCA_HFSC_FSC={0x10, 0x2, {0x3f, 0x0, 0x8}}, @TCA_HFSC_RSC={0x10, 0x1, {0x9, 0x7, 0x1}}, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0x0, 0xdd}}, @TCA_HFSC_USC={0x10, 0x3, {0x100, 0x2, 0x2}}]}}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_ingress={0xc}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4801}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000017c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="020029c10000000000000000000000006fd370541bed5838e0d24a2af611a81f68ba464eb75fa74c6478372bdbb58365d9bad1cdb1b39fb18bd270d6d9a607cf375a07eb9d267fb7ca750ff05d7b206b74120318c52091552f2ca341721ccd364133720fad55aa3afe1722271c72c6cd75fa9eb5701cb8b5bbb1f2c9f7ac3bf64ba96fad9c1709eb2f978fcbd34aed7ba40c791d832074ed43bfd0a7d9cc9b8fef4388bf588865af1a5b7c5ef70388c87dd8840f2e2bc58abc090c476b31afeb44a6bf5527633a7b50da9ea5f31cb1ca60a48aa26ea34a9e"]) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x5, 0x3f, 0x9, 0xb2, 0x0, 0x7fffffffffffffff, 0xa002, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x85, 0x2, @perf_bp={&(0x7f00000004c0), 0xa}, 0x1000, 0x7ff, 0x7, 0x9, 0x6, 0x7, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0xffffffffffffffff, 0x2) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xff00, 0x0, 0x0, 0xb3550aa4ba878354}, 0x9c) 07:36:28 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) socket$unix(0x1, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) close(r0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) (async) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) (async) 07:36:28 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) 07:36:28 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) [ 2144.033734][T15192] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:36:28 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) close(r0) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) (async) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) 07:36:28 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) 07:36:28 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r2}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x20, 0x0, 0x0, 0x0, 0x200000000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x1f, 0x0, 0xda, 0x0, 0x1, 0x85, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x1, @perf_config_ext={0x735b, 0x2}, 0x2000, 0x3, 0xffffffff, 0x1, 0xdea4, 0x4, 0x5, 0x0, 0x3, 0x0, 0xe28}, 0x0, 0xe, r4, 0x2) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r5, &(0x7f0000019180)=""/102395, 0x18ffb) 07:36:28 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) [ 2144.094451][T15202] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:36:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) 07:36:31 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x0, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) 07:36:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:36:31 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f00000000c0)=""/102384, 0x18ff0) 07:36:31 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 1) 07:36:31 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r2}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x20, 0x0, 0x0, 0x0, 0x200000000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x1f, 0x0, 0xda, 0x0, 0x1, 0x85, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x1, @perf_config_ext={0x735b, 0x2}, 0x2000, 0x3, 0xffffffff, 0x1, 0xdea4, 0x4, 0x5, 0x0, 0x3, 0x0, 0xe28}, 0x0, 0xe, r4, 0x2) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r5, &(0x7f0000019180)=""/102395, 0x18ffb) socket$unix(0x1, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r3, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) (async) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r2}, 0x10) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x20, 0x0, 0x0, 0x0, 0x200000000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r4, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x1f, 0x0, 0xda, 0x0, 0x1, 0x85, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x1, @perf_config_ext={0x735b, 0x2}, 0x2000, 0x3, 0xffffffff, 0x1, 0xdea4, 0x4, 0x5, 0x0, 0x3, 0x0, 0xe28}, 0x0, 0xe, r4, 0x2) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$char_usb(r5, &(0x7f0000019180)=""/102395, 0x18ffb) (async) 07:36:31 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, &(0x7f00000000c0)=""/102384, 0x18ff0) [ 2147.039432][T15232] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2147.062981][T15233] FAULT_INJECTION: forcing a failure. [ 2147.062981][T15233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2147.076365][T15233] CPU: 0 PID: 15233 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 07:36:31 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, &(0x7f00000000c0)=""/102384, 0x18ff0) 07:36:31 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x40) [ 2147.088843][T15233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2147.098919][T15233] Call Trace: [ 2147.102201][T15233] [ 2147.105144][T15233] dump_stack_lvl+0xd6/0x122 [ 2147.109821][T15233] dump_stack+0x11/0x12 [ 2147.114079][T15233] should_fail+0x242/0x250 [ 2147.118513][T15233] should_fail_usercopy+0x16/0x20 [ 2147.123559][T15233] _copy_to_user+0x1a/0x90 [ 2147.128054][T15233] rng_dev_read+0x2bd/0x630 [ 2147.132618][T15233] ? devm_hwrng_match+0x50/0x50 07:36:31 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x0, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) [ 2147.137550][T15233] vfs_read+0x198/0x560 [ 2147.141719][T15233] ? __fget_files+0x1a7/0x1e0 [ 2147.146415][T15233] ksys_read+0xe8/0x1a0 [ 2147.150594][T15233] __x64_sys_read+0x3e/0x50 [ 2147.155123][T15233] do_syscall_64+0x2b/0x70 [ 2147.159799][T15233] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2147.165711][T15233] RIP: 0033:0x7f8359bbc279 [ 2147.170138][T15233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2147.185919][T15232] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2147.189787][T15233] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2147.189810][T15233] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2147.189821][T15233] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2147.189833][T15233] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2147.230486][T15233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 07:36:31 executing program 5: setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:36:31 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x0, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) [ 2147.238474][T15233] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2147.246580][T15233] [ 2147.286210][T15266] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2147.303529][T15266] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:36:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) 07:36:38 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) (async, rerun: 32) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) (rerun: 32) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r2}, 0x10) (async) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x20, 0x0, 0x0, 0x0, 0x200000000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r4, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x1f, 0x0, 0xda, 0x0, 0x1, 0x85, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x1, @perf_config_ext={0x735b, 0x2}, 0x2000, 0x3, 0xffffffff, 0x1, 0xdea4, 0x4, 0x5, 0x0, 0x3, 0x0, 0xe28}, 0x0, 0xe, r4, 0x2) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r5, &(0x7f0000019180)=""/102395, 0x18ffb) 07:36:38 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 2) 07:36:38 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) 07:36:38 executing program 5: setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:36:38 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) r1 = socket(0x2, 0x80802, 0x0) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) (async) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x40) 07:36:38 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) 07:36:38 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) 07:36:38 executing program 5: setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2154.242074][T15278] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2154.279216][T15278] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:36:38 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, 0x0) read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) 07:36:38 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, 0x0) read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) [ 2154.323925][T15288] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:36:38 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, 0x0) read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) [ 2154.374333][T15288] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:36:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (async, rerun: 64) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) (rerun: 64) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000040)) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) 07:36:44 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(0xffffffffffffffff, &(0x7f00000000c0)=""/102400, 0x19000) 07:36:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:36:44 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) (async) r1 = socket(0x2, 0x80802, 0x0) (async, rerun: 64) r2 = epoll_create1(0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x40) 07:36:44 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x83}) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x2) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) 07:36:44 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 3) 07:36:44 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(0xffffffffffffffff, &(0x7f00000000c0)=""/102400, 0x19000) [ 2160.491193][T15303] FAULT_INJECTION: forcing a failure. [ 2160.491193][T15303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2160.494518][T15306] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2160.504322][T15303] CPU: 1 PID: 15303 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2160.524852][T15303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2160.534912][T15303] Call Trace: [ 2160.538265][T15303] 07:36:44 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(0xffffffffffffffff, &(0x7f00000000c0)=""/102400, 0x19000) 07:36:44 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000040)={'gretap0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x700, 0x80, 0x8001, 0x6, {{0xa, 0x4, 0x0, 0x3, 0x28, 0x67, 0x0, 0x8, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x36}, {[@timestamp={0x44, 0x14, 0x9c, 0x0, 0x4, [0xffffffff, 0x462c, 0x1, 0x4]}]}}}}}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) r3 = socket(0x2, 0x80802, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) sendmsg$nl_route_sched(r0, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000180)=@newtclass={0x98c, 0x28, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x8}, {0x0, 0x8}, {0xfff2, 0x4}}, [@tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_atm={{0x8}, {0x94, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xa, 0xffe0}}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_HDR={0x38, 0x3, "b034a6abbef2e288d967cc543488c5f0d0cf7dcd814c50657bd44803f47eb3d76927d005f736136ddbb3e1bbaf1707de7cb77288"}, @TCA_ATM_FD={0x8, 0x1, r3}, @TCA_ATM_EXCESS={0x8, 0x4, {0x3, 0x4}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff1, 0xfff3}}, @TCA_ATM_HDR={0x25, 0x3, "f40b8fc70899d6eab0b0daad772a022b78bff3ba59bbc499ed7e1b12c19ee3857c"}]}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x9}}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3f}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_htb={{0x8}, {0x88c, 0x2, [@TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x44915d59da7fc4ec, 0x2, 0x2, 0x6}, {0x1, 0x0, 0x800, 0x301, 0x80, 0x7}, 0xff, 0x6, 0xe0, 0x800, 0x6}}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_PARMS={0x30, 0x1, {{0x5, 0x0, 0x7, 0x5, 0x5, 0x8}, {0x7a, 0x1, 0x0, 0x7, 0x7, 0x73}, 0x6, 0x34, 0x97, 0x8}}, @TCA_HTB_CTAB={0x404, 0x3, [0x401, 0x3, 0x7f, 0x4, 0x3, 0x1, 0x47, 0x0, 0xffff, 0xff, 0x5, 0x200, 0x8001, 0x0, 0x1ff, 0x5, 0x1, 0xe0000000, 0x5f5c22c5, 0x0, 0x0, 0x0, 0x81, 0x2, 0x600, 0x4, 0x80000000, 0x7, 0x6, 0x5, 0x7, 0x25b, 0x7ff, 0x0, 0x9, 0x4, 0xbe88, 0xd6c, 0x69, 0x1000, 0xfffffeff, 0x401, 0x6, 0x4, 0x9, 0xffff31d3, 0x4, 0x20, 0x93, 0x81, 0x1, 0x4, 0x2, 0x5c319a22, 0x1000, 0x6ad7, 0x51cff3ae, 0x2, 0x40, 0x9, 0x5, 0xd7a, 0x2, 0xfff, 0xff, 0x10000, 0x100, 0x6121, 0x1, 0x7, 0x2, 0xffffff75, 0x2, 0x4, 0x3, 0x740e, 0x100, 0x7ff, 0x100, 0x8, 0x5a800000, 0x8, 0x8, 0x1, 0x3f, 0x80000001, 0x1, 0x5, 0x6, 0x7, 0x2, 0x1de, 0x4, 0x2, 0x3ff, 0x3, 0x3, 0x0, 0x1, 0x2, 0x9, 0xde3c, 0x401, 0x4, 0x1, 0x7fff, 0x4, 0x7fffffff, 0x4, 0x0, 0x5, 0x8, 0x5, 0x5, 0x0, 0x5, 0xffff7fff, 0x4, 0xff, 0x1, 0x1, 0x8, 0x1, 0xfffff800, 0xe8, 0x7, 0x1, 0x6, 0x3, 0x5, 0x9, 0x10001, 0x7, 0x3, 0x3, 0x3, 0x7, 0x4, 0x5, 0x3, 0x8000, 0x3f, 0x7fff, 0x0, 0x8, 0x600000, 0x2200, 0x40, 0x800, 0x8, 0x8, 0x9, 0x0, 0x4, 0x5, 0x1, 0x3, 0x0, 0x6, 0x3f, 0x3, 0x200, 0x5104, 0xfffffff9, 0x10001, 0x1ff, 0x2, 0x4, 0x3, 0xfffffff8, 0x22, 0x7, 0x20, 0x0, 0x1000, 0x8000, 0x5, 0x6, 0xd3, 0x80000000, 0x8, 0x5, 0x200, 0x4, 0x0, 0xff, 0x1, 0x0, 0x3, 0x800, 0x63, 0x1ff, 0x9e, 0x7, 0x80000000, 0xffff, 0xa32, 0x80000000, 0x1000, 0x45e, 0x9, 0x8000, 0x9, 0x4, 0x9, 0x100, 0x7, 0x2, 0x0, 0xff, 0x80, 0x80000001, 0x81, 0x401, 0x4, 0x7, 0x1, 0x3, 0x1, 0x8000, 0x6, 0x8, 0x4, 0x7fffffff, 0x2, 0x8, 0x100, 0x200, 0x6, 0x7, 0x84df, 0x401, 0x400, 0x5c264eef, 0x2, 0x7, 0x1000, 0x5, 0x80, 0x20, 0x893a, 0x80000001, 0xda4a, 0x4, 0x1, 0x5, 0xfffffc01, 0x0, 0xfffff225, 0x8000, 0x2, 0x8c9, 0x7, 0x2, 0xaa8a, 0x6]}, @TCA_HTB_RATE64={0xc, 0x6, 0x3ff}, @TCA_HTB_RATE64={0xc, 0x6, 0x10001}, @TCA_HTB_CTAB={0x404, 0x3, [0x1, 0x7, 0x1, 0x7, 0x8, 0x2392, 0x400, 0x0, 0x8001, 0x4, 0x0, 0x80000001, 0x20, 0x9, 0x6, 0x7fffffff, 0x9, 0x0, 0x8ec5, 0x2, 0x3f, 0x0, 0x5ed, 0x7, 0xffff, 0x4, 0x7, 0x0, 0x80, 0x0, 0x0, 0x251, 0x8, 0x80, 0x5, 0x9, 0x5, 0x61, 0x4, 0x9c, 0x8001, 0x401, 0x8001, 0x4, 0x9, 0x800, 0x80, 0x7, 0x0, 0xffff, 0x2, 0x20, 0x5, 0x1, 0x1f, 0x0, 0x4, 0x80000001, 0x7fff, 0xbc, 0x40, 0x6, 0x80, 0x401, 0x1, 0xef18, 0x9, 0x3f, 0xfff, 0x200, 0x80000000, 0x2, 0x200, 0x7, 0xd2, 0xb8, 0xffff4f83, 0x4, 0x608c, 0x9, 0x6e2, 0x5, 0x1f, 0x534, 0x8, 0x80000000, 0x20, 0x4, 0x7, 0x800, 0x7, 0x5, 0x80000000, 0x1f, 0x2, 0x6, 0x1, 0x4, 0x4, 0x7, 0x59, 0x7, 0x80, 0x100, 0x7, 0x0, 0x101, 0x7a4, 0xfffffff8, 0x9, 0x9, 0x9, 0x1a, 0x84f, 0x2, 0x80, 0x7fffffff, 0x100, 0xffffffff, 0x77, 0xffff, 0x1, 0xfffffffd, 0x7fffffff, 0x8, 0x7, 0x91, 0x0, 0x81, 0xfffffff8, 0x2, 0x3b, 0x1, 0x9d2, 0x2, 0x8, 0x5, 0x15c, 0x8, 0x20, 0xffff, 0x20, 0x8, 0x400, 0x91e, 0x69a, 0x8, 0x8, 0x6, 0x7f, 0x8, 0x8001, 0x0, 0x10001, 0x9, 0x1000, 0x9, 0x5, 0x4b, 0x1, 0x81, 0x0, 0xd301, 0x6, 0x2ad, 0x101, 0x5, 0xfffffffd, 0x0, 0x2, 0xd0000000, 0x635c, 0x7ff, 0x3, 0x86, 0x4, 0x6, 0x3, 0x4, 0x1000, 0x3, 0x9e2d, 0x20, 0x9, 0x4, 0x2, 0x1, 0x7, 0xffff7fff, 0x7fff, 0x8, 0x5, 0x0, 0x0, 0x2f6, 0x2, 0x0, 0xffff, 0x8, 0x7, 0x53, 0x5, 0x1, 0x401, 0xece0, 0x3, 0x10000, 0x80000001, 0x100, 0x81, 0x8, 0x4, 0x5, 0x0, 0x3, 0x7, 0x400, 0x7ff, 0x7f, 0xffff, 0x1ff, 0x1838, 0x10000, 0x100, 0x20, 0x5, 0x80000000, 0x7, 0x7, 0x1, 0x6, 0x8, 0x3a5ce6aa, 0xdc, 0x4, 0x8, 0x1f, 0x5, 0x1401, 0x3, 0x5, 0x2, 0x10000, 0x2, 0x81, 0x8000, 0x101, 0xffff, 0x8, 0x81, 0x1, 0x7, 0x5, 0x0, 0xffffffff, 0x8]}]}}, @TCA_RATE={0x6, 0x5, {0x3f, 0x7f}}]}, 0x98c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) 07:36:44 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, 0x0, 0x0) [ 2160.541210][T15303] dump_stack_lvl+0xd6/0x122 [ 2160.545820][T15303] dump_stack+0x11/0x12 [ 2160.549990][T15303] should_fail+0x242/0x250 [ 2160.554467][T15303] should_fail_usercopy+0x16/0x20 [ 2160.559500][T15303] _copy_to_user+0x1a/0x90 [ 2160.563968][T15303] rng_dev_read+0x2bd/0x630 [ 2160.568477][T15303] ? devm_hwrng_match+0x50/0x50 [ 2160.573370][T15303] vfs_read+0x198/0x560 [ 2160.577530][T15303] ? __fget_files+0x1a7/0x1e0 [ 2160.582287][T15303] ksys_read+0xe8/0x1a0 [ 2160.586503][T15303] __x64_sys_read+0x3e/0x50 07:36:44 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, 0x0, 0x0) 07:36:44 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, 0x0, 0x0) [ 2160.591145][T15303] do_syscall_64+0x2b/0x70 [ 2160.595621][T15303] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2160.601531][T15303] RIP: 0033:0x7f8359bbc279 [ 2160.605973][T15303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2160.625595][T15303] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2160.634193][T15303] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2160.642257][T15303] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2160.650216][T15303] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2160.658230][T15303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2160.666191][T15303] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2160.674168][T15303] [ 2160.681796][T15315] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:36:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'veth1_to_hsr\x00', @local}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10900, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) sendmsg(r2, &(0x7f0000000100)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x1004, @private2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000001300)=[{0x48, 0x0, 0x5000, "73b220ecd1056e2f81f85760ed43abd20aea4fcb65d7736b2cf5e9b3d013b14da0a7e9138add8eaaeefee67fa6e21a0834"}, {0xf8, 0x23a, 0x1, "2c2ec006138b462b6cefef93c4c64900edf312e465d31199d65cae43d93227436385a01f5d5a0e8f516f1bb239b92944f18f47fd997e37537018aa2b074c70bdd88ac6fa84977648d4dfe8989a1424049d038d207d21017c9c5fa00b8466c6a32b2efeb3c26092210c47416d0305d66160c750b2602fa3c37219119a0391c6cf5f59af5f810c7faea921f27b4ce793d559e5af371b4eded28d7073f762e99194d4cb22d5ba9aa1b9ba336ee93b2237293e5e888dbdce1e100f4be769fcc2a9c54443f4c0243fbce84cd538138fd28b264c5a202242f0d9223b4ed893fef3eb9279aa8109"}, {0xc8, 0x104, 0x4, "b02cadedee534ae72a1f1c30a83a4cf5c9f74ad480543628460bd338a75eb4db1e88ce01b5ea551060204442ceae27a6b76d8c077c190de3ac1435b65fdf4a4aa4f05c15ee4efe058bb6ff1c2801ba29429370f30629f1f863adb202e9f8394ce5dfb45132a055544a41fdac61fe97d895313de442df0d4d41bbe852d3dafcebcc675f421e46f289b4d9799e985429fcb99d338d631b5ab5be508f7bd0153cdee8765d1ebe2faadb95133904559f28c209a69e"}, {0x28, 0x119, 0x0, "51e20189b89f804003aa4cb85f1ef3066192234fb8405d"}, {0x1010, 0x118, 0xffffffff, "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"}, {0x48, 0x102, 0x8, "30fe8fee5cde11c92f5e14c48d7de9a22fb1d64365bac4d6f5811615a1198873045bfed839866a4f13b452573c0300ec097d"}, {0x1010, 0x84, 0x101, "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"}, {0x98, 0xff, 0x8, "693c986b41217c98fc4b42f6bdadfbecc7069da96aec6e2bb0a48be454ce84a4ff9db220e478ee70d78da58c2a004f8a4100d86fb83a1ee78225e67637d7df9829fb81de9b0f45b8d78127128ba38e193de9ab10242439a515d29bcd969303e3150a3fb04ad766747fe287bd79b354c37b5244ce4085365cafb3cc84f334477eaffe119ed4"}, {0x20, 0x1, 0x0, "638509c239d0e3c1bcd2"}, {0xc8, 0x116, 0x3, "f422467e78535bb49cc823d3fc229d258ab730804626465c0b98d1da625c801b41b2ab0117baedade9136a4b1b5c32ad01ebc6ee3fc176d3612fc37a801b971af5c6d19b5c6342807d5aef83d9728a461429f553c1d107832bb0ab99f0eb5fbe3c18d61589a45ae046879347ff7c98d90ab0ba87ebe385d9dc54b6635ce2b9f9e64dda5f038b409c1078ffdb189b7602e35cd23160f0a4e6e8c9180c4ad070fd90fbf5391e006b9eab87bd14a314ae9b6fc1e5891bdab3"}], 0x2418}, 0x20000004) 07:36:53 executing program 0: setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:36:53 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 4) 07:36:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:36:53 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000040)={'gretap0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x700, 0x80, 0x8001, 0x6, {{0xa, 0x4, 0x0, 0x3, 0x28, 0x67, 0x0, 0x8, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x36}, {[@timestamp={0x44, 0x14, 0x9c, 0x0, 0x4, [0xffffffff, 0x462c, 0x1, 0x4]}]}}}}}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) r3 = socket(0x2, 0x80802, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) sendmsg$nl_route_sched(r0, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000180)=@newtclass={0x98c, 0x28, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x8}, {0x0, 0x8}, {0xfff2, 0x4}}, [@tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_atm={{0x8}, {0x94, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xa, 0xffe0}}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_HDR={0x38, 0x3, "b034a6abbef2e288d967cc543488c5f0d0cf7dcd814c50657bd44803f47eb3d76927d005f736136ddbb3e1bbaf1707de7cb77288"}, @TCA_ATM_FD={0x8, 0x1, r3}, @TCA_ATM_EXCESS={0x8, 0x4, {0x3, 0x4}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff1, 0xfff3}}, @TCA_ATM_HDR={0x25, 0x3, "f40b8fc70899d6eab0b0daad772a022b78bff3ba59bbc499ed7e1b12c19ee3857c"}]}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x9}}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3f}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_htb={{0x8}, {0x88c, 0x2, [@TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x44915d59da7fc4ec, 0x2, 0x2, 0x6}, {0x1, 0x0, 0x800, 0x301, 0x80, 0x7}, 0xff, 0x6, 0xe0, 0x800, 0x6}}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_PARMS={0x30, 0x1, {{0x5, 0x0, 0x7, 0x5, 0x5, 0x8}, {0x7a, 0x1, 0x0, 0x7, 0x7, 0x73}, 0x6, 0x34, 0x97, 0x8}}, @TCA_HTB_CTAB={0x404, 0x3, [0x401, 0x3, 0x7f, 0x4, 0x3, 0x1, 0x47, 0x0, 0xffff, 0xff, 0x5, 0x200, 0x8001, 0x0, 0x1ff, 0x5, 0x1, 0xe0000000, 0x5f5c22c5, 0x0, 0x0, 0x0, 0x81, 0x2, 0x600, 0x4, 0x80000000, 0x7, 0x6, 0x5, 0x7, 0x25b, 0x7ff, 0x0, 0x9, 0x4, 0xbe88, 0xd6c, 0x69, 0x1000, 0xfffffeff, 0x401, 0x6, 0x4, 0x9, 0xffff31d3, 0x4, 0x20, 0x93, 0x81, 0x1, 0x4, 0x2, 0x5c319a22, 0x1000, 0x6ad7, 0x51cff3ae, 0x2, 0x40, 0x9, 0x5, 0xd7a, 0x2, 0xfff, 0xff, 0x10000, 0x100, 0x6121, 0x1, 0x7, 0x2, 0xffffff75, 0x2, 0x4, 0x3, 0x740e, 0x100, 0x7ff, 0x100, 0x8, 0x5a800000, 0x8, 0x8, 0x1, 0x3f, 0x80000001, 0x1, 0x5, 0x6, 0x7, 0x2, 0x1de, 0x4, 0x2, 0x3ff, 0x3, 0x3, 0x0, 0x1, 0x2, 0x9, 0xde3c, 0x401, 0x4, 0x1, 0x7fff, 0x4, 0x7fffffff, 0x4, 0x0, 0x5, 0x8, 0x5, 0x5, 0x0, 0x5, 0xffff7fff, 0x4, 0xff, 0x1, 0x1, 0x8, 0x1, 0xfffff800, 0xe8, 0x7, 0x1, 0x6, 0x3, 0x5, 0x9, 0x10001, 0x7, 0x3, 0x3, 0x3, 0x7, 0x4, 0x5, 0x3, 0x8000, 0x3f, 0x7fff, 0x0, 0x8, 0x600000, 0x2200, 0x40, 0x800, 0x8, 0x8, 0x9, 0x0, 0x4, 0x5, 0x1, 0x3, 0x0, 0x6, 0x3f, 0x3, 0x200, 0x5104, 0xfffffff9, 0x10001, 0x1ff, 0x2, 0x4, 0x3, 0xfffffff8, 0x22, 0x7, 0x20, 0x0, 0x1000, 0x8000, 0x5, 0x6, 0xd3, 0x80000000, 0x8, 0x5, 0x200, 0x4, 0x0, 0xff, 0x1, 0x0, 0x3, 0x800, 0x63, 0x1ff, 0x9e, 0x7, 0x80000000, 0xffff, 0xa32, 0x80000000, 0x1000, 0x45e, 0x9, 0x8000, 0x9, 0x4, 0x9, 0x100, 0x7, 0x2, 0x0, 0xff, 0x80, 0x80000001, 0x81, 0x401, 0x4, 0x7, 0x1, 0x3, 0x1, 0x8000, 0x6, 0x8, 0x4, 0x7fffffff, 0x2, 0x8, 0x100, 0x200, 0x6, 0x7, 0x84df, 0x401, 0x400, 0x5c264eef, 0x2, 0x7, 0x1000, 0x5, 0x80, 0x20, 0x893a, 0x80000001, 0xda4a, 0x4, 0x1, 0x5, 0xfffffc01, 0x0, 0xfffff225, 0x8000, 0x2, 0x8c9, 0x7, 0x2, 0xaa8a, 0x6]}, @TCA_HTB_RATE64={0xc, 0x6, 0x3ff}, @TCA_HTB_RATE64={0xc, 0x6, 0x10001}, @TCA_HTB_CTAB={0x404, 0x3, [0x1, 0x7, 0x1, 0x7, 0x8, 0x2392, 0x400, 0x0, 0x8001, 0x4, 0x0, 0x80000001, 0x20, 0x9, 0x6, 0x7fffffff, 0x9, 0x0, 0x8ec5, 0x2, 0x3f, 0x0, 0x5ed, 0x7, 0xffff, 0x4, 0x7, 0x0, 0x80, 0x0, 0x0, 0x251, 0x8, 0x80, 0x5, 0x9, 0x5, 0x61, 0x4, 0x9c, 0x8001, 0x401, 0x8001, 0x4, 0x9, 0x800, 0x80, 0x7, 0x0, 0xffff, 0x2, 0x20, 0x5, 0x1, 0x1f, 0x0, 0x4, 0x80000001, 0x7fff, 0xbc, 0x40, 0x6, 0x80, 0x401, 0x1, 0xef18, 0x9, 0x3f, 0xfff, 0x200, 0x80000000, 0x2, 0x200, 0x7, 0xd2, 0xb8, 0xffff4f83, 0x4, 0x608c, 0x9, 0x6e2, 0x5, 0x1f, 0x534, 0x8, 0x80000000, 0x20, 0x4, 0x7, 0x800, 0x7, 0x5, 0x80000000, 0x1f, 0x2, 0x6, 0x1, 0x4, 0x4, 0x7, 0x59, 0x7, 0x80, 0x100, 0x7, 0x0, 0x101, 0x7a4, 0xfffffff8, 0x9, 0x9, 0x9, 0x1a, 0x84f, 0x2, 0x80, 0x7fffffff, 0x100, 0xffffffff, 0x77, 0xffff, 0x1, 0xfffffffd, 0x7fffffff, 0x8, 0x7, 0x91, 0x0, 0x81, 0xfffffff8, 0x2, 0x3b, 0x1, 0x9d2, 0x2, 0x8, 0x5, 0x15c, 0x8, 0x20, 0xffff, 0x20, 0x8, 0x400, 0x91e, 0x69a, 0x8, 0x8, 0x6, 0x7f, 0x8, 0x8001, 0x0, 0x10001, 0x9, 0x1000, 0x9, 0x5, 0x4b, 0x1, 0x81, 0x0, 0xd301, 0x6, 0x2ad, 0x101, 0x5, 0xfffffffd, 0x0, 0x2, 0xd0000000, 0x635c, 0x7ff, 0x3, 0x86, 0x4, 0x6, 0x3, 0x4, 0x1000, 0x3, 0x9e2d, 0x20, 0x9, 0x4, 0x2, 0x1, 0x7, 0xffff7fff, 0x7fff, 0x8, 0x5, 0x0, 0x0, 0x2f6, 0x2, 0x0, 0xffff, 0x8, 0x7, 0x53, 0x5, 0x1, 0x401, 0xece0, 0x3, 0x10000, 0x80000001, 0x100, 0x81, 0x8, 0x4, 0x5, 0x0, 0x3, 0x7, 0x400, 0x7ff, 0x7f, 0xffff, 0x1ff, 0x1838, 0x10000, 0x100, 0x20, 0x5, 0x80000000, 0x7, 0x7, 0x1, 0x6, 0x8, 0x3a5ce6aa, 0xdc, 0x4, 0x8, 0x1f, 0x5, 0x1401, 0x3, 0x5, 0x2, 0x10000, 0x2, 0x81, 0x8000, 0x101, 0xffff, 0x8, 0x81, 0x1, 0x7, 0x5, 0x0, 0xffffffff, 0x8]}]}}, @TCA_RATE={0x6, 0x5, {0x3f, 0x7f}}]}, 0x98c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000040)={'gretap0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x700, 0x80, 0x8001, 0x6, {{0xa, 0x4, 0x0, 0x3, 0x28, 0x67, 0x0, 0x8, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x36}, {[@timestamp={0x44, 0x14, 0x9c, 0x0, 0x4, [0xffffffff, 0x462c, 0x1, 0x4]}]}}}}}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) (async) socket(0x2, 0x80802, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000180)=@newtclass={0x98c, 0x28, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x8}, {0x0, 0x8}, {0xfff2, 0x4}}, [@tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_atm={{0x8}, {0x94, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xa, 0xffe0}}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_HDR={0x38, 0x3, "b034a6abbef2e288d967cc543488c5f0d0cf7dcd814c50657bd44803f47eb3d76927d005f736136ddbb3e1bbaf1707de7cb77288"}, @TCA_ATM_FD={0x8, 0x1, r3}, @TCA_ATM_EXCESS={0x8, 0x4, {0x3, 0x4}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff1, 0xfff3}}, @TCA_ATM_HDR={0x25, 0x3, "f40b8fc70899d6eab0b0daad772a022b78bff3ba59bbc499ed7e1b12c19ee3857c"}]}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x9}}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3f}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_htb={{0x8}, {0x88c, 0x2, [@TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x44915d59da7fc4ec, 0x2, 0x2, 0x6}, {0x1, 0x0, 0x800, 0x301, 0x80, 0x7}, 0xff, 0x6, 0xe0, 0x800, 0x6}}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_PARMS={0x30, 0x1, {{0x5, 0x0, 0x7, 0x5, 0x5, 0x8}, {0x7a, 0x1, 0x0, 0x7, 0x7, 0x73}, 0x6, 0x34, 0x97, 0x8}}, @TCA_HTB_CTAB={0x404, 0x3, [0x401, 0x3, 0x7f, 0x4, 0x3, 0x1, 0x47, 0x0, 0xffff, 0xff, 0x5, 0x200, 0x8001, 0x0, 0x1ff, 0x5, 0x1, 0xe0000000, 0x5f5c22c5, 0x0, 0x0, 0x0, 0x81, 0x2, 0x600, 0x4, 0x80000000, 0x7, 0x6, 0x5, 0x7, 0x25b, 0x7ff, 0x0, 0x9, 0x4, 0xbe88, 0xd6c, 0x69, 0x1000, 0xfffffeff, 0x401, 0x6, 0x4, 0x9, 0xffff31d3, 0x4, 0x20, 0x93, 0x81, 0x1, 0x4, 0x2, 0x5c319a22, 0x1000, 0x6ad7, 0x51cff3ae, 0x2, 0x40, 0x9, 0x5, 0xd7a, 0x2, 0xfff, 0xff, 0x10000, 0x100, 0x6121, 0x1, 0x7, 0x2, 0xffffff75, 0x2, 0x4, 0x3, 0x740e, 0x100, 0x7ff, 0x100, 0x8, 0x5a800000, 0x8, 0x8, 0x1, 0x3f, 0x80000001, 0x1, 0x5, 0x6, 0x7, 0x2, 0x1de, 0x4, 0x2, 0x3ff, 0x3, 0x3, 0x0, 0x1, 0x2, 0x9, 0xde3c, 0x401, 0x4, 0x1, 0x7fff, 0x4, 0x7fffffff, 0x4, 0x0, 0x5, 0x8, 0x5, 0x5, 0x0, 0x5, 0xffff7fff, 0x4, 0xff, 0x1, 0x1, 0x8, 0x1, 0xfffff800, 0xe8, 0x7, 0x1, 0x6, 0x3, 0x5, 0x9, 0x10001, 0x7, 0x3, 0x3, 0x3, 0x7, 0x4, 0x5, 0x3, 0x8000, 0x3f, 0x7fff, 0x0, 0x8, 0x600000, 0x2200, 0x40, 0x800, 0x8, 0x8, 0x9, 0x0, 0x4, 0x5, 0x1, 0x3, 0x0, 0x6, 0x3f, 0x3, 0x200, 0x5104, 0xfffffff9, 0x10001, 0x1ff, 0x2, 0x4, 0x3, 0xfffffff8, 0x22, 0x7, 0x20, 0x0, 0x1000, 0x8000, 0x5, 0x6, 0xd3, 0x80000000, 0x8, 0x5, 0x200, 0x4, 0x0, 0xff, 0x1, 0x0, 0x3, 0x800, 0x63, 0x1ff, 0x9e, 0x7, 0x80000000, 0xffff, 0xa32, 0x80000000, 0x1000, 0x45e, 0x9, 0x8000, 0x9, 0x4, 0x9, 0x100, 0x7, 0x2, 0x0, 0xff, 0x80, 0x80000001, 0x81, 0x401, 0x4, 0x7, 0x1, 0x3, 0x1, 0x8000, 0x6, 0x8, 0x4, 0x7fffffff, 0x2, 0x8, 0x100, 0x200, 0x6, 0x7, 0x84df, 0x401, 0x400, 0x5c264eef, 0x2, 0x7, 0x1000, 0x5, 0x80, 0x20, 0x893a, 0x80000001, 0xda4a, 0x4, 0x1, 0x5, 0xfffffc01, 0x0, 0xfffff225, 0x8000, 0x2, 0x8c9, 0x7, 0x2, 0xaa8a, 0x6]}, @TCA_HTB_RATE64={0xc, 0x6, 0x3ff}, @TCA_HTB_RATE64={0xc, 0x6, 0x10001}, @TCA_HTB_CTAB={0x404, 0x3, [0x1, 0x7, 0x1, 0x7, 0x8, 0x2392, 0x400, 0x0, 0x8001, 0x4, 0x0, 0x80000001, 0x20, 0x9, 0x6, 0x7fffffff, 0x9, 0x0, 0x8ec5, 0x2, 0x3f, 0x0, 0x5ed, 0x7, 0xffff, 0x4, 0x7, 0x0, 0x80, 0x0, 0x0, 0x251, 0x8, 0x80, 0x5, 0x9, 0x5, 0x61, 0x4, 0x9c, 0x8001, 0x401, 0x8001, 0x4, 0x9, 0x800, 0x80, 0x7, 0x0, 0xffff, 0x2, 0x20, 0x5, 0x1, 0x1f, 0x0, 0x4, 0x80000001, 0x7fff, 0xbc, 0x40, 0x6, 0x80, 0x401, 0x1, 0xef18, 0x9, 0x3f, 0xfff, 0x200, 0x80000000, 0x2, 0x200, 0x7, 0xd2, 0xb8, 0xffff4f83, 0x4, 0x608c, 0x9, 0x6e2, 0x5, 0x1f, 0x534, 0x8, 0x80000000, 0x20, 0x4, 0x7, 0x800, 0x7, 0x5, 0x80000000, 0x1f, 0x2, 0x6, 0x1, 0x4, 0x4, 0x7, 0x59, 0x7, 0x80, 0x100, 0x7, 0x0, 0x101, 0x7a4, 0xfffffff8, 0x9, 0x9, 0x9, 0x1a, 0x84f, 0x2, 0x80, 0x7fffffff, 0x100, 0xffffffff, 0x77, 0xffff, 0x1, 0xfffffffd, 0x7fffffff, 0x8, 0x7, 0x91, 0x0, 0x81, 0xfffffff8, 0x2, 0x3b, 0x1, 0x9d2, 0x2, 0x8, 0x5, 0x15c, 0x8, 0x20, 0xffff, 0x20, 0x8, 0x400, 0x91e, 0x69a, 0x8, 0x8, 0x6, 0x7f, 0x8, 0x8001, 0x0, 0x10001, 0x9, 0x1000, 0x9, 0x5, 0x4b, 0x1, 0x81, 0x0, 0xd301, 0x6, 0x2ad, 0x101, 0x5, 0xfffffffd, 0x0, 0x2, 0xd0000000, 0x635c, 0x7ff, 0x3, 0x86, 0x4, 0x6, 0x3, 0x4, 0x1000, 0x3, 0x9e2d, 0x20, 0x9, 0x4, 0x2, 0x1, 0x7, 0xffff7fff, 0x7fff, 0x8, 0x5, 0x0, 0x0, 0x2f6, 0x2, 0x0, 0xffff, 0x8, 0x7, 0x53, 0x5, 0x1, 0x401, 0xece0, 0x3, 0x10000, 0x80000001, 0x100, 0x81, 0x8, 0x4, 0x5, 0x0, 0x3, 0x7, 0x400, 0x7ff, 0x7f, 0xffff, 0x1ff, 0x1838, 0x10000, 0x100, 0x20, 0x5, 0x80000000, 0x7, 0x7, 0x1, 0x6, 0x8, 0x3a5ce6aa, 0xdc, 0x4, 0x8, 0x1f, 0x5, 0x1401, 0x3, 0x5, 0x2, 0x10000, 0x2, 0x81, 0x8000, 0x101, 0xffff, 0x8, 0x81, 0x1, 0x7, 0x5, 0x0, 0xffffffff, 0x8]}]}}, @TCA_RATE={0x6, 0x5, {0x3f, 0x7f}}]}, 0x98c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) (async) 07:36:53 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x83}) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x2) (async) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) 07:36:53 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x83}) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x2) (async) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) [ 2168.908261][T15340] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2168.919044][T15339] FAULT_INJECTION: forcing a failure. [ 2168.919044][T15339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2168.932453][T15339] CPU: 0 PID: 15339 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2168.944967][T15339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2168.955071][T15339] Call Trace: 07:36:53 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000040)={'gretap0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x700, 0x80, 0x8001, 0x6, {{0xa, 0x4, 0x0, 0x3, 0x28, 0x67, 0x0, 0x8, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x36}, {[@timestamp={0x44, 0x14, 0x9c, 0x0, 0x4, [0xffffffff, 0x462c, 0x1, 0x4]}]}}}}}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) r3 = socket(0x2, 0x80802, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) sendmsg$nl_route_sched(r0, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000180)=@newtclass={0x98c, 0x28, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x8}, {0x0, 0x8}, {0xfff2, 0x4}}, [@tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_atm={{0x8}, {0x94, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xa, 0xffe0}}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_HDR={0x38, 0x3, "b034a6abbef2e288d967cc543488c5f0d0cf7dcd814c50657bd44803f47eb3d76927d005f736136ddbb3e1bbaf1707de7cb77288"}, @TCA_ATM_FD={0x8, 0x1, r3}, @TCA_ATM_EXCESS={0x8, 0x4, {0x3, 0x4}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff1, 0xfff3}}, @TCA_ATM_HDR={0x25, 0x3, "f40b8fc70899d6eab0b0daad772a022b78bff3ba59bbc499ed7e1b12c19ee3857c"}]}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x9}}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3f}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_htb={{0x8}, {0x88c, 0x2, [@TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x44915d59da7fc4ec, 0x2, 0x2, 0x6}, {0x1, 0x0, 0x800, 0x301, 0x80, 0x7}, 0xff, 0x6, 0xe0, 0x800, 0x6}}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_PARMS={0x30, 0x1, {{0x5, 0x0, 0x7, 0x5, 0x5, 0x8}, {0x7a, 0x1, 0x0, 0x7, 0x7, 0x73}, 0x6, 0x34, 0x97, 0x8}}, @TCA_HTB_CTAB={0x404, 0x3, [0x401, 0x3, 0x7f, 0x4, 0x3, 0x1, 0x47, 0x0, 0xffff, 0xff, 0x5, 0x200, 0x8001, 0x0, 0x1ff, 0x5, 0x1, 0xe0000000, 0x5f5c22c5, 0x0, 0x0, 0x0, 0x81, 0x2, 0x600, 0x4, 0x80000000, 0x7, 0x6, 0x5, 0x7, 0x25b, 0x7ff, 0x0, 0x9, 0x4, 0xbe88, 0xd6c, 0x69, 0x1000, 0xfffffeff, 0x401, 0x6, 0x4, 0x9, 0xffff31d3, 0x4, 0x20, 0x93, 0x81, 0x1, 0x4, 0x2, 0x5c319a22, 0x1000, 0x6ad7, 0x51cff3ae, 0x2, 0x40, 0x9, 0x5, 0xd7a, 0x2, 0xfff, 0xff, 0x10000, 0x100, 0x6121, 0x1, 0x7, 0x2, 0xffffff75, 0x2, 0x4, 0x3, 0x740e, 0x100, 0x7ff, 0x100, 0x8, 0x5a800000, 0x8, 0x8, 0x1, 0x3f, 0x80000001, 0x1, 0x5, 0x6, 0x7, 0x2, 0x1de, 0x4, 0x2, 0x3ff, 0x3, 0x3, 0x0, 0x1, 0x2, 0x9, 0xde3c, 0x401, 0x4, 0x1, 0x7fff, 0x4, 0x7fffffff, 0x4, 0x0, 0x5, 0x8, 0x5, 0x5, 0x0, 0x5, 0xffff7fff, 0x4, 0xff, 0x1, 0x1, 0x8, 0x1, 0xfffff800, 0xe8, 0x7, 0x1, 0x6, 0x3, 0x5, 0x9, 0x10001, 0x7, 0x3, 0x3, 0x3, 0x7, 0x4, 0x5, 0x3, 0x8000, 0x3f, 0x7fff, 0x0, 0x8, 0x600000, 0x2200, 0x40, 0x800, 0x8, 0x8, 0x9, 0x0, 0x4, 0x5, 0x1, 0x3, 0x0, 0x6, 0x3f, 0x3, 0x200, 0x5104, 0xfffffff9, 0x10001, 0x1ff, 0x2, 0x4, 0x3, 0xfffffff8, 0x22, 0x7, 0x20, 0x0, 0x1000, 0x8000, 0x5, 0x6, 0xd3, 0x80000000, 0x8, 0x5, 0x200, 0x4, 0x0, 0xff, 0x1, 0x0, 0x3, 0x800, 0x63, 0x1ff, 0x9e, 0x7, 0x80000000, 0xffff, 0xa32, 0x80000000, 0x1000, 0x45e, 0x9, 0x8000, 0x9, 0x4, 0x9, 0x100, 0x7, 0x2, 0x0, 0xff, 0x80, 0x80000001, 0x81, 0x401, 0x4, 0x7, 0x1, 0x3, 0x1, 0x8000, 0x6, 0x8, 0x4, 0x7fffffff, 0x2, 0x8, 0x100, 0x200, 0x6, 0x7, 0x84df, 0x401, 0x400, 0x5c264eef, 0x2, 0x7, 0x1000, 0x5, 0x80, 0x20, 0x893a, 0x80000001, 0xda4a, 0x4, 0x1, 0x5, 0xfffffc01, 0x0, 0xfffff225, 0x8000, 0x2, 0x8c9, 0x7, 0x2, 0xaa8a, 0x6]}, @TCA_HTB_RATE64={0xc, 0x6, 0x3ff}, @TCA_HTB_RATE64={0xc, 0x6, 0x10001}, @TCA_HTB_CTAB={0x404, 0x3, [0x1, 0x7, 0x1, 0x7, 0x8, 0x2392, 0x400, 0x0, 0x8001, 0x4, 0x0, 0x80000001, 0x20, 0x9, 0x6, 0x7fffffff, 0x9, 0x0, 0x8ec5, 0x2, 0x3f, 0x0, 0x5ed, 0x7, 0xffff, 0x4, 0x7, 0x0, 0x80, 0x0, 0x0, 0x251, 0x8, 0x80, 0x5, 0x9, 0x5, 0x61, 0x4, 0x9c, 0x8001, 0x401, 0x8001, 0x4, 0x9, 0x800, 0x80, 0x7, 0x0, 0xffff, 0x2, 0x20, 0x5, 0x1, 0x1f, 0x0, 0x4, 0x80000001, 0x7fff, 0xbc, 0x40, 0x6, 0x80, 0x401, 0x1, 0xef18, 0x9, 0x3f, 0xfff, 0x200, 0x80000000, 0x2, 0x200, 0x7, 0xd2, 0xb8, 0xffff4f83, 0x4, 0x608c, 0x9, 0x6e2, 0x5, 0x1f, 0x534, 0x8, 0x80000000, 0x20, 0x4, 0x7, 0x800, 0x7, 0x5, 0x80000000, 0x1f, 0x2, 0x6, 0x1, 0x4, 0x4, 0x7, 0x59, 0x7, 0x80, 0x100, 0x7, 0x0, 0x101, 0x7a4, 0xfffffff8, 0x9, 0x9, 0x9, 0x1a, 0x84f, 0x2, 0x80, 0x7fffffff, 0x100, 0xffffffff, 0x77, 0xffff, 0x1, 0xfffffffd, 0x7fffffff, 0x8, 0x7, 0x91, 0x0, 0x81, 0xfffffff8, 0x2, 0x3b, 0x1, 0x9d2, 0x2, 0x8, 0x5, 0x15c, 0x8, 0x20, 0xffff, 0x20, 0x8, 0x400, 0x91e, 0x69a, 0x8, 0x8, 0x6, 0x7f, 0x8, 0x8001, 0x0, 0x10001, 0x9, 0x1000, 0x9, 0x5, 0x4b, 0x1, 0x81, 0x0, 0xd301, 0x6, 0x2ad, 0x101, 0x5, 0xfffffffd, 0x0, 0x2, 0xd0000000, 0x635c, 0x7ff, 0x3, 0x86, 0x4, 0x6, 0x3, 0x4, 0x1000, 0x3, 0x9e2d, 0x20, 0x9, 0x4, 0x2, 0x1, 0x7, 0xffff7fff, 0x7fff, 0x8, 0x5, 0x0, 0x0, 0x2f6, 0x2, 0x0, 0xffff, 0x8, 0x7, 0x53, 0x5, 0x1, 0x401, 0xece0, 0x3, 0x10000, 0x80000001, 0x100, 0x81, 0x8, 0x4, 0x5, 0x0, 0x3, 0x7, 0x400, 0x7ff, 0x7f, 0xffff, 0x1ff, 0x1838, 0x10000, 0x100, 0x20, 0x5, 0x80000000, 0x7, 0x7, 0x1, 0x6, 0x8, 0x3a5ce6aa, 0xdc, 0x4, 0x8, 0x1f, 0x5, 0x1401, 0x3, 0x5, 0x2, 0x10000, 0x2, 0x81, 0x8000, 0x101, 0xffff, 0x8, 0x81, 0x1, 0x7, 0x5, 0x0, 0xffffffff, 0x8]}]}}, @TCA_RATE={0x6, 0x5, {0x3f, 0x7f}}]}, 0x98c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000040)={'gretap0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x700, 0x80, 0x8001, 0x6, {{0xa, 0x4, 0x0, 0x3, 0x28, 0x67, 0x0, 0x8, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x36}, {[@timestamp={0x44, 0x14, 0x9c, 0x0, 0x4, [0xffffffff, 0x462c, 0x1, 0x4]}]}}}}}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) (async) socket(0x2, 0x80802, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000180)=@newtclass={0x98c, 0x28, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xc, 0x8}, {0x0, 0x8}, {0xfff2, 0x4}}, [@tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_atm={{0x8}, {0x94, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xa, 0xffe0}}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_HDR={0x38, 0x3, "b034a6abbef2e288d967cc543488c5f0d0cf7dcd814c50657bd44803f47eb3d76927d005f736136ddbb3e1bbaf1707de7cb77288"}, @TCA_ATM_FD={0x8, 0x1, r3}, @TCA_ATM_EXCESS={0x8, 0x4, {0x3, 0x4}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff1, 0xfff3}}, @TCA_ATM_HDR={0x25, 0x3, "f40b8fc70899d6eab0b0daad772a022b78bff3ba59bbc499ed7e1b12c19ee3857c"}]}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x9}}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3f}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_htb={{0x8}, {0x88c, 0x2, [@TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x44915d59da7fc4ec, 0x2, 0x2, 0x6}, {0x1, 0x0, 0x800, 0x301, 0x80, 0x7}, 0xff, 0x6, 0xe0, 0x800, 0x6}}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_PARMS={0x30, 0x1, {{0x5, 0x0, 0x7, 0x5, 0x5, 0x8}, {0x7a, 0x1, 0x0, 0x7, 0x7, 0x73}, 0x6, 0x34, 0x97, 0x8}}, @TCA_HTB_CTAB={0x404, 0x3, [0x401, 0x3, 0x7f, 0x4, 0x3, 0x1, 0x47, 0x0, 0xffff, 0xff, 0x5, 0x200, 0x8001, 0x0, 0x1ff, 0x5, 0x1, 0xe0000000, 0x5f5c22c5, 0x0, 0x0, 0x0, 0x81, 0x2, 0x600, 0x4, 0x80000000, 0x7, 0x6, 0x5, 0x7, 0x25b, 0x7ff, 0x0, 0x9, 0x4, 0xbe88, 0xd6c, 0x69, 0x1000, 0xfffffeff, 0x401, 0x6, 0x4, 0x9, 0xffff31d3, 0x4, 0x20, 0x93, 0x81, 0x1, 0x4, 0x2, 0x5c319a22, 0x1000, 0x6ad7, 0x51cff3ae, 0x2, 0x40, 0x9, 0x5, 0xd7a, 0x2, 0xfff, 0xff, 0x10000, 0x100, 0x6121, 0x1, 0x7, 0x2, 0xffffff75, 0x2, 0x4, 0x3, 0x740e, 0x100, 0x7ff, 0x100, 0x8, 0x5a800000, 0x8, 0x8, 0x1, 0x3f, 0x80000001, 0x1, 0x5, 0x6, 0x7, 0x2, 0x1de, 0x4, 0x2, 0x3ff, 0x3, 0x3, 0x0, 0x1, 0x2, 0x9, 0xde3c, 0x401, 0x4, 0x1, 0x7fff, 0x4, 0x7fffffff, 0x4, 0x0, 0x5, 0x8, 0x5, 0x5, 0x0, 0x5, 0xffff7fff, 0x4, 0xff, 0x1, 0x1, 0x8, 0x1, 0xfffff800, 0xe8, 0x7, 0x1, 0x6, 0x3, 0x5, 0x9, 0x10001, 0x7, 0x3, 0x3, 0x3, 0x7, 0x4, 0x5, 0x3, 0x8000, 0x3f, 0x7fff, 0x0, 0x8, 0x600000, 0x2200, 0x40, 0x800, 0x8, 0x8, 0x9, 0x0, 0x4, 0x5, 0x1, 0x3, 0x0, 0x6, 0x3f, 0x3, 0x200, 0x5104, 0xfffffff9, 0x10001, 0x1ff, 0x2, 0x4, 0x3, 0xfffffff8, 0x22, 0x7, 0x20, 0x0, 0x1000, 0x8000, 0x5, 0x6, 0xd3, 0x80000000, 0x8, 0x5, 0x200, 0x4, 0x0, 0xff, 0x1, 0x0, 0x3, 0x800, 0x63, 0x1ff, 0x9e, 0x7, 0x80000000, 0xffff, 0xa32, 0x80000000, 0x1000, 0x45e, 0x9, 0x8000, 0x9, 0x4, 0x9, 0x100, 0x7, 0x2, 0x0, 0xff, 0x80, 0x80000001, 0x81, 0x401, 0x4, 0x7, 0x1, 0x3, 0x1, 0x8000, 0x6, 0x8, 0x4, 0x7fffffff, 0x2, 0x8, 0x100, 0x200, 0x6, 0x7, 0x84df, 0x401, 0x400, 0x5c264eef, 0x2, 0x7, 0x1000, 0x5, 0x80, 0x20, 0x893a, 0x80000001, 0xda4a, 0x4, 0x1, 0x5, 0xfffffc01, 0x0, 0xfffff225, 0x8000, 0x2, 0x8c9, 0x7, 0x2, 0xaa8a, 0x6]}, @TCA_HTB_RATE64={0xc, 0x6, 0x3ff}, @TCA_HTB_RATE64={0xc, 0x6, 0x10001}, @TCA_HTB_CTAB={0x404, 0x3, [0x1, 0x7, 0x1, 0x7, 0x8, 0x2392, 0x400, 0x0, 0x8001, 0x4, 0x0, 0x80000001, 0x20, 0x9, 0x6, 0x7fffffff, 0x9, 0x0, 0x8ec5, 0x2, 0x3f, 0x0, 0x5ed, 0x7, 0xffff, 0x4, 0x7, 0x0, 0x80, 0x0, 0x0, 0x251, 0x8, 0x80, 0x5, 0x9, 0x5, 0x61, 0x4, 0x9c, 0x8001, 0x401, 0x8001, 0x4, 0x9, 0x800, 0x80, 0x7, 0x0, 0xffff, 0x2, 0x20, 0x5, 0x1, 0x1f, 0x0, 0x4, 0x80000001, 0x7fff, 0xbc, 0x40, 0x6, 0x80, 0x401, 0x1, 0xef18, 0x9, 0x3f, 0xfff, 0x200, 0x80000000, 0x2, 0x200, 0x7, 0xd2, 0xb8, 0xffff4f83, 0x4, 0x608c, 0x9, 0x6e2, 0x5, 0x1f, 0x534, 0x8, 0x80000000, 0x20, 0x4, 0x7, 0x800, 0x7, 0x5, 0x80000000, 0x1f, 0x2, 0x6, 0x1, 0x4, 0x4, 0x7, 0x59, 0x7, 0x80, 0x100, 0x7, 0x0, 0x101, 0x7a4, 0xfffffff8, 0x9, 0x9, 0x9, 0x1a, 0x84f, 0x2, 0x80, 0x7fffffff, 0x100, 0xffffffff, 0x77, 0xffff, 0x1, 0xfffffffd, 0x7fffffff, 0x8, 0x7, 0x91, 0x0, 0x81, 0xfffffff8, 0x2, 0x3b, 0x1, 0x9d2, 0x2, 0x8, 0x5, 0x15c, 0x8, 0x20, 0xffff, 0x20, 0x8, 0x400, 0x91e, 0x69a, 0x8, 0x8, 0x6, 0x7f, 0x8, 0x8001, 0x0, 0x10001, 0x9, 0x1000, 0x9, 0x5, 0x4b, 0x1, 0x81, 0x0, 0xd301, 0x6, 0x2ad, 0x101, 0x5, 0xfffffffd, 0x0, 0x2, 0xd0000000, 0x635c, 0x7ff, 0x3, 0x86, 0x4, 0x6, 0x3, 0x4, 0x1000, 0x3, 0x9e2d, 0x20, 0x9, 0x4, 0x2, 0x1, 0x7, 0xffff7fff, 0x7fff, 0x8, 0x5, 0x0, 0x0, 0x2f6, 0x2, 0x0, 0xffff, 0x8, 0x7, 0x53, 0x5, 0x1, 0x401, 0xece0, 0x3, 0x10000, 0x80000001, 0x100, 0x81, 0x8, 0x4, 0x5, 0x0, 0x3, 0x7, 0x400, 0x7ff, 0x7f, 0xffff, 0x1ff, 0x1838, 0x10000, 0x100, 0x20, 0x5, 0x80000000, 0x7, 0x7, 0x1, 0x6, 0x8, 0x3a5ce6aa, 0xdc, 0x4, 0x8, 0x1f, 0x5, 0x1401, 0x3, 0x5, 0x2, 0x10000, 0x2, 0x81, 0x8000, 0x101, 0xffff, 0x8, 0x81, 0x1, 0x7, 0x5, 0x0, 0xffffffff, 0x8]}]}}, @TCA_RATE={0x6, 0x5, {0x3f, 0x7f}}]}, 0x98c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) (async) [ 2168.958377][T15339] [ 2168.961367][T15339] dump_stack_lvl+0xd6/0x122 [ 2168.965999][T15339] dump_stack+0x11/0x12 [ 2168.970236][T15339] should_fail+0x242/0x250 [ 2168.974665][T15339] should_fail_usercopy+0x16/0x20 [ 2168.979768][T15339] _copy_to_user+0x1a/0x90 [ 2168.984171][T15339] rng_dev_read+0x2bd/0x630 [ 2168.988737][T15339] ? devm_hwrng_match+0x50/0x50 [ 2168.993572][T15339] vfs_read+0x198/0x560 [ 2168.997747][T15339] ? __fdget_pos+0x115/0x1a0 [ 2169.002364][T15339] ? __tsan_read4+0x116/0x180 07:36:53 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) fcntl$getflags(0xffffffffffffffff, 0x408) [ 2169.007039][T15339] ksys_read+0xe8/0x1a0 [ 2169.011203][T15339] __x64_sys_read+0x3e/0x50 [ 2169.015719][T15339] do_syscall_64+0x2b/0x70 [ 2169.020284][T15339] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2169.026195][T15339] RIP: 0033:0x7f8359bbc279 [ 2169.030608][T15339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2169.050298][T15339] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2169.058759][T15339] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2169.066800][T15339] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2169.076325][T15339] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2169.085631][T15339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2169.093596][T15339] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2169.101584][T15339] 07:36:53 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 5) [ 2169.108544][T15341] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2169.137089][T15360] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2169.147758][T15375] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:36:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:36:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2169.157604][T15377] FAULT_INJECTION: forcing a failure. [ 2169.157604][T15377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2169.171043][T15377] CPU: 1 PID: 15377 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2169.183489][T15377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2169.185008][T15381] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2169.193545][T15377] Call Trace: [ 2169.193572][T15377] [ 2169.193578][T15377] dump_stack_lvl+0xd6/0x122 [ 2169.212523][T15377] dump_stack+0x11/0x12 [ 2169.216693][T15377] should_fail+0x242/0x250 [ 2169.221162][T15377] should_fail_usercopy+0x16/0x20 [ 2169.226211][T15377] _copy_to_user+0x1a/0x90 [ 2169.230624][T15377] rng_dev_read+0x2bd/0x630 [ 2169.235251][T15377] ? devm_hwrng_match+0x50/0x50 [ 2169.240188][T15377] vfs_read+0x198/0x560 [ 2169.244429][T15377] ? __fget_files+0x1a7/0x1e0 [ 2169.249118][T15377] ksys_read+0xe8/0x1a0 [ 2169.254073][T15377] __x64_sys_read+0x3e/0x50 [ 2169.258611][T15377] do_syscall_64+0x2b/0x70 [ 2169.263143][T15377] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2169.269086][T15377] RIP: 0033:0x7f8359bbc279 [ 2169.273519][T15377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2169.293728][T15377] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2169.302172][T15377] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2169.310160][T15377] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2169.318227][T15377] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2169.326192][T15377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2169.334157][T15377] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2169.342118][T15377] [ 2169.347829][T15379] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2169.366573][T15382] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2169.379210][T15383] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 07:37:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'veth1_to_hsr\x00', @local}) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10900, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) sendmsg(r2, &(0x7f0000000100)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x1004, @private2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000001300)=[{0x48, 0x0, 0x5000, "73b220ecd1056e2f81f85760ed43abd20aea4fcb65d7736b2cf5e9b3d013b14da0a7e9138add8eaaeefee67fa6e21a0834"}, {0xf8, 0x23a, 0x1, "2c2ec006138b462b6cefef93c4c64900edf312e465d31199d65cae43d93227436385a01f5d5a0e8f516f1bb239b92944f18f47fd997e37537018aa2b074c70bdd88ac6fa84977648d4dfe8989a1424049d038d207d21017c9c5fa00b8466c6a32b2efeb3c26092210c47416d0305d66160c750b2602fa3c37219119a0391c6cf5f59af5f810c7faea921f27b4ce793d559e5af371b4eded28d7073f762e99194d4cb22d5ba9aa1b9ba336ee93b2237293e5e888dbdce1e100f4be769fcc2a9c54443f4c0243fbce84cd538138fd28b264c5a202242f0d9223b4ed893fef3eb9279aa8109"}, {0xc8, 0x104, 0x4, "b02cadedee534ae72a1f1c30a83a4cf5c9f74ad480543628460bd338a75eb4db1e88ce01b5ea551060204442ceae27a6b76d8c077c190de3ac1435b65fdf4a4aa4f05c15ee4efe058bb6ff1c2801ba29429370f30629f1f863adb202e9f8394ce5dfb45132a055544a41fdac61fe97d895313de442df0d4d41bbe852d3dafcebcc675f421e46f289b4d9799e985429fcb99d338d631b5ab5be508f7bd0153cdee8765d1ebe2faadb95133904559f28c209a69e"}, {0x28, 0x119, 0x0, "51e20189b89f804003aa4cb85f1ef3066192234fb8405d"}, {0x1010, 0x118, 0xffffffff, "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"}, {0x48, 0x102, 0x8, "30fe8fee5cde11c92f5e14c48d7de9a22fb1d64365bac4d6f5811615a1198873045bfed839866a4f13b452573c0300ec097d"}, {0x1010, 0x84, 0x101, "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"}, {0x98, 0xff, 0x8, "693c986b41217c98fc4b42f6bdadfbecc7069da96aec6e2bb0a48be454ce84a4ff9db220e478ee70d78da58c2a004f8a4100d86fb83a1ee78225e67637d7df9829fb81de9b0f45b8d78127128ba38e193de9ab10242439a515d29bcd969303e3150a3fb04ad766747fe287bd79b354c37b5244ce4085365cafb3cc84f334477eaffe119ed4"}, {0x20, 0x1, 0x0, "638509c239d0e3c1bcd2"}, {0xc8, 0x116, 0x3, "f422467e78535bb49cc823d3fc229d258ab730804626465c0b98d1da625c801b41b2ab0117baedade9136a4b1b5c32ad01ebc6ee3fc176d3612fc37a801b971af5c6d19b5c6342807d5aef83d9728a461429f553c1d107832bb0ab99f0eb5fbe3c18d61589a45ae046879347ff7c98d90ab0ba87ebe385d9dc54b6635ce2b9f9e64dda5f038b409c1078ffdb189b7602e35cd23160f0a4e6e8c9180c4ad070fd90fbf5391e006b9eab87bd14a314ae9b6fc1e5891bdab3"}], 0x2418}, 0x20000004) 07:37:02 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 6) 07:37:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:37:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:37:02 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0x80000001) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) 07:37:02 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) fcntl$getflags(0xffffffffffffffff, 0x408) [ 2178.160300][T15398] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 2178.177859][T15395] FAULT_INJECTION: forcing a failure. [ 2178.177859][T15395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2178.191331][T15395] CPU: 1 PID: 15395 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2178.203824][T15395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2178.213884][T15395] Call Trace: [ 2178.217161][T15395] [ 2178.220095][T15395] dump_stack_lvl+0xd6/0x122 [ 2178.224831][T15395] dump_stack+0x11/0x12 [ 2178.228993][T15395] should_fail+0x242/0x250 [ 2178.233422][T15395] should_fail_usercopy+0x16/0x20 [ 2178.238432][T15395] _copy_to_user+0x1a/0x90 [ 2178.242889][T15395] rng_dev_read+0x2bd/0x630 [ 2178.247458][T15395] ? devm_hwrng_match+0x50/0x50 [ 2178.252311][T15395] vfs_read+0x198/0x560 [ 2178.256540][T15395] ? __fget_files+0x1a7/0x1e0 [ 2178.261266][T15395] ksys_read+0xe8/0x1a0 [ 2178.265488][T15395] __x64_sys_read+0x3e/0x50 [ 2178.270028][T15395] do_syscall_64+0x2b/0x70 [ 2178.274526][T15395] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2178.280416][T15395] RIP: 0033:0x7f8359bbc279 [ 2178.284818][T15395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2178.304535][T15395] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2178.312972][T15395] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2178.320989][T15395] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2178.328954][T15395] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2178.339451][T15395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2178.347529][T15395] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2178.355503][T15395] 07:37:02 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 7) [ 2178.366612][T15397] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2178.393871][T15401] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2178.406696][T15400] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 07:37:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:37:02 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r2}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x20, 0x0, 0x0, 0x0, 0x200000000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x1f, 0x0, 0xda, 0x0, 0x1, 0x85, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x1, @perf_config_ext={0x735b, 0x2}, 0x2000, 0x3, 0xffffffff, 0x1, 0xdea4, 0x4, 0x5, 0x0, 0x3, 0x0, 0xe28}, 0x0, 0xe, r4, 0x2) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r5, &(0x7f0000019180)=""/102395, 0x18ffb) [ 2178.412697][T15403] FAULT_INJECTION: forcing a failure. [ 2178.412697][T15403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2178.428241][T15403] CPU: 1 PID: 15403 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2178.440666][T15403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2178.450762][T15403] Call Trace: [ 2178.454065][T15403] [ 2178.456999][T15403] dump_stack_lvl+0xd6/0x122 [ 2178.461608][T15403] dump_stack+0x11/0x12 [ 2178.465792][T15403] should_fail+0x242/0x250 [ 2178.470302][T15403] should_fail_usercopy+0x16/0x20 [ 2178.475402][T15403] _copy_to_user+0x1a/0x90 [ 2178.479821][T15403] rng_dev_read+0x2bd/0x630 [ 2178.484408][T15403] ? devm_hwrng_match+0x50/0x50 [ 2178.489343][T15403] vfs_read+0x198/0x560 [ 2178.493511][T15403] ? __fget_files+0x1a7/0x1e0 [ 2178.498255][T15403] ksys_read+0xe8/0x1a0 [ 2178.502419][T15403] __x64_sys_read+0x3e/0x50 [ 2178.506953][T15403] do_syscall_64+0x2b/0x70 [ 2178.511383][T15403] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2178.519321][T15403] RIP: 0033:0x7f8359bbc279 [ 2178.523749][T15403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2178.543422][T15403] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2178.551840][T15403] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2178.559816][T15403] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 07:37:02 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) fcntl$getflags(0xffffffffffffffff, 0x408) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) (async) fcntl$getflags(0xffffffffffffffff, 0x408) (async) [ 2178.567822][T15403] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2178.575829][T15403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2178.583864][T15403] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2178.591934][T15403] [ 2178.597256][T15408] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:37:02 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 8) 07:37:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2178.630546][T15408] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2178.660137][T15414] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2178.668601][T15412] FAULT_INJECTION: forcing a failure. [ 2178.668601][T15412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2178.682038][T15412] CPU: 1 PID: 15412 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2178.694587][T15412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2178.705947][T15412] Call Trace: [ 2178.709312][T15412] [ 2178.712262][T15412] dump_stack_lvl+0xd6/0x122 [ 2178.716867][T15412] dump_stack+0x11/0x12 [ 2178.721086][T15412] should_fail+0x242/0x250 [ 2178.725553][T15412] should_fail_usercopy+0x16/0x20 [ 2178.730603][T15412] _copy_to_user+0x1a/0x90 [ 2178.736409][T15412] rng_dev_read+0x2bd/0x630 [ 2178.740920][T15412] ? devm_hwrng_match+0x50/0x50 [ 2178.745831][T15412] vfs_read+0x198/0x560 [ 2178.750067][T15412] ? __fget_files+0x1a7/0x1e0 [ 2178.754833][T15412] ksys_read+0xe8/0x1a0 [ 2178.759003][T15412] __x64_sys_read+0x3e/0x50 [ 2178.763543][T15412] do_syscall_64+0x2b/0x70 [ 2178.767977][T15412] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2178.773941][T15412] RIP: 0033:0x7f8359bbc279 [ 2178.778355][T15412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2178.798292][T15412] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2178.806765][T15412] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2178.815508][T15412] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2178.823492][T15412] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2178.831463][T15412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2178.839466][T15412] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2178.847537][T15412] [ 2178.853495][T15416] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:37:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'veth1_to_hsr\x00', @local}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10900, 0x0) (async, rerun: 64) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) sendmsg(r2, &(0x7f0000000100)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x1004, @private2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000001300)=[{0x48, 0x0, 0x5000, "73b220ecd1056e2f81f85760ed43abd20aea4fcb65d7736b2cf5e9b3d013b14da0a7e9138add8eaaeefee67fa6e21a0834"}, {0xf8, 0x23a, 0x1, "2c2ec006138b462b6cefef93c4c64900edf312e465d31199d65cae43d93227436385a01f5d5a0e8f516f1bb239b92944f18f47fd997e37537018aa2b074c70bdd88ac6fa84977648d4dfe8989a1424049d038d207d21017c9c5fa00b8466c6a32b2efeb3c26092210c47416d0305d66160c750b2602fa3c37219119a0391c6cf5f59af5f810c7faea921f27b4ce793d559e5af371b4eded28d7073f762e99194d4cb22d5ba9aa1b9ba336ee93b2237293e5e888dbdce1e100f4be769fcc2a9c54443f4c0243fbce84cd538138fd28b264c5a202242f0d9223b4ed893fef3eb9279aa8109"}, {0xc8, 0x104, 0x4, "b02cadedee534ae72a1f1c30a83a4cf5c9f74ad480543628460bd338a75eb4db1e88ce01b5ea551060204442ceae27a6b76d8c077c190de3ac1435b65fdf4a4aa4f05c15ee4efe058bb6ff1c2801ba29429370f30629f1f863adb202e9f8394ce5dfb45132a055544a41fdac61fe97d895313de442df0d4d41bbe852d3dafcebcc675f421e46f289b4d9799e985429fcb99d338d631b5ab5be508f7bd0153cdee8765d1ebe2faadb95133904559f28c209a69e"}, {0x28, 0x119, 0x0, "51e20189b89f804003aa4cb85f1ef3066192234fb8405d"}, {0x1010, 0x118, 0xffffffff, "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"}, {0x48, 0x102, 0x8, "30fe8fee5cde11c92f5e14c48d7de9a22fb1d64365bac4d6f5811615a1198873045bfed839866a4f13b452573c0300ec097d"}, {0x1010, 0x84, 0x101, "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"}, {0x98, 0xff, 0x8, "693c986b41217c98fc4b42f6bdadfbecc7069da96aec6e2bb0a48be454ce84a4ff9db220e478ee70d78da58c2a004f8a4100d86fb83a1ee78225e67637d7df9829fb81de9b0f45b8d78127128ba38e193de9ab10242439a515d29bcd969303e3150a3fb04ad766747fe287bd79b354c37b5244ce4085365cafb3cc84f334477eaffe119ed4"}, {0x20, 0x1, 0x0, "638509c239d0e3c1bcd2"}, {0xc8, 0x116, 0x3, "f422467e78535bb49cc823d3fc229d258ab730804626465c0b98d1da625c801b41b2ab0117baedade9136a4b1b5c32ad01ebc6ee3fc176d3612fc37a801b971af5c6d19b5c6342807d5aef83d9728a461429f553c1d107832bb0ab99f0eb5fbe3c18d61589a45ae046879347ff7c98d90ab0ba87ebe385d9dc54b6635ce2b9f9e64dda5f038b409c1078ffdb189b7602e35cd23160f0a4e6e8c9180c4ad070fd90fbf5391e006b9eab87bd14a314ae9b6fc1e5891bdab3"}], 0x2418}, 0x20000004) 07:37:09 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 9) 07:37:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:37:09 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) (async) r1 = socket(0x2, 0x80802, 0x0) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0x80000001) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) 07:37:09 executing program 3: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) io_uring_enter(r0, 0x719e, 0xe324, 0x3, &(0x7f0000000040)={[0x100000001]}, 0x8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) ppoll(&(0x7f00000000c0)=[{r0, 0x20}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)={[0x80c]}, 0x8) 07:37:09 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r2}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x20, 0x0, 0x0, 0x0, 0x200000000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x1f, 0x0, 0xda, 0x0, 0x1, 0x85, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x1, @perf_config_ext={0x735b, 0x2}, 0x2000, 0x3, 0xffffffff, 0x1, 0xdea4, 0x4, 0x5, 0x0, 0x3, 0x0, 0xe28}, 0x0, 0xe, r4, 0x2) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r5, &(0x7f0000019180)=""/102395, 0x18ffb) 07:37:09 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0x80000001) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) [ 2185.280197][T15427] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2185.303061][T15426] FAULT_INJECTION: forcing a failure. [ 2185.303061][T15426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2185.316406][T15426] CPU: 1 PID: 15426 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2185.328838][T15426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2185.338995][T15426] Call Trace: [ 2185.342282][T15426] [ 2185.345239][T15426] dump_stack_lvl+0xd6/0x122 [ 2185.349947][T15426] dump_stack+0x11/0x12 [ 2185.354165][T15426] should_fail+0x242/0x250 [ 2185.358651][T15426] should_fail_usercopy+0x16/0x20 [ 2185.363686][T15426] _copy_to_user+0x1a/0x90 [ 2185.368878][T15426] rng_dev_read+0x2bd/0x630 [ 2185.373380][T15426] ? devm_hwrng_match+0x50/0x50 [ 2185.378310][T15426] vfs_read+0x198/0x560 [ 2185.382612][T15426] ? __fget_files+0x1a7/0x1e0 [ 2185.387285][T15426] ksys_read+0xe8/0x1a0 [ 2185.391460][T15426] __x64_sys_read+0x3e/0x50 [ 2185.395961][T15426] do_syscall_64+0x2b/0x70 [ 2185.400444][T15426] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2185.406334][T15426] RIP: 0033:0x7f8359bbc279 [ 2185.410797][T15426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2185.430425][T15426] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2185.438885][T15426] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2185.446864][T15426] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2185.454960][T15426] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2185.462968][T15426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2185.470927][T15426] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 07:37:09 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 10) 07:37:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2185.478985][T15426] [ 2185.492151][T15437] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:37:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2185.548592][T15443] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2185.563917][T15441] FAULT_INJECTION: forcing a failure. [ 2185.563917][T15441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2185.569360][T15443] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2185.577111][T15441] CPU: 1 PID: 15441 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2185.577142][T15441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2185.607723][T15441] Call Trace: [ 2185.608878][T15445] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2185.611774][T15441] [ 2185.611783][T15441] dump_stack_lvl+0xd6/0x122 [ 2185.611809][T15441] dump_stack+0x11/0x12 [ 2185.631551][T15441] should_fail+0x242/0x250 [ 2185.636029][T15441] should_fail_usercopy+0x16/0x20 [ 2185.641053][T15441] _copy_to_user+0x1a/0x90 [ 2185.645471][T15441] rng_dev_read+0x2bd/0x630 [ 2185.649997][T15441] ? devm_hwrng_match+0x50/0x50 [ 2185.654971][T15441] vfs_read+0x198/0x560 [ 2185.659118][T15441] ? __fget_files+0x1a7/0x1e0 [ 2185.663954][T15441] ksys_read+0xe8/0x1a0 [ 2185.668105][T15441] __x64_sys_read+0x3e/0x50 [ 2185.672607][T15441] do_syscall_64+0x2b/0x70 [ 2185.677012][T15441] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2185.682901][T15441] RIP: 0033:0x7f8359bbc279 [ 2185.687318][T15441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2185.706926][T15441] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2185.715369][T15441] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2185.723340][T15441] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2185.731353][T15441] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2185.739376][T15441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 07:37:10 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 11) 07:37:10 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2185.747336][T15441] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2185.755386][T15441] [ 2185.774082][T15446] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2185.821231][T15449] FAULT_INJECTION: forcing a failure. [ 2185.821231][T15449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2185.827582][T15451] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2185.835694][T15449] CPU: 0 PID: 15449 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2185.856058][T15449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2185.866134][T15449] Call Trace: [ 2185.869507][T15449] [ 2185.872530][T15449] dump_stack_lvl+0xd6/0x122 [ 2185.877151][T15449] dump_stack+0x11/0x12 [ 2185.881324][T15449] should_fail+0x242/0x250 [ 2185.885837][T15449] should_fail_usercopy+0x16/0x20 [ 2185.890987][T15449] _copy_to_user+0x1a/0x90 [ 2185.895424][T15449] rng_dev_read+0x2bd/0x630 [ 2185.899934][T15449] ? devm_hwrng_match+0x50/0x50 [ 2185.904789][T15449] vfs_read+0x198/0x560 [ 2185.909021][T15449] ? __fget_files+0x1a7/0x1e0 [ 2185.913769][T15449] ksys_read+0xe8/0x1a0 [ 2185.917934][T15449] __x64_sys_read+0x3e/0x50 [ 2185.922572][T15449] do_syscall_64+0x2b/0x70 [ 2185.927002][T15449] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2185.932945][T15449] RIP: 0033:0x7f8359bbc279 [ 2185.937414][T15449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2185.957660][T15449] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2185.966082][T15449] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2185.974079][T15449] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2185.982075][T15449] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2185.990134][T15449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2185.998116][T15449] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2186.006101][T15449] 07:37:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) 07:37:18 executing program 3: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) io_uring_enter(r0, 0x719e, 0xe324, 0x3, &(0x7f0000000040)={[0x100000001]}, 0x8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) ppoll(&(0x7f00000000c0)=[{r0, 0x20}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)={[0x80c]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) (async) io_uring_enter(r0, 0x719e, 0xe324, 0x3, &(0x7f0000000040)={[0x100000001]}, 0x8) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) (async) ppoll(&(0x7f00000000c0)=[{r0, 0x20}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)={[0x80c]}, 0x8) (async) 07:37:18 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 12) 07:37:18 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:37:18 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000040)=0x7) read$char_usb(r2, &(0x7f0000019180)=""/102395, 0x18ffb) 07:37:18 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r2}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x20, 0x0, 0x0, 0x0, 0x200000000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x1f, 0x0, 0xda, 0x0, 0x1, 0x85, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x1, @perf_config_ext={0x735b, 0x2}, 0x2000, 0x3, 0xffffffff, 0x1, 0xdea4, 0x4, 0x5, 0x0, 0x3, 0x0, 0xe28}, 0x0, 0xe, r4, 0x2) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r5, &(0x7f0000019180)=""/102395, 0x18ffb) [ 2194.475256][T15460] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2194.498361][T15461] FAULT_INJECTION: forcing a failure. [ 2194.498361][T15461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2194.512316][T15461] CPU: 1 PID: 15461 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2194.524782][T15461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2194.534890][T15461] Call Trace: [ 2194.538213][T15461] [ 2194.541146][T15461] dump_stack_lvl+0xd6/0x122 [ 2194.545755][T15461] dump_stack+0x11/0x12 [ 2194.549944][T15461] should_fail+0x242/0x250 [ 2194.554369][T15461] should_fail_usercopy+0x16/0x20 [ 2194.559399][T15461] _copy_to_user+0x1a/0x90 [ 2194.563870][T15461] rng_dev_read+0x2bd/0x630 [ 2194.568382][T15461] ? devm_hwrng_match+0x50/0x50 [ 2194.573308][T15461] vfs_read+0x198/0x560 [ 2194.577475][T15461] ksys_read+0xe8/0x1a0 [ 2194.581674][T15461] __x64_sys_read+0x3e/0x50 [ 2194.586184][T15461] do_syscall_64+0x2b/0x70 [ 2194.590633][T15461] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2194.596542][T15461] RIP: 0033:0x7f8359bbc279 [ 2194.601030][T15461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 07:37:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:37:19 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 13) [ 2194.620670][T15461] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2194.629206][T15461] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2194.637188][T15461] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2194.645170][T15461] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2194.653296][T15461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2194.661270][T15461] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2194.669249][T15461] [ 2194.700805][T15468] FAULT_INJECTION: forcing a failure. [ 2194.700805][T15468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2194.702353][T15469] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2194.714252][T15468] CPU: 1 PID: 15468 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2194.734584][T15468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2194.744818][T15468] Call Trace: [ 2194.748102][T15468] [ 2194.751036][T15468] dump_stack_lvl+0xd6/0x122 [ 2194.755660][T15468] dump_stack+0x11/0x12 [ 2194.759894][T15468] should_fail+0x242/0x250 [ 2194.764322][T15468] should_fail_usercopy+0x16/0x20 [ 2194.769457][T15468] _copy_to_user+0x1a/0x90 [ 2194.773885][T15468] rng_dev_read+0x2bd/0x630 [ 2194.778548][T15468] ? devm_hwrng_match+0x50/0x50 [ 2194.783585][T15468] vfs_read+0x198/0x560 [ 2194.787813][T15468] ? __fget_files+0x1a7/0x1e0 [ 2194.793714][T15468] ksys_read+0xe8/0x1a0 07:37:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, 0x0, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2194.797912][T15468] __x64_sys_read+0x3e/0x50 [ 2194.802647][T15468] do_syscall_64+0x2b/0x70 [ 2194.807145][T15468] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2194.813218][T15468] RIP: 0033:0x7f8359bbc279 [ 2194.817649][T15468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2194.837530][T15468] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 07:37:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, 0x0, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:37:19 executing program 3: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0\x00'}) io_uring_enter(r0, 0x719e, 0xe324, 0x3, &(0x7f0000000040)={[0x100000001]}, 0x8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) (async) ppoll(&(0x7f00000000c0)=[{r0, 0x20}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)={[0x80c]}, 0x8) [ 2194.846016][T15468] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2194.853993][T15468] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2194.862168][T15468] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2194.870149][T15468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2194.878131][T15468] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2194.886116][T15468] [ 2194.892800][T15472] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:37:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, 0x0, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2194.934725][T15479] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:37:19 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 14) [ 2194.977168][T15484] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2195.029934][T15486] FAULT_INJECTION: forcing a failure. [ 2195.029934][T15486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2195.043249][T15486] CPU: 0 PID: 15486 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2195.055674][T15486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2195.065711][T15486] Call Trace: [ 2195.069008][T15486] [ 2195.071930][T15486] dump_stack_lvl+0xd6/0x122 [ 2195.076510][T15486] dump_stack+0x11/0x12 [ 2195.080696][T15486] should_fail+0x242/0x250 [ 2195.085100][T15486] should_fail_usercopy+0x16/0x20 [ 2195.090238][T15486] _copy_to_user+0x1a/0x90 [ 2195.094635][T15486] rng_dev_read+0x2bd/0x630 [ 2195.099185][T15486] ? devm_hwrng_match+0x50/0x50 [ 2195.104076][T15486] vfs_read+0x198/0x560 [ 2195.108255][T15486] ? __fget_files+0x1a7/0x1e0 [ 2195.112935][T15486] ksys_read+0xe8/0x1a0 [ 2195.117094][T15486] __x64_sys_read+0x3e/0x50 [ 2195.121581][T15486] do_syscall_64+0x2b/0x70 [ 2195.125990][T15486] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2195.131960][T15486] RIP: 0033:0x7f8359bbc279 [ 2195.136387][T15486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2195.155982][T15486] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2195.165550][T15486] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2195.173596][T15486] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2195.181556][T15486] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2195.189621][T15486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2195.197632][T15486] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2195.205656][T15486] 07:37:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) (async) 07:37:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0), 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:37:25 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 15) 07:37:25 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) (fail_nth: 1) 07:37:25 executing program 3: syz_clone(0x4c004000, &(0x7f00000001c0)="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", 0x108, &(0x7f0000001180), &(0x7f0000000180), &(0x7f00000011c0)="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") r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000100)={0x0, 0x1, [0x712, 0x101, 0x932f, 0x6, 0xb, 0x1]}) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) 07:37:25 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000040)=0x7) read$char_usb(r2, &(0x7f0000019180)=""/102395, 0x18ffb) [ 2201.596346][T15491] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2201.612656][T15498] FAULT_INJECTION: forcing a failure. [ 2201.612656][T15498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2201.625896][T15498] CPU: 0 PID: 15498 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2201.638396][T15498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2201.648530][T15498] Call Trace: [ 2201.651813][T15498] [ 2201.654745][T15498] dump_stack_lvl+0xd6/0x122 [ 2201.659656][T15498] dump_stack+0x11/0x12 [ 2201.663910][T15498] should_fail+0x242/0x250 [ 2201.668340][T15498] should_fail_usercopy+0x16/0x20 [ 2201.673377][T15498] _copy_to_user+0x1a/0x90 [ 2201.677881][T15498] rng_dev_read+0x2bd/0x630 [ 2201.682482][T15498] ? devm_hwrng_match+0x50/0x50 [ 2201.687382][T15498] vfs_read+0x198/0x560 [ 2201.691645][T15498] ? __fget_files+0x1a7/0x1e0 07:37:26 executing program 3: syz_clone(0x4c004000, &(0x7f00000001c0)="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", 0x108, &(0x7f0000001180), &(0x7f0000000180), &(0x7f00000011c0)="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") (async, rerun: 32) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) (async, rerun: 32) r1 = socket(0x2, 0x80802, 0x0) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000100)={0x0, 0x1, [0x712, 0x101, 0x932f, 0x6, 0xb, 0x1]}) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) 07:37:26 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) (fail_nth: 2) 07:37:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0), 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:37:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0), 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2201.693011][T15511] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2201.696353][T15498] ksys_read+0xe8/0x1a0 [ 2201.708626][T15498] __x64_sys_read+0x3e/0x50 [ 2201.713233][T15498] do_syscall_64+0x2b/0x70 [ 2201.717689][T15498] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2201.722782][T15513] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2201.723620][T15498] RIP: 0033:0x7f8359bbc279 [ 2201.723644][T15498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2201.738311][T15514] FAULT_INJECTION: forcing a failure. [ 2201.738311][T15514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2201.755861][T15498] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2201.755964][T15498] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2201.785947][T15498] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2201.794014][T15498] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2201.802046][T15498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2201.810006][T15498] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2201.818035][T15498] [ 2201.821116][T15514] CPU: 1 PID: 15514 Comm: syz-executor.0 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2201.833581][T15514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2201.843722][T15514] Call Trace: 07:37:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{0x0}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:37:26 executing program 3: syz_clone(0x4c004000, &(0x7f00000001c0)="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", 0x108, &(0x7f0000001180), &(0x7f0000000180), &(0x7f00000011c0)="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") r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200480, 0x0) r1 = socket(0x2, 0x80802, 0x0) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000100)={0x0, 0x1, [0x712, 0x101, 0x932f, 0x6, 0xb, 0x1]}) (async) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) [ 2201.847010][T15514] [ 2201.849950][T15514] dump_stack_lvl+0xd6/0x122 [ 2201.854562][T15514] dump_stack+0x11/0x12 [ 2201.858759][T15514] should_fail+0x242/0x250 [ 2201.863262][T15514] should_fail_usercopy+0x16/0x20 [ 2201.868316][T15514] copyout+0x1a/0x90 [ 2201.872219][T15514] _copy_to_iter+0x261/0x8b0 [ 2201.876833][T15514] ? check_heap_object+0x172/0x3b0 [ 2201.881959][T15514] ? __check_object_size+0x160/0x200 [ 2201.887279][T15514] seq_read_iter+0x7a7/0x8e0 [ 2201.891898][T15514] seq_read+0xcb/0x110 [ 2201.895985][T15514] ? seq_open+0xe0/0xe0 [ 2201.898879][T15518] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2201.900228][T15514] proc_reg_read+0x116/0x1a0 [ 2201.900251][T15514] ? proc_reg_get_unmapped_area+0x220/0x220 [ 2201.918809][T15514] vfs_read+0x198/0x560 [ 2201.923059][T15514] ? __fget_files+0x1a7/0x1e0 [ 2201.927767][T15514] ksys_read+0xe8/0x1a0 [ 2201.931963][T15514] __x64_sys_read+0x3e/0x50 [ 2201.936482][T15514] do_syscall_64+0x2b/0x70 [ 2201.940905][T15514] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2201.946876][T15514] RIP: 0033:0x7f796de4b279 [ 2201.951364][T15514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2201.970991][T15514] RSP: 002b:00007f796d5c1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2201.979397][T15514] RAX: ffffffffffffffda RBX: 00007f796df5df80 RCX: 00007f796de4b279 [ 2201.987593][T15514] RDX: 0000000000019000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 2201.995547][T15514] RBP: 00007f796d5c11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2202.003545][T15514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2202.011507][T15514] R13: 00007ffd5d0e872f R14: 00007f796d5c1300 R15: 0000000000022000 [ 2202.019463][T15514] 07:37:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) (async) 07:37:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{0x0}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:37:35 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket(0x2, 0x80802, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000440)={0x7fff, 0x800, 0x200}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'lo\x00', {0x4}, 0x9}) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="090000000000000026090adb2f66696c653000"]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x1, r4}, 0xc) 07:37:35 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 16) 07:37:35 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) (fail_nth: 3) 07:37:35 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000040)=0x7) (async) read$char_usb(r2, &(0x7f0000019180)=""/102395, 0x18ffb) 07:37:35 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x7, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)={0x1, 0x9, 0x7}) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) [ 2211.060918][T15530] FAULT_INJECTION: forcing a failure. [ 2211.060918][T15530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2211.062764][T15534] 8021q: VLANs not supported on lo [ 2211.074057][T15530] CPU: 1 PID: 15530 Comm: syz-executor.0 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2211.091628][T15530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2211.101587][T15533] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:37:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{0x0}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2211.101741][T15530] Call Trace: [ 2211.101748][T15530] [ 2211.101754][T15530] dump_stack_lvl+0xd6/0x122 [ 2211.122489][T15530] dump_stack+0x11/0x12 [ 2211.126663][T15530] should_fail+0x242/0x250 [ 2211.131260][T15530] should_fail_usercopy+0x16/0x20 [ 2211.136355][T15530] _copy_to_user+0x1a/0x90 [ 2211.140829][T15530] simple_read_from_buffer+0xab/0x120 [ 2211.146196][T15530] proc_fail_nth_read+0x10d/0x150 [ 2211.151217][T15530] ? proc_fault_inject_write+0x230/0x230 [ 2211.156857][T15530] vfs_read+0x198/0x560 [ 2211.161052][T15530] ? __fget_files+0x1a7/0x1e0 [ 2211.165721][T15530] ksys_read+0xe8/0x1a0 [ 2211.169871][T15530] __x64_sys_read+0x3e/0x50 [ 2211.174484][T15530] do_syscall_64+0x2b/0x70 [ 2211.178989][T15530] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2211.184893][T15530] RIP: 0033:0x7f796ddfde2c [ 2211.189324][T15530] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2211.209140][T15530] RSP: 002b:00007f796d5c1160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2211.217802][T15530] RAX: ffffffffffffffda RBX: 00007f796df5df80 RCX: 00007f796ddfde2c [ 2211.225798][T15530] RDX: 000000000000000f RSI: 00007f796d5c11e0 RDI: 0000000000000005 [ 2211.233927][T15530] RBP: 00007f796d5c11d0 R08: 0000000000000000 R09: 0000000000000000 [ 2211.241915][T15530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2211.249884][T15530] R13: 00007ffd5d0e872f R14: 00007f796d5c1300 R15: 0000000000022000 [ 2211.257848][T15530] 07:37:35 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) 07:37:35 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x4b) [ 2211.270366][T15532] FAULT_INJECTION: forcing a failure. [ 2211.270366][T15532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2211.283960][T15532] CPU: 0 PID: 15532 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2211.296388][T15532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2211.306495][T15532] Call Trace: [ 2211.309778][T15532] [ 2211.312709][T15532] dump_stack_lvl+0xd6/0x122 07:37:35 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19002) 07:37:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2211.316361][T15547] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2211.317302][T15532] dump_stack+0x11/0x12 [ 2211.329629][T15532] should_fail+0x242/0x250 [ 2211.334060][T15532] should_fail_usercopy+0x16/0x20 [ 2211.339136][T15532] _copy_to_user+0x1a/0x90 [ 2211.343684][T15532] rng_dev_read+0x2bd/0x630 [ 2211.348196][T15532] ? devm_hwrng_match+0x50/0x50 [ 2211.349289][T15552] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2211.353120][T15532] vfs_read+0x198/0x560 [ 2211.353144][T15532] ? __fdget_pos+0x125/0x1a0 [ 2211.353189][T15532] ? __fdget_pos+0x12f/0x1a0 [ 2211.374567][T15532] ? __sanitizer_cov_trace_pc+0x3f/0x60 [ 2211.380358][T15532] ksys_read+0xe8/0x1a0 [ 2211.384667][T15532] __x64_sys_read+0x3e/0x50 [ 2211.389266][T15532] do_syscall_64+0x2b/0x70 [ 2211.393672][T15532] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2211.399569][T15532] RIP: 0033:0x7f8359bbc279 [ 2211.403971][T15532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2211.423566][T15532] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2211.431986][T15532] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2211.439965][T15532] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2211.448047][T15532] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2211.456055][T15532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2211.464019][T15532] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2211.472021][T15532] 07:37:42 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19003) 07:37:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:37:42 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 17) 07:37:42 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket(0x2, 0x80802, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000440)={0x7fff, 0x800, 0x200}) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'lo\x00', {0x4}, 0x9}) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="090000000000000026090adb2f66696c653000"]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x1, r4}, 0xc) 07:37:42 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x7, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)={0x1, 0x9, 0x7}) (async) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) 07:37:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket(0x6, 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) close(r2) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000100)={0x3ff, 0x0, &(0x7f0000000080)=[r0, r2]}, 0x2) r4 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) r5 = dup(r0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'vlan1\x00', 0x1}) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x100) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x28000, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="65727370616e3000000000000000001cd00c00", @ANYRES32=0x0, @ANYBLOB="00800700000000c900000008456d00d4006600003f29907864010102ac1414bb44141341ac1e000100000fffe00000010000000844146be1ac141415000000057f0000010000ffff071b17ac1414bbe0000001ac1414187f0000010a010100ac1e00010717797f000001e0000002ffffffffac1414176401010044541d83ac1414aa00000b6be0000002000001ffac1414bb00000003ac1414aa00000008ac1e010100000f91e0000001000003ff0a010102000000030000000080000001e00000010000001fe0000002000000010711d411df5a8ad1203c050b48a24349e700"]}) sendmsg$nl_route_sched(r7, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000001300)=ANY=[@ANYBLOB="0c0500002d00000229bd7000fcdbdf2500000000", @ANYRES32=r8, @ANYBLOB="03000900010008000200070006000500e80900000700010066770000280402000804020004040300ffffffff810000003f000000ffffff7f00000000000000800100000006000000bf0000001f000000030000000200000080ffffff000000800000000009000000f8ffffff080000000700000006000000ff00000009000000fcffffff0400000006000000ff0700000100000002000000ffff0000db070000f42d00000000000001800000070000000600000001000000030000000000000000000000890000000900000000010000050000000bb30000a37e461e0300000006000000080000000900000001000100010000000500000008000000ee0c000002000000a30000000200000036fcffff96ffffff0600000002000000ef0000008cf20000680100000100000001000000ab020000200000000700000046000000880800000300000000000000090000001a59000006000000810000000400000000800000000200000800000007000000b40b000008000000000200000200000007000000000000000500000089000000000000001f00000000000000040000000600000005000000040000000500000076000000090000000500000038000000004d00000000000003000000090000001e020000030000000800000003000000030000000600000002000000020000000000000080000000cf9fc84e08000000020000004545ae180700000005000000fb000000b3cf77e60800000000100002080000005400000000100000f8ffffff0600000006000000090000000200000005000000040000009a00000003000000010100000600000002000000ffffffff0100000018d20000000000002000000003000000020000000008000001f8ffff010100008100000007000000000001007f00000003000000fffbffff040000000600000001000000070000000200000001000100810000000000010009000000020800006919f775fdfffffff0ea0000510d000001000000050000000400000001000000a1520050f083002fa700000700000002000000080000000400000000000000191200000000000008000000030000000600000005970000fcffffff0100000000000000020000000700000005000000010000003e0600000000000006000000800000000800000002000000ffffff7f00100000ffffffff9e580000000400000700000007000000030000007f000000030000000800000005000000c800000000000000ffffff7f0700000001010000060000004000000007000000000000007f000000000001001600000008000000030000000500000004000000874d00000900000001000000a4070000050000000300000001feffff020000000000f003000000000600000006060000810000008000000005000000090000000200000024010000040000000200000000000000000000000900000000000000d6cb000003000000050000000800010010000c001400030076657468315f746f5f6272696467650006000500080700000b000100666c6f77657200002800020008003c00ff000000060058004e20000006002800000000000a000600aaaaaaaaaaaa00000b000100666c6f77657200001c000200080016001c00000006005b00ff7f000005004e0004000000060005008107000008000b00ff7f000006000500c08000000a00010072737670360000002000020008000100feffebff14000200fe8000000000000000000000000000140600050003040000"], 0x50c}, 0x1, 0x0, 0x0, 0x4000890}, 0x8800) syncfs(r6) 07:37:42 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19004) 07:37:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2218.237069][T15561] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2218.245405][T15565] 8021q: VLANs not supported on lo [ 2218.253248][T15557] FAULT_INJECTION: forcing a failure. [ 2218.253248][T15557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2218.266613][T15557] CPU: 0 PID: 15557 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 07:37:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2218.279116][T15557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2218.289177][T15557] Call Trace: [ 2218.291674][T15572] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2218.292462][T15557] [ 2218.292471][T15557] dump_stack_lvl+0xd6/0x122 [ 2218.308226][T15557] dump_stack+0x11/0x12 [ 2218.312455][T15557] should_fail+0x242/0x250 [ 2218.316882][T15557] should_fail_usercopy+0x16/0x20 [ 2218.318970][T15575] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2218.321902][T15557] _copy_to_user+0x1a/0x90 07:37:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:37:42 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19006) 07:37:42 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x7ffff000) [ 2218.321926][T15557] rng_dev_read+0x2bd/0x630 [ 2218.321944][T15557] ? devm_hwrng_match+0x50/0x50 [ 2218.321961][T15557] vfs_read+0x198/0x560 [ 2218.321981][T15557] ? __fget_files+0x1a7/0x1e0 [ 2218.353472][T15557] ksys_read+0xe8/0x1a0 [ 2218.357643][T15557] __x64_sys_read+0x3e/0x50 [ 2218.362203][T15557] do_syscall_64+0x2b/0x70 [ 2218.366627][T15557] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2218.372615][T15557] RIP: 0033:0x7f8359bbc279 [ 2218.374731][T15577] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:37:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:37:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17", 0x2b}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2218.377024][T15557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2218.377045][T15557] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2218.412266][T15583] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2218.413307][T15557] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2218.413323][T15557] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 07:37:42 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 18) [ 2218.437502][T15557] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2218.445493][T15557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2218.448695][T15585] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2218.453489][T15557] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2218.453534][T15557] [ 2218.500163][T15587] FAULT_INJECTION: forcing a failure. [ 2218.500163][T15587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2218.513414][T15587] CPU: 0 PID: 15587 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2218.525809][T15587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2218.535868][T15587] Call Trace: [ 2218.539149][T15587] [ 2218.542091][T15587] dump_stack_lvl+0xd6/0x122 [ 2218.546701][T15587] dump_stack+0x11/0x12 [ 2218.550853][T15587] should_fail+0x242/0x250 [ 2218.555371][T15587] should_fail_usercopy+0x16/0x20 [ 2218.560376][T15587] _copy_to_user+0x1a/0x90 [ 2218.564852][T15587] rng_dev_read+0x2bd/0x630 [ 2218.569455][T15587] ? devm_hwrng_match+0x50/0x50 [ 2218.574378][T15587] vfs_read+0x198/0x560 [ 2218.578525][T15587] ? __fget_files+0x1a7/0x1e0 [ 2218.583269][T15587] ksys_read+0xe8/0x1a0 [ 2218.587440][T15587] __x64_sys_read+0x3e/0x50 [ 2218.591951][T15587] do_syscall_64+0x2b/0x70 [ 2218.596356][T15587] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2218.602280][T15587] RIP: 0033:0x7f8359bbc279 [ 2218.606738][T15587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2218.626398][T15587] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2218.634864][T15587] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2218.642875][T15587] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 07:37:43 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket(0x2, 0x80802, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000440)={0x7fff, 0x800, 0x200}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'lo\x00', {0x4}, 0x9}) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="090000000000000026090adb2f66696c653000"]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x1, r4}, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket(0x2, 0x80802, 0x0) (async) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000440)={0x7fff, 0x800, 0x200}) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'lo\x00', {0x4}, 0x9}) (async) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="090000000000000026090adb2f66696c653000"]) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x1, r4}, 0xc) (async) 07:37:43 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x7ffffffff000) [ 2218.650842][T15587] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2218.658813][T15587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2218.666836][T15587] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2218.674800][T15587] [ 2218.734058][T15591] 8021q: VLANs not supported on lo 07:37:49 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 19) 07:37:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket(0x6, 0x3, 0x0) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) (async) close(r2) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000100)={0x3ff, 0x0, &(0x7f0000000080)=[r0, r2]}, 0x2) (async) r4 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) (async) r5 = dup(r0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'vlan1\x00', 0x1}) (async) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x100) (async) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x28000, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="65727370616e3000000000000000001cd00c00", @ANYRES32=0x0, @ANYBLOB="00800700000000c900000008456d00d4006600003f29907864010102ac1414bb44141341ac1e000100000fffe00000010000000844146be1ac141415000000057f0000010000ffff071b17ac1414bbe0000001ac1414187f0000010a010100ac1e00010717797f000001e0000002ffffffffac1414176401010044541d83ac1414aa00000b6be0000002000001ffac1414bb00000003ac1414aa00000008ac1e010100000f91e0000001000003ff0a010102000000030000000080000001e00000010000001fe0000002000000010711d411df5a8ad1203c050b48a24349e700"]}) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000001300)=ANY=[@ANYBLOB="0c0500002d00000229bd7000fcdbdf2500000000", @ANYRES32=r8, @ANYBLOB="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"], 0x50c}, 0x1, 0x0, 0x0, 0x4000890}, 0x8800) (async) syncfs(r6) 07:37:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17", 0x2b}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:37:49 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x7, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000040)={0x1, 0x9, 0x7}) (async) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) 07:37:49 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000190c0)=[{r0, 0x409}], 0x1, 0xfffffff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x877, 0x0, 0x3, 0x1}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r2 = socket(0x2, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) 07:37:49 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000002c0)={{r1, 0xf8, 0x7, 0xffff, 0x3, 0x2, 0x100, 0x6, 0x132, 0x3, 0x7, 0x474, 0x3, 0x0, 0xffff}}) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000006c0)={"485cda573f28a8450e7bd701cb63516e", 0x0, r4, {0x3, 0xa6}, {0x0, 0x7f}, 0x101, [0x0, 0x4, 0x4, 0x1, 0x73f, 0xea93, 0x1, 0x3, 0xffffffff00000001, 0x80000001, 0x4e, 0x8, 0x7, 0x8, 0xfff, 0x5]}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r6}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r8, 0x890c, &(0x7f0000001840)={0x0, @l2tp={0x2, 0x0, @empty=0x3bb, 0x4}, @l2={0x1f, 0x6, @any, 0x992}, @nl=@unspec, 0x3d6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)='veth0_macvtap\x00', 0x100000000000000, 0x1000400004, 0x1}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002340)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"e6696328276c80ede1cbb140551427cb", r9, 0x0, {0x0, 0x7ff}, {0x1, 0x8007}, 0x28e, [0x0, 0x0, 0x800, 0x10008, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x4, 0x1, 0x3, 0x0, 0xfffffffffffffff8]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000002940)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, r9, 0x3, @unused=[0x0, 0x6, 0x70000000, 0xfff], @devid=r10}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000540)={{}, r7, 0x0, @unused=[0x8, 0x6, 0x80000001, 0x3], @devid=r10}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000001340)={{}, r5, 0x12, @unused=[0x4, 0x1, 0x10000, 0x2], @devid=r10}) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000140)={r10, 0x10001, 0x5c5d, 0x1}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000012c0)={{r0}, r2, 0x2, @inherit={0x70, &(0x7f0000000000)={0x0, 0x5, 0xfff, 0xde88, {0x0, 0x1000, 0x8, 0x20}, [0x9, 0x4, 0x8000000000000000, 0x7, 0xffffffffffffffff]}}, @devid=r10}) 07:37:49 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000190c0)=[{r0, 0x409}], 0x1, 0xfffffff8) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x877, 0x0, 0x3, 0x1}, 0x20) (async) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r2 = socket(0x2, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) (async) read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) 07:37:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17", 0x2b}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2225.364272][T15606] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2225.378473][T15610] FAULT_INJECTION: forcing a failure. [ 2225.378473][T15610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2225.394797][T15610] CPU: 1 PID: 15610 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 07:37:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400", 0x32}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2225.407324][T15610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2225.408252][T15614] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2225.417374][T15610] Call Trace: [ 2225.417384][T15610] [ 2225.417391][T15610] dump_stack_lvl+0xd6/0x122 [ 2225.417428][T15610] dump_stack+0x11/0x12 [ 2225.417447][T15610] should_fail+0x242/0x250 [ 2225.417464][T15610] should_fail_usercopy+0x16/0x20 [ 2225.450076][T15610] _copy_to_user+0x1a/0x90 [ 2225.450530][T15619] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:37:49 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400", 0x32}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:37:49 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f00000190c0)=[{r0, 0x409}], 0x1, 0xfffffff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x877, 0x0, 0x3, 0x1}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r2 = socket(0x2, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) poll(&(0x7f00000190c0)=[{r0, 0x409}], 0x1, 0xfffffff8) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x877, 0x0, 0x3, 0x1}, 0x20) (async) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (async) socket(0x2, 0x80802, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) (async) read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) (async) [ 2225.454494][T15610] rng_dev_read+0x2bd/0x630 [ 2225.454541][T15610] ? devm_hwrng_match+0x50/0x50 [ 2225.454558][T15610] vfs_read+0x198/0x560 [ 2225.476102][T15610] ? __fget_files+0x1a7/0x1e0 [ 2225.480812][T15610] ksys_read+0xe8/0x1a0 [ 2225.485018][T15610] __x64_sys_read+0x3e/0x50 [ 2225.489538][T15610] do_syscall_64+0x2b/0x70 [ 2225.493985][T15610] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2225.495180][T15628] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2225.499943][T15610] RIP: 0033:0x7f8359bbc279 07:37:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000019140)=@base={0xc, 0x319, 0x3, 0x3, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x48) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000199c0)={&(0x7f00000198c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000019980)={&(0x7f0000019900)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x488c0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000019a00)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x0, 0x3, 0x1, 0x2, 0x2}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r3, &(0x7f00000000c0)=""/102400, 0x19000) sendmsg$qrtr(r0, &(0x7f0000019880)={&(0x7f0000000000)={0x2a, 0x1, 0x7fff}, 0xc, &(0x7f00000195c0)=[{&(0x7f00000190c0)="8270a30bd7c90c09d4c764d93c57ce31074a987601424c6340856eec9987b9a5021509ab84d87a1601c6aa6e107d4ea5cae0d7722c2a70dcfc059fa749e72fb9b43a613d0910fcbc50cbd71f716eac6418642d6302c019", 0x57}, {&(0x7f0000019a40)="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", 0x1eb}, {&(0x7f0000000040)="7de6e9a16daff23100e5181706dc6c91c48ec32dbf7267f949bae1d7a4989c", 0x1f}, {&(0x7f0000019240)="9a8ef68d60687155ceec2063201714b2f0538efc39c0ce1056ed51b8b09286518453bec17a4a7752514b5a24da463a6d6bb1e68f42d253139660801bcc1022ce64ec91dc0741217b1b8c96107fef4a119e", 0x51}, {&(0x7f00000192c0)="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", 0xfc}, {&(0x7f00000193c0)="b14d75ed869480b9fa123f09dbf3776791bc122a3c9d80595632d7e0ec6d5c376ed75d97f96e9160045a6f5c12afbca21cec14e5e1564da1e3fa53e891e14fbc05ec3d40cd741fc0decaca2a016fb91277cd7e772d8da4a1b3630a5308248bd11c538c94489921bde03890b036d5f822fda22ab21111fececea50faa1cb670b678561fb23e0991d91980539c781bba15378c5de432ddcbe1b18b175c4aadd12653aaddcb2cb3230b1892cda857c9dbbf19b20a50e85a9d4ae3cc540eef34469b7c6996", 0xc3}, {&(0x7f00000194c0)="4f5fb10274eba988de571e9a3f0445da97577cb86da5d1eed4a3bfa9d80c87e533a2b61dba6ff63ec1faf05ed2dcb135230e8e5e16937a432ae3b88723e3e2e46b695ee4a12fa86d15bd241abecbbc73b5e4da1227f2fa2f8173a1528a22812aef3809e9b82965402c1eb1b94fafe944c8b53a4b94ddc8c4964ce4ef40287b41d6696ef41c224c7d732bc3470eb95c590b2f40ce14dcc8cf1cb6f6e89d95ec47937fa4a71595e67474029e3d416c866777fad954e0addc5521a79531fb02f055d3ec9904ccc21184f640c7300add338bc0bb5853d376", 0xd6}], 0x7, &(0x7f0000019640)=ANY=[@ANYBLOB="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"], 0x228, 0x4000000}, 0x38) [ 2225.499963][T15610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2225.532040][T15610] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2225.540584][T15610] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2225.548565][T15610] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2225.556606][T15610] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 07:37:49 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 20) [ 2225.564668][T15610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2225.572774][T15610] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2225.580805][T15610] [ 2225.586363][ T24] audit: type=1400 audit(1662449869.914:340): avc: denied { ioctl } for pid=15601 comm="syz-executor.3" path="socket:[56283]" dev="sockfs" ino=56283 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2225.639277][T15636] FAULT_INJECTION: forcing a failure. [ 2225.639277][T15636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2225.652618][T15636] CPU: 1 PID: 15636 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2225.665052][T15636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2225.675092][T15636] Call Trace: [ 2225.678481][T15636] [ 2225.681394][T15636] dump_stack_lvl+0xd6/0x122 [ 2225.685993][T15636] dump_stack+0x11/0x12 [ 2225.690133][T15636] should_fail+0x242/0x250 [ 2225.694549][T15636] should_fail_usercopy+0x16/0x20 [ 2225.699605][T15636] _copy_to_user+0x1a/0x90 [ 2225.704027][T15636] rng_dev_read+0x2bd/0x630 [ 2225.708575][T15636] ? devm_hwrng_match+0x50/0x50 [ 2225.713447][T15636] vfs_read+0x198/0x560 [ 2225.717656][T15636] ? __fget_files+0x1a7/0x1e0 [ 2225.722318][T15636] ksys_read+0xe8/0x1a0 [ 2225.726543][T15636] __x64_sys_read+0x3e/0x50 [ 2225.731035][T15636] do_syscall_64+0x2b/0x70 [ 2225.735454][T15636] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2225.741409][T15636] RIP: 0033:0x7f8359bbc279 [ 2225.745821][T15636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2225.765517][T15636] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2225.773953][T15636] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2225.782001][T15636] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2225.789974][T15636] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2225.798020][T15636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2225.806167][T15636] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2225.814270][T15636] 07:37:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket(0x6, 0x3, 0x0) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) close(r2) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000100)={0x3ff, 0x0, &(0x7f0000000080)=[r0, r2]}, 0x2) (async) r4 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) (async) r5 = dup(r0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'vlan1\x00', 0x1}) (async) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x100) (async) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200), 0x28000, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="65727370616e3000000000000000001cd00c00", @ANYRES32=0x0, @ANYBLOB="00800700000000c900000008456d00d4006600003f29907864010102ac1414bb44141341ac1e000100000fffe00000010000000844146be1ac141415000000057f0000010000ffff071b17ac1414bbe0000001ac1414187f0000010a010100ac1e00010717797f000001e0000002ffffffffac1414176401010044541d83ac1414aa00000b6be0000002000001ffac1414bb00000003ac1414aa00000008ac1e010100000f91e0000001000003ff0a010102000000030000000080000001e00000010000001fe0000002000000010711d411df5a8ad1203c050b48a24349e700"]}) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000001300)=ANY=[@ANYBLOB="0c0500002d00000229bd7000fcdbdf2500000000", @ANYRES32=r8, @ANYBLOB="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"], 0x50c}, 0x1, 0x0, 0x0, 0x4000890}, 0x8800) syncfs(r6) 07:37:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400", 0x32}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:37:56 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000019140)=@base={0xc, 0x319, 0x3, 0x3, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x48) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000199c0)={&(0x7f00000198c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000019980)={&(0x7f0000019900)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x488c0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000019a00)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x0, 0x3, 0x1, 0x2, 0x2}, 0x20) (async) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r3, &(0x7f00000000c0)=""/102400, 0x19000) (async) sendmsg$qrtr(r0, &(0x7f0000019880)={&(0x7f0000000000)={0x2a, 0x1, 0x7fff}, 0xc, &(0x7f00000195c0)=[{&(0x7f00000190c0)="8270a30bd7c90c09d4c764d93c57ce31074a987601424c6340856eec9987b9a5021509ab84d87a1601c6aa6e107d4ea5cae0d7722c2a70dcfc059fa749e72fb9b43a613d0910fcbc50cbd71f716eac6418642d6302c019", 0x57}, {&(0x7f0000019a40)="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", 0x1eb}, {&(0x7f0000000040)="7de6e9a16daff23100e5181706dc6c91c48ec32dbf7267f949bae1d7a4989c", 0x1f}, {&(0x7f0000019240)="9a8ef68d60687155ceec2063201714b2f0538efc39c0ce1056ed51b8b09286518453bec17a4a7752514b5a24da463a6d6bb1e68f42d253139660801bcc1022ce64ec91dc0741217b1b8c96107fef4a119e", 0x51}, {&(0x7f00000192c0)="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", 0xfc}, {&(0x7f00000193c0)="b14d75ed869480b9fa123f09dbf3776791bc122a3c9d80595632d7e0ec6d5c376ed75d97f96e9160045a6f5c12afbca21cec14e5e1564da1e3fa53e891e14fbc05ec3d40cd741fc0decaca2a016fb91277cd7e772d8da4a1b3630a5308248bd11c538c94489921bde03890b036d5f822fda22ab21111fececea50faa1cb670b678561fb23e0991d91980539c781bba15378c5de432ddcbe1b18b175c4aadd12653aaddcb2cb3230b1892cda857c9dbbf19b20a50e85a9d4ae3cc540eef34469b7c6996", 0xc3}, {&(0x7f00000194c0)="4f5fb10274eba988de571e9a3f0445da97577cb86da5d1eed4a3bfa9d80c87e533a2b61dba6ff63ec1faf05ed2dcb135230e8e5e16937a432ae3b88723e3e2e46b695ee4a12fa86d15bd241abecbbc73b5e4da1227f2fa2f8173a1528a22812aef3809e9b82965402c1eb1b94fafe944c8b53a4b94ddc8c4964ce4ef40287b41d6696ef41c224c7d732bc3470eb95c590b2f40ce14dcc8cf1cb6f6e89d95ec47937fa4a71595e67474029e3d416c866777fad954e0addc5521a79531fb02f055d3ec9904ccc21184f640c7300add338bc0bb5853d376", 0xd6}], 0x7, &(0x7f0000019640)=ANY=[@ANYBLOB="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"], 0x228, 0x4000000}, 0x38) 07:37:56 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) fsmount(r1, 0x0, 0x70) r2 = socket(0x2, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x20000044) 07:37:56 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000002c0)={{r1, 0xf8, 0x7, 0xffff, 0x3, 0x2, 0x100, 0x6, 0x132, 0x3, 0x7, 0x474, 0x3, 0x0, 0xffff}}) (async) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000006c0)={"485cda573f28a8450e7bd701cb63516e", 0x0, r4, {0x3, 0xa6}, {0x0, 0x7f}, 0x101, [0x0, 0x4, 0x4, 0x1, 0x73f, 0xea93, 0x1, 0x3, 0xffffffff00000001, 0x80000001, 0x4e, 0x8, 0x7, 0x8, 0xfff, 0x5]}) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r6}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r8, 0x890c, &(0x7f0000001840)={0x0, @l2tp={0x2, 0x0, @empty=0x3bb, 0x4}, @l2={0x1f, 0x6, @any, 0x992}, @nl=@unspec, 0x3d6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)='veth0_macvtap\x00', 0x100000000000000, 0x1000400004, 0x1}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002340)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"e6696328276c80ede1cbb140551427cb", r9, 0x0, {0x0, 0x7ff}, {0x1, 0x8007}, 0x28e, [0x0, 0x0, 0x800, 0x10008, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x4, 0x1, 0x3, 0x0, 0xfffffffffffffff8]}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000002940)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, r9, 0x3, @unused=[0x0, 0x6, 0x70000000, 0xfff], @devid=r10}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000540)={{}, r7, 0x0, @unused=[0x8, 0x6, 0x80000001, 0x3], @devid=r10}) (async, rerun: 64) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000001340)={{}, r5, 0x12, @unused=[0x4, 0x1, 0x10000, 0x2], @devid=r10}) (async, rerun: 64) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000140)={r10, 0x10001, 0x5c5d, 0x1}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000012c0)={{r0}, r2, 0x2, @inherit={0x70, &(0x7f0000000000)={0x0, 0x5, 0xfff, 0xde88, {0x0, 0x1000, 0x8, 0x20}, [0x9, 0x4, 0x8000000000000000, 0x7, 0xffffffffffffffff]}}, @devid=r10}) 07:37:56 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 21) 07:37:56 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000002c0)={{r1, 0xf8, 0x7, 0xffff, 0x3, 0x2, 0x100, 0x6, 0x132, 0x3, 0x7, 0x474, 0x3, 0x0, 0xffff}}) (async) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000006c0)={"485cda573f28a8450e7bd701cb63516e", 0x0, r4, {0x3, 0xa6}, {0x0, 0x7f}, 0x101, [0x0, 0x4, 0x4, 0x1, 0x73f, 0xea93, 0x1, 0x3, 0xffffffff00000001, 0x80000001, 0x4e, 0x8, 0x7, 0x8, 0xfff, 0x5]}) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r6}, 0x10) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r8, 0x890c, &(0x7f0000001840)={0x0, @l2tp={0x2, 0x0, @empty=0x3bb, 0x4}, @l2={0x1f, 0x6, @any, 0x992}, @nl=@unspec, 0x3d6, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)='veth0_macvtap\x00', 0x100000000000000, 0x1000400004, 0x1}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002340)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"e6696328276c80ede1cbb140551427cb", r9, 0x0, {0x0, 0x7ff}, {0x1, 0x8007}, 0x28e, [0x0, 0x0, 0x800, 0x10008, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x4, 0x1, 0x3, 0x0, 0xfffffffffffffff8]}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000002940)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000840)={{}, r9, 0x3, @unused=[0x0, 0x6, 0x70000000, 0xfff], @devid=r10}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000540)={{}, r7, 0x0, @unused=[0x8, 0x6, 0x80000001, 0x3], @devid=r10}) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000001340)={{}, r5, 0x12, @unused=[0x4, 0x1, 0x10000, 0x2], @devid=r10}) (async) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000140)={r10, 0x10001, 0x5c5d, 0x1}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000012c0)={{r0}, r2, 0x2, @inherit={0x70, &(0x7f0000000000)={0x0, 0x5, 0xfff, 0xde88, {0x0, 0x1000, 0x8, 0x20}, [0x9, 0x4, 0x8000000000000000, 0x7, 0xffffffffffffffff]}}, @devid=r10}) 07:37:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000", 0x36}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:37:56 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2232.487938][T15642] FAULT_INJECTION: forcing a failure. [ 2232.487938][T15642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2232.488056][T15652] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2232.501188][T15642] CPU: 1 PID: 15642 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2232.521612][T15642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2232.531681][T15642] Call Trace: [ 2232.534963][T15642] 07:37:56 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000019140)=@base={0xc, 0x319, 0x3, 0x3, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x48) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (rerun: 32) r1 = socket(0x2, 0x80802, 0x0) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000199c0)={&(0x7f00000198c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000019980)={&(0x7f0000019900)={0x50, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x488c0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000019a00)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x0, 0x3, 0x1, 0x2, 0x2}, 0x20) (async) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r3, &(0x7f00000000c0)=""/102400, 0x19000) (async) sendmsg$qrtr(r0, &(0x7f0000019880)={&(0x7f0000000000)={0x2a, 0x1, 0x7fff}, 0xc, &(0x7f00000195c0)=[{&(0x7f00000190c0)="8270a30bd7c90c09d4c764d93c57ce31074a987601424c6340856eec9987b9a5021509ab84d87a1601c6aa6e107d4ea5cae0d7722c2a70dcfc059fa749e72fb9b43a613d0910fcbc50cbd71f716eac6418642d6302c019", 0x57}, {&(0x7f0000019a40)="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", 0x1eb}, {&(0x7f0000000040)="7de6e9a16daff23100e5181706dc6c91c48ec32dbf7267f949bae1d7a4989c", 0x1f}, {&(0x7f0000019240)="9a8ef68d60687155ceec2063201714b2f0538efc39c0ce1056ed51b8b09286518453bec17a4a7752514b5a24da463a6d6bb1e68f42d253139660801bcc1022ce64ec91dc0741217b1b8c96107fef4a119e", 0x51}, {&(0x7f00000192c0)="e471cf17751a06db03f3b18a936b5076cc20eee0f21fddd81b73a71c2b1e4caf733358d73e44c2eecb3526b366673fd011b7b4bd804db6297e3a52226b906e76deec413f543604e35076576150a96dc4556df603423b4bba4c50c58b12671495565496adff68bb19fc8425d92809d653ad656a324025fa60fad32f5f934eb1cacdbfd69aecc28524c84dba70898ddb580669d757e9cd53ffb7bb28123e10d3b732a313c8fcdc2f0a1695751c52d48ed489e72ca03d517aaf6f6532862662f3cfcab736a25d18859764626378f376c27b96c17973136bf7fd3c880d9d534afd2dd1f7991d1c3222cd5104b7166a71508ed929010dc7d1c1bd24dd0dde", 0xfc}, {&(0x7f00000193c0)="b14d75ed869480b9fa123f09dbf3776791bc122a3c9d80595632d7e0ec6d5c376ed75d97f96e9160045a6f5c12afbca21cec14e5e1564da1e3fa53e891e14fbc05ec3d40cd741fc0decaca2a016fb91277cd7e772d8da4a1b3630a5308248bd11c538c94489921bde03890b036d5f822fda22ab21111fececea50faa1cb670b678561fb23e0991d91980539c781bba15378c5de432ddcbe1b18b175c4aadd12653aaddcb2cb3230b1892cda857c9dbbf19b20a50e85a9d4ae3cc540eef34469b7c6996", 0xc3}, {&(0x7f00000194c0)="4f5fb10274eba988de571e9a3f0445da97577cb86da5d1eed4a3bfa9d80c87e533a2b61dba6ff63ec1faf05ed2dcb135230e8e5e16937a432ae3b88723e3e2e46b695ee4a12fa86d15bd241abecbbc73b5e4da1227f2fa2f8173a1528a22812aef3809e9b82965402c1eb1b94fafe944c8b53a4b94ddc8c4964ce4ef40287b41d6696ef41c224c7d732bc3470eb95c590b2f40ce14dcc8cf1cb6f6e89d95ec47937fa4a71595e67474029e3d416c866777fad954e0addc5521a79531fb02f055d3ec9904ccc21184f640c7300add338bc0bb5853d376", 0xd6}], 0x7, &(0x7f0000019640)=ANY=[@ANYBLOB="880000000000000004010000f4070000acf31b967cc0a1e00e68ffde57695858bbbfdd71166e48b7505115b74767f12d36f80b9949e1d4c97194d0af5a8432d37ff73aa924dd70daf0085fbc1fc973dd2e5eca2daa288130f6543932597245cdae0712782c93729bd98e642d2524d332e54ed2fe6d9fb3c321345f1bd9c31727560a60e587db506120000000000000000f0100000600000062ccfe35ed21ed75920000000000000080000000000000002900000007000000cc1b6796063f02aa47391424260ef04df04c03948e4b02fb417c4124783835944ddd1305427fd8f0d03f37ae720813d9336da1eab17c88020343abe3dafbd43ada17c87c5449b1f35c99f73e94aa16dc583df6b6e7edec5da46040fc2d0570d752524c9e86237dd4e5c11b01ff000000000100000000000088000000000000009d38c537e90855e97a3025e017e81a8f2db3e1db14412059c84e20e45c56110de4a6af83ef699412d3026ee930ad20abef390c713582c2a3b8bbe910473725bd8bff851dd787f3aee4195f51c5271b9c978ac62c2a36e35bf577d948f97932c2672ce94e6803d023997094101e4daec0b034627e7fc7df963bc02b7404b6e1478fba15b0a7e26e53e3688fd80a2f02ee933eaa2eb8c38604a2ef2af6f41cd37cee711dcdac49f2d3315cb661792f7baa68563a653e3604f20703c1ed176a72d21f52b3d801fd2b95035d828ced9b0046a4027711ea9c0622a5abd369a6ed422f615d9c2aabbd7fa3cd03c7e92679b7f3"], 0x228, 0x4000000}, 0x38) 07:37:56 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) [ 2232.537897][T15642] dump_stack_lvl+0xd6/0x122 [ 2232.542916][T15642] dump_stack+0x11/0x12 [ 2232.547128][T15642] should_fail+0x242/0x250 [ 2232.551562][T15642] should_fail_usercopy+0x16/0x20 [ 2232.556604][T15642] _copy_to_user+0x1a/0x90 [ 2232.561079][T15642] rng_dev_read+0x2bd/0x630 [ 2232.565605][T15642] ? devm_hwrng_match+0x50/0x50 [ 2232.570516][T15642] vfs_read+0x198/0x560 [ 2232.574721][T15642] ? __fget_files+0x1a7/0x1e0 [ 2232.579498][T15642] ksys_read+0xe8/0x1a0 07:37:56 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) [ 2232.584906][T15642] __x64_sys_read+0x3e/0x50 [ 2232.589430][T15642] do_syscall_64+0x2b/0x70 [ 2232.590210][T15665] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2232.593926][T15642] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2232.594014][T15642] RIP: 0033:0x7f8359bbc279 [ 2232.612467][T15642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2232.632130][T15642] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2232.640568][T15642] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2232.648561][T15642] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2232.656566][T15642] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2232.664547][T15642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2232.672589][T15642] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2232.680614][T15642] [ 2240.821791][ T24] audit: type=1400 audit(1662449885.154:341): avc: denied { create } for pid=15677 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 07:38:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x1000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) 07:38:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000", 0x36}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:38:06 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket(0x11, 0x1, 0x8) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000190c0)='cubic\x00', 0x6) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) close(r2) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, r2, 0x7cb3d000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r4, &(0x7f00000000c0)=""/102400, 0x19000) open_tree(0xffffffffffffff9c, &(0x7f0000019100)='./file0\x00', 0x88000) 07:38:06 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8, 0x161, 0xffffffffffffffff, 0x4}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) close(r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0xee01}}, './file0\x00'}) 07:38:06 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 22) 07:38:06 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) (async) fsmount(r1, 0x0, 0x70) (async) r2 = socket(0x2, 0x80802, 0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) (async, rerun: 64) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x20000044) (rerun: 64) [ 2241.899083][T15701] FAULT_INJECTION: forcing a failure. [ 2241.899083][T15701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2241.902907][T15696] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2241.912357][T15701] CPU: 1 PID: 15701 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2241.934232][T15701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2241.944299][T15701] Call Trace: 07:38:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000", 0x36}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:38:06 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = socket(0x11, 0x1, 0x8) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000190c0)='cubic\x00', 0x6) (async) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) (async) close(r2) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, r2, 0x7cb3d000) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r4, &(0x7f00000000c0)=""/102400, 0x19000) (async) open_tree(0xffffffffffffff9c, &(0x7f0000019100)='./file0\x00', 0x88000) 07:38:06 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket(0x11, 0x1, 0x8) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000190c0)='cubic\x00', 0x6) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) close(r2) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, r2, 0x7cb3d000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r4, &(0x7f00000000c0)=""/102400, 0x19000) open_tree(0xffffffffffffff9c, &(0x7f0000019100)='./file0\x00', 0x88000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket(0x11, 0x1, 0x8) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000190c0)='cubic\x00', 0x6) (async) socket(0x2, 0x80802, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) (async) close(r2) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4010, r2, 0x7cb3d000) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (async) read$char_usb(r4, &(0x7f00000000c0)=""/102400, 0x19000) (async) open_tree(0xffffffffffffff9c, &(0x7f0000019100)='./file0\x00', 0x88000) (async) [ 2241.947635][T15701] [ 2241.950571][T15701] dump_stack_lvl+0xd6/0x122 [ 2241.955262][T15701] dump_stack+0x11/0x12 [ 2241.959442][T15701] should_fail+0x242/0x250 [ 2241.963872][T15701] should_fail_usercopy+0x16/0x20 [ 2241.969016][T15701] _copy_to_user+0x1a/0x90 [ 2241.973453][T15701] rng_dev_read+0x2bd/0x630 [ 2241.978009][T15701] ? devm_hwrng_match+0x50/0x50 [ 2241.982890][T15701] vfs_read+0x198/0x560 [ 2241.987065][T15701] ? __fget_files+0x1a7/0x1e0 07:38:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:38:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2241.987847][T15710] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2241.991821][T15701] ksys_read+0xe8/0x1a0 [ 2241.991848][T15701] __x64_sys_read+0x3e/0x50 [ 2242.008572][T15701] do_syscall_64+0x2b/0x70 [ 2242.013100][T15701] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2242.019022][T15701] RIP: 0033:0x7f8359bbc279 [ 2242.020869][T15726] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:38:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2242.023461][T15701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2242.023480][T15701] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2242.023540][T15701] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2242.023553][T15701] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2242.023564][T15701] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2242.054347][T15728] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2242.059714][T15701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2242.059732][T15701] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2242.059748][T15701] [ 2242.087959][T15731] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:38:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x1000}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) 07:38:15 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 23) 07:38:15 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) fsmount(r1, 0x0, 0x70) (async) r2 = socket(0x2, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) (async) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x20000044) 07:38:15 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) recvmsg(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, r2, 0x1201, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000019100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000190c0)={&(0x7f0000000040)={0x28, r2, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x3) 07:38:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:38:15 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8, 0x161, 0xffffffffffffffff, 0x4}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) close(r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0xee01}}, './file0\x00'}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) (async) socket(0x2, 0x80802, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8, 0x161, 0xffffffffffffffff, 0x4}, 0x48) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) (async) close(r2) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0xee01}}, './file0\x00'}) (async) [ 2251.116256][T15742] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2251.130063][T15743] FAULT_INJECTION: forcing a failure. [ 2251.130063][T15743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2251.143430][T15743] CPU: 0 PID: 15743 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2251.155829][T15743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 07:38:15 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) recvmsg(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, r2, 0x1201, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000019100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000190c0)={&(0x7f0000000040)={0x28, r2, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x3) [ 2251.165896][T15743] Call Trace: [ 2251.169167][T15743] [ 2251.172269][T15743] dump_stack_lvl+0xd6/0x122 [ 2251.176863][T15743] dump_stack+0x11/0x12 [ 2251.181051][T15743] should_fail+0x242/0x250 [ 2251.185568][T15743] should_fail_usercopy+0x16/0x20 [ 2251.190679][T15743] _copy_to_user+0x1a/0x90 [ 2251.195149][T15743] rng_dev_read+0x2bd/0x630 [ 2251.199699][T15743] ? devm_hwrng_match+0x50/0x50 [ 2251.204574][T15743] vfs_read+0x198/0x560 [ 2251.208717][T15743] ? __fget_files+0x1a7/0x1e0 [ 2251.213393][T15743] ksys_read+0xe8/0x1a0 [ 2251.217562][T15743] __x64_sys_read+0x3e/0x50 [ 2251.222060][T15743] do_syscall_64+0x2b/0x70 [ 2251.226648][T15743] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2251.232631][T15743] RIP: 0033:0x7f8359bbc279 [ 2251.237105][T15743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2251.256714][T15743] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 07:38:15 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 24) [ 2251.265113][T15743] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2251.274124][T15743] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2251.282089][T15743] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2251.290118][T15743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2251.298092][T15743] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2251.306064][T15743] 07:38:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:38:15 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) (async) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8, 0x161, 0xffffffffffffffff, 0x4}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) (async) close(r2) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0xee01}}, './file0\x00'}) 07:38:15 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r1, r2, &(0x7f0000000240)=0x208, 0x9) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r3, @ANYBLOB="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", @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) read$char_usb(r2, &(0x7f00000000c0)=""/102391, 0x18ff7) [ 2251.336713][T15765] FAULT_INJECTION: forcing a failure. [ 2251.336713][T15765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2251.349987][T15765] CPU: 0 PID: 15765 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2251.362658][T15765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2251.372757][T15765] Call Trace: [ 2251.376040][T15765] [ 2251.379042][T15765] dump_stack_lvl+0xd6/0x122 [ 2251.383690][T15765] dump_stack+0x11/0x12 [ 2251.388050][T15765] should_fail+0x242/0x250 [ 2251.392488][T15765] should_fail_usercopy+0x16/0x20 [ 2251.397518][T15765] _copy_to_user+0x1a/0x90 [ 2251.402036][T15765] rng_dev_read+0x2bd/0x630 [ 2251.406625][T15765] ? devm_hwrng_match+0x50/0x50 [ 2251.411466][T15765] vfs_read+0x198/0x560 [ 2251.415663][T15765] ? __fget_files+0x1a7/0x1e0 [ 2251.420352][T15765] ksys_read+0xe8/0x1a0 [ 2251.424502][T15765] __x64_sys_read+0x3e/0x50 [ 2251.428999][T15765] do_syscall_64+0x2b/0x70 [ 2251.433490][T15765] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2251.439416][T15765] RIP: 0033:0x7f8359bbc279 [ 2251.443846][T15765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2251.463526][T15765] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2251.471941][T15765] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 07:38:15 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 25) [ 2251.479930][T15765] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2251.488623][T15765] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2251.496590][T15765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2251.504599][T15765] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2251.512622][T15765] [ 2251.516546][T15776] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2251.552714][T15779] FAULT_INJECTION: forcing a failure. [ 2251.552714][T15779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2251.566200][T15779] CPU: 1 PID: 15779 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2251.578706][T15779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2251.581371][T15782] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2251.588760][T15779] Call Trace: 07:38:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2251.588770][T15779] [ 2251.603484][T15779] dump_stack_lvl+0xd6/0x122 [ 2251.608252][T15779] dump_stack+0x11/0x12 [ 2251.612518][T15779] should_fail+0x242/0x250 [ 2251.616940][T15779] should_fail_usercopy+0x16/0x20 [ 2251.621964][T15779] _copy_to_user+0x1a/0x90 [ 2251.626548][T15779] rng_dev_read+0x2bd/0x630 [ 2251.631062][T15779] ? devm_hwrng_match+0x50/0x50 [ 2251.635911][T15779] vfs_read+0x198/0x560 [ 2251.640070][T15779] ? __fdget_pos+0x125/0x1a0 [ 2251.644682][T15779] ? __fdget_pos+0x12f/0x1a0 [ 2251.649332][T15779] ? __sanitizer_cov_trace_pc+0x33/0x60 [ 2251.654867][T15779] ksys_read+0xe8/0x1a0 [ 2251.661093][T15779] __x64_sys_read+0x3e/0x50 [ 2251.665582][T15779] do_syscall_64+0x2b/0x70 [ 2251.670049][T15779] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2251.675928][T15779] RIP: 0033:0x7f8359bbc279 [ 2251.680411][T15779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2251.700097][T15779] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2251.708755][T15779] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2251.716878][T15779] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2251.724940][T15779] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2251.732916][T15779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2251.740912][T15779] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2251.748883][T15779] 07:38:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x1000}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) 07:38:22 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) r1 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r1, r2, &(0x7f0000000240)=0x208, 0x9) (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r3, @ANYBLOB="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", @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) read$char_usb(r2, &(0x7f00000000c0)=""/102391, 0x18ff7) 07:38:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:38:22 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000019180)=""/102395, 0x18ffb) 07:38:22 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 26) 07:38:22 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) recvmsg(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, r2, 0x1201, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) (async, rerun: 64) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000019100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000190c0)={&(0x7f0000000040)={0x28, r2, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x3) (rerun: 64) 07:38:22 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) read$char_usb(0xffffffffffffffff, &(0x7f0000019180)=""/102395, 0x18ffb) [ 2258.245095][T15790] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2258.257674][T15795] FAULT_INJECTION: forcing a failure. [ 2258.257674][T15795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2258.271349][T15795] CPU: 1 PID: 15795 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2258.283778][T15795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 07:38:22 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r1, r2, &(0x7f0000000240)=0x208, 0x9) (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r3, @ANYBLOB="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", @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) (async) read$char_usb(r2, &(0x7f00000000c0)=""/102391, 0x18ff7) 07:38:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:38:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2258.293946][T15795] Call Trace: [ 2258.297240][T15795] [ 2258.300176][T15795] dump_stack_lvl+0xd6/0x122 [ 2258.304810][T15795] dump_stack+0x11/0x12 [ 2258.309033][T15795] should_fail+0x242/0x250 [ 2258.313485][T15795] should_fail_usercopy+0x16/0x20 [ 2258.318537][T15795] _copy_to_user+0x1a/0x90 [ 2258.323025][T15795] rng_dev_read+0x2bd/0x630 [ 2258.325525][T15809] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2258.327533][T15795] ? devm_hwrng_match+0x50/0x50 [ 2258.340465][T15795] vfs_read+0x198/0x560 07:38:22 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f00000000c0)=""/102389, 0x18ff5) [ 2258.344645][T15795] ? __fget_files+0x1a7/0x1e0 [ 2258.349410][T15795] ksys_read+0xe8/0x1a0 [ 2258.353587][T15795] __x64_sys_read+0x3e/0x50 [ 2258.358144][T15795] do_syscall_64+0x2b/0x70 [ 2258.362637][T15795] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2258.368627][T15795] RIP: 0033:0x7f8359bbc279 [ 2258.373051][T15795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 07:38:22 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0), 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2258.388678][T15813] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2258.392676][T15795] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2258.392700][T15795] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2258.392711][T15795] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2258.392723][T15795] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2258.392734][T15795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2258.420374][T15817] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2258.425111][T15795] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2258.425132][T15795] 07:38:29 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 27) 07:38:29 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) read$char_usb(0xffffffffffffffff, &(0x7f0000019180)=""/102395, 0x18ffb) 07:38:29 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f00000000c0)=""/102389, 0x18ff5) 07:38:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0), 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:38:29 executing program 0: r0 = socket(0x2, 0x80802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10002000}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) fcntl$getown(r2, 0x9) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x10240, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='attr/current\x00') read$char_usb(r3, &(0x7f00000000c0)=""/102400, 0x19000) 07:38:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000004440)=[{&(0x7f0000000000)="3dcf49396a921ce69f45f15286731650", 0x6c}, {&(0x7f00000001c0)="81", 0x30}, {&(0x7f0000000080)="2bc56ccf0112d925750e7565271144c3b13198eb2c7fa2cf9f947262323d9b1ddfeb4f7e6a7189cf599a7fffd71759a7212816c7a6c35453287a9f729914", 0x1}], 0x3, 0xfffffffc, 0x3) r2 = socket(0x2, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) recvmsg$kcm(r2, &(0x7f0000001280)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000000100)=""/29, 0x1d}, 0x0) 07:38:29 executing program 0: r0 = socket(0x2, 0x80802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10002000}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) fcntl$getown(r2, 0x9) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x10240, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='attr/current\x00') read$char_usb(r3, &(0x7f00000000c0)=""/102400, 0x19000) socket(0x2, 0x80802, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10002000}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) (async) fcntl$getown(r2, 0x9) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x10240, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) syz_open_procfs(0x0, &(0x7f00000004c0)='attr/current\x00') (async) read$char_usb(r3, &(0x7f00000000c0)=""/102400, 0x19000) (async) 07:38:29 executing program 0: r0 = socket(0x2, 0x80802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10002000}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) fcntl$getown(r2, 0x9) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x10240, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='attr/current\x00') read$char_usb(r3, &(0x7f00000000c0)=""/102400, 0x19000) socket(0x2, 0x80802, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10002000}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) (async) fcntl$getown(r2, 0x9) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x10240, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) syz_open_procfs(0x0, &(0x7f00000004c0)='attr/current\x00') (async) read$char_usb(r3, &(0x7f00000000c0)=""/102400, 0x19000) (async) [ 2265.361061][T15829] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2265.366595][T15830] FAULT_INJECTION: forcing a failure. [ 2265.366595][T15830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2265.382541][T15830] CPU: 1 PID: 15830 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2265.394965][T15830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2265.405140][T15830] Call Trace: [ 2265.408421][T15830] 07:38:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0), 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:38:29 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc020}, 0x8000) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) 07:38:29 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000190c0)={@remote, 0x8, 0x0, 0xff, 0x0, 0x0, 0xfff8}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f0000000000)={r4}) read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) 07:38:29 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (rerun: 32) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (async) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000190c0)={@remote, 0x8, 0x0, 0xff, 0x0, 0x0, 0xfff8}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) (async, rerun: 32) r4 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f0000000000)={r4}) (async) read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) [ 2265.411349][T15830] dump_stack_lvl+0xd6/0x122 [ 2265.415975][T15830] dump_stack+0x11/0x12 [ 2265.420151][T15830] should_fail+0x242/0x250 [ 2265.424574][T15830] should_fail_usercopy+0x16/0x20 [ 2265.429665][T15830] _copy_to_user+0x1a/0x90 [ 2265.434097][T15830] rng_dev_read+0x2bd/0x630 [ 2265.438618][T15830] ? devm_hwrng_match+0x50/0x50 [ 2265.443484][T15830] vfs_read+0x198/0x560 [ 2265.447675][T15830] ? __fget_files+0x1a7/0x1e0 [ 2265.452404][T15830] ksys_read+0xe8/0x1a0 [ 2265.456575][T15830] __x64_sys_read+0x3e/0x50 [ 2265.461096][T15830] do_syscall_64+0x2b/0x70 [ 2265.465546][T15830] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2265.471637][T15830] RIP: 0033:0x7f8359bbc279 [ 2265.476146][T15830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2265.479135][T15863] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:38:29 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 28) 07:38:29 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async, rerun: 64) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (async) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000190c0)={@remote, 0x8, 0x0, 0xff, 0x0, 0x0, 0xfff8}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f0000000000)={r4}) read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) [ 2265.495762][T15830] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2265.512262][T15830] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2265.520225][T15830] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2265.528195][T15830] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2265.536156][T15830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2265.544214][T15830] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2265.552181][T15830] [ 2265.609900][T15872] FAULT_INJECTION: forcing a failure. [ 2265.609900][T15872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2265.623315][T15872] CPU: 1 PID: 15872 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2265.636172][T15872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2265.646225][T15872] Call Trace: [ 2265.649489][T15872] [ 2265.652404][T15872] dump_stack_lvl+0xd6/0x122 [ 2265.657005][T15872] dump_stack+0x11/0x12 [ 2265.661230][T15872] should_fail+0x242/0x250 [ 2265.665765][T15872] should_fail_usercopy+0x16/0x20 [ 2265.670864][T15872] _copy_to_user+0x1a/0x90 [ 2265.675273][T15872] rng_dev_read+0x2bd/0x630 [ 2265.679824][T15872] ? devm_hwrng_match+0x50/0x50 [ 2265.684684][T15872] vfs_read+0x198/0x560 [ 2265.688822][T15872] ? __fget_files+0x1a7/0x1e0 [ 2265.693569][T15872] ksys_read+0xe8/0x1a0 [ 2265.697736][T15872] __x64_sys_read+0x3e/0x50 [ 2265.702462][T15872] do_syscall_64+0x2b/0x70 [ 2265.706874][T15872] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2265.712781][T15872] RIP: 0033:0x7f8359bbc279 [ 2265.717176][T15872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2265.736789][T15872] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2265.745208][T15872] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 07:38:30 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f00000000c0)=""/102389, 0x18ff5) 07:38:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{0x0}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:38:30 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) r2 = socket(0x2, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) close(r3) sendfile(r3, r0, &(0x7f0000000000)=0x8, 0x7ff) [ 2265.753163][T15872] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2265.761257][T15872] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2265.769235][T15872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2265.777215][T15872] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2265.785209][T15872] [ 2265.827642][T15875] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:38:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async) pwritev(r0, &(0x7f0000004440)=[{&(0x7f0000000000)="3dcf49396a921ce69f45f15286731650", 0x6c}, {&(0x7f00000001c0)="81", 0x30}, {&(0x7f0000000080)="2bc56ccf0112d925750e7565271144c3b13198eb2c7fa2cf9f947262323d9b1ddfeb4f7e6a7189cf599a7fffd71759a7212816c7a6c35453287a9f729914", 0x1}], 0x3, 0xfffffffc, 0x3) (async) r2 = socket(0x2, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) (async) recvmsg$kcm(r2, &(0x7f0000001280)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000000100)=""/29, 0x1d}, 0x0) 07:38:36 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 29) 07:38:36 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) r2 = socket(0x2, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) close(r3) sendfile(r3, r0, &(0x7f0000000000)=0x8, 0x7ff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (async) read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) (async) socket(0x2, 0x80802, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) (async) close(r3) (async) sendfile(r3, r0, &(0x7f0000000000)=0x8, 0x7ff) (async) 07:38:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{0x0}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:38:36 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc020}, 0x8000) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) 07:38:36 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bind$isdn_base(r0, &(0x7f0000000000)={0x22, 0x5, 0x1, 0x9, 0xd4}, 0x6) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x82, 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r1, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xb5d, 0x5, 0xdb, 0x13d6, 0x35, 0x885, 0x7f}, 0x9c) r2 = syz_open_dev$vcsu(&(0x7f0000000240), 0x80, 0x111000) sendto$isdn(r2, &(0x7f0000000280)={0x8, 0x1, "de89a6a54ac5826dd648f8505bf6aa0827a6594d14295751126fd6cc11e07e246effc4d3d9ec805b70e4766a9ac620e48463714a4de3bcf01fda01e3fd7c821a8fed7626c1523f5bee5acc17440689c42c594e20d70152c728"}, 0x61, 0x8080, &(0x7f0000000300)={0x22, 0x7, 0x1, 0x6, 0x2}, 0x6) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000000c0)=0x7, 0x4) 07:38:36 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) r2 = socket(0x2, 0x80802, 0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) close(r3) sendfile(r3, r0, &(0x7f0000000000)=0x8, 0x7ff) [ 2272.567850][T15888] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2272.579024][T15889] FAULT_INJECTION: forcing a failure. [ 2272.579024][T15889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2272.592491][T15889] CPU: 1 PID: 15889 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2272.604919][T15889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 07:38:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{0x0}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:38:36 executing program 0: setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000190c0)=0xffffffffffffffff, 0xfffffffffffffe78) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x2000002, 0x0, 0x1, 0x1, 0xfffc}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r2 = pidfd_getfd(r0, r1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000), 0x4) read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) 07:38:36 executing program 0: setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000190c0)=0xffffffffffffffff, 0xfffffffffffffe78) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x2000002, 0x0, 0x1, 0x1, 0xfffc}, 0xc) (async, rerun: 32) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r2 = pidfd_getfd(r0, r1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000), 0x4) (async) read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) 07:38:36 executing program 0: setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000190c0)=0xffffffffffffffff, 0xfffffffffffffe78) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x2000002, 0x0, 0x1, 0x1, 0xfffc}, 0xc) (async) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r2 = pidfd_getfd(r0, r1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000), 0x4) (async) read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) 07:38:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2272.615084][T15889] Call Trace: [ 2272.618373][T15889] [ 2272.621351][T15889] dump_stack_lvl+0xd6/0x122 [ 2272.626043][T15889] dump_stack+0x11/0x12 [ 2272.630299][T15889] should_fail+0x242/0x250 [ 2272.634727][T15889] should_fail_usercopy+0x16/0x20 [ 2272.636747][T15916] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2272.639750][T15889] _copy_to_user+0x1a/0x90 [ 2272.639775][T15889] rng_dev_read+0x2bd/0x630 [ 2272.656803][T15889] ? devm_hwrng_match+0x50/0x50 [ 2272.661698][T15889] vfs_read+0x198/0x560 [ 2272.665998][T15889] ? __fget_files+0x1a7/0x1e0 [ 2272.670699][T15889] ksys_read+0xe8/0x1a0 [ 2272.674886][T15889] __x64_sys_read+0x3e/0x50 [ 2272.674947][T15923] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2272.679425][T15889] do_syscall_64+0x2b/0x70 [ 2272.691998][T15889] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2272.697906][T15889] RIP: 0033:0x7f8359bbc279 [ 2272.702346][T15889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2272.722043][T15889] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2272.730457][T15889] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2272.738507][T15889] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2272.746481][T15889] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2272.754524][T15889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2272.762538][T15889] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2272.770492][T15889] 07:38:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000004440)=[{&(0x7f0000000000)="3dcf49396a921ce69f45f15286731650", 0x6c}, {&(0x7f00000001c0)="81", 0x30}, {&(0x7f0000000080)="2bc56ccf0112d925750e7565271144c3b13198eb2c7fa2cf9f947262323d9b1ddfeb4f7e6a7189cf599a7fffd71759a7212816c7a6c35453287a9f729914", 0x1}], 0x3, 0xfffffffc, 0x3) r2 = socket(0x2, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) recvmsg$kcm(r2, &(0x7f0000001280)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000000100)=""/29, 0x1d}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async) pwritev(r0, &(0x7f0000004440)=[{&(0x7f0000000000)="3dcf49396a921ce69f45f15286731650", 0x6c}, {&(0x7f00000001c0)="81", 0x30}, {&(0x7f0000000080)="2bc56ccf0112d925750e7565271144c3b13198eb2c7fa2cf9f947262323d9b1ddfeb4f7e6a7189cf599a7fffd71759a7212816c7a6c35453287a9f729914", 0x1}], 0x3, 0xfffffffc, 0x3) (async) socket(0x2, 0x80802, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) (async) recvmsg$kcm(r2, &(0x7f0000001280)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000000100)=""/29, 0x1d}, 0x0) (async) 07:38:46 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x40, &(0x7f0000000000)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e23, @private=0xa010102}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f00000190c0)=0x10) 07:38:46 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:38:46 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 30) 07:38:46 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bind$isdn_base(r0, &(0x7f0000000000)={0x22, 0x5, 0x1, 0x9, 0xd4}, 0x6) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x82, 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r1, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xb5d, 0x5, 0xdb, 0x13d6, 0x35, 0x885, 0x7f}, 0x9c) r2 = syz_open_dev$vcsu(&(0x7f0000000240), 0x80, 0x111000) sendto$isdn(r2, &(0x7f0000000280)={0x8, 0x1, "de89a6a54ac5826dd648f8505bf6aa0827a6594d14295751126fd6cc11e07e246effc4d3d9ec805b70e4766a9ac620e48463714a4de3bcf01fda01e3fd7c821a8fed7626c1523f5bee5acc17440689c42c594e20d70152c728"}, 0x61, 0x8080, &(0x7f0000000300)={0x22, 0x7, 0x1, 0x6, 0x2}, 0x6) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000000c0)=0x7, 0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) bind$isdn_base(r0, &(0x7f0000000000)={0x22, 0x5, 0x1, 0x9, 0xd4}, 0x6) (async) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x82, 0x4) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000140)=0x8) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r1, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xb5d, 0x5, 0xdb, 0x13d6, 0x35, 0x885, 0x7f}, 0x9c) (async) syz_open_dev$vcsu(&(0x7f0000000240), 0x80, 0x111000) (async) sendto$isdn(r2, &(0x7f0000000280)={0x8, 0x1, "de89a6a54ac5826dd648f8505bf6aa0827a6594d14295751126fd6cc11e07e246effc4d3d9ec805b70e4766a9ac620e48463714a4de3bcf01fda01e3fd7c821a8fed7626c1523f5bee5acc17440689c42c594e20d70152c728"}, 0x61, 0x8080, &(0x7f0000000300)={0x22, 0x7, 0x1, 0x6, 0x2}, 0x6) (async) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) (async) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000000c0)=0x7, 0x4) (async) 07:38:46 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc020}, 0x8000) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) 07:38:46 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x40, &(0x7f0000000000)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e23, @private=0xa010102}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f00000190c0)=0x10) [ 2281.875559][T15935] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2281.903893][T15934] FAULT_INJECTION: forcing a failure. [ 2281.903893][T15934] name fail_usercopy, interval 1, probability 0, space 0, times 0 07:38:46 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) (async) r1 = socket(0x2, 0x80802, 0x0) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x40, &(0x7f0000000000)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e23, @private=0xa010102}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f00000190c0)=0x10) 07:38:46 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:38:46 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:38:46 executing program 0: close(0xffffffffffffffff) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f000001bcc0), r0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f000001bd80)={&(0x7f000001bc80), 0xc, &(0x7f000001bd40)={&(0x7f000001bd00)={0x28, r2, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x4d}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000c0) clock_gettime(0x0, &(0x7f000001bc00)={0x0, 0x0}) recvmmsg(r1, &(0x7f000001bb80)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000019600)=[{&(0x7f00000190c0)=""/155, 0x9b}, {&(0x7f0000019180)=""/231, 0xe7}, {&(0x7f0000019280)=""/176, 0xb0}, {&(0x7f0000019340)=""/246, 0xf6}, {&(0x7f0000019440)=""/226, 0xe2}, {&(0x7f0000019540)=""/154, 0x9a}], 0x6, &(0x7f0000019680)=""/4096, 0x1000}, 0x4}, {{&(0x7f000001a680)=@un=@abs, 0x80, &(0x7f000001bb00)=[{&(0x7f000001a700)=""/222, 0xde}, {&(0x7f000001a800)=""/4096, 0x1000}, {&(0x7f000001b800)=""/199, 0xc7}, {0xfffffffffffffffe}, {&(0x7f000001b900)=""/238, 0xee}, {&(0x7f000001ba00)=""/171, 0xab}, {&(0x7f000001bac0)=""/55, 0x37}], 0x7}, 0x5a}], 0x2, 0xc0012140, &(0x7f000001bc40)={r3, r4+10000000}) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r5, &(0x7f00000000c0)=""/102400, 0x19000) [ 2281.917268][T15934] CPU: 1 PID: 15934 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2281.929762][T15934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2281.930362][T15946] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2281.939839][T15934] Call Trace: [ 2281.939849][T15934] [ 2281.939856][T15934] dump_stack_lvl+0xd6/0x122 [ 2281.958844][T15934] dump_stack+0x11/0x12 [ 2281.963035][T15934] should_fail+0x242/0x250 [ 2281.967472][T15934] should_fail_usercopy+0x16/0x20 07:38:46 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2281.972507][T15934] _copy_to_user+0x1a/0x90 [ 2281.976832][T15950] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2281.976975][T15934] rng_dev_read+0x2bd/0x630 [ 2281.977001][T15934] ? devm_hwrng_match+0x50/0x50 [ 2281.977042][T15934] vfs_read+0x198/0x560 [ 2281.977061][T15934] ? __fget_files+0x1a7/0x1e0 [ 2282.002956][T15953] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2282.003213][T15934] ksys_read+0xe8/0x1a0 [ 2282.015446][T15934] __x64_sys_read+0x3e/0x50 [ 2282.019977][T15934] do_syscall_64+0x2b/0x70 [ 2282.024419][T15934] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2282.030391][T15934] RIP: 0033:0x7f8359bbc279 [ 2282.034980][T15934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2282.054591][T15934] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2282.063003][T15934] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2282.070994][T15934] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2282.078985][T15934] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2282.086968][T15934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2282.094929][T15934] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2282.102916][T15934] 07:38:53 executing program 0: close(0xffffffffffffffff) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f000001bcc0), r0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f000001bd80)={&(0x7f000001bc80), 0xc, &(0x7f000001bd40)={&(0x7f000001bd00)={0x28, r2, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x4d}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000c0) clock_gettime(0x0, &(0x7f000001bc00)={0x0, 0x0}) recvmmsg(r1, &(0x7f000001bb80)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000019600)=[{&(0x7f00000190c0)=""/155, 0x9b}, {&(0x7f0000019180)=""/231, 0xe7}, {&(0x7f0000019280)=""/176, 0xb0}, {&(0x7f0000019340)=""/246, 0xf6}, {&(0x7f0000019440)=""/226, 0xe2}, {&(0x7f0000019540)=""/154, 0x9a}], 0x6, &(0x7f0000019680)=""/4096, 0x1000}, 0x4}, {{&(0x7f000001a680)=@un=@abs, 0x80, &(0x7f000001bb00)=[{&(0x7f000001a700)=""/222, 0xde}, {&(0x7f000001a800)=""/4096, 0x1000}, {&(0x7f000001b800)=""/199, 0xc7}, {0xfffffffffffffffe}, {&(0x7f000001b900)=""/238, 0xee}, {&(0x7f000001ba00)=""/171, 0xab}, {&(0x7f000001bac0)=""/55, 0x37}], 0x7}, 0x5a}], 0x2, 0xc0012140, &(0x7f000001bc40)={r3, r4+10000000}) (async) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r5, &(0x7f00000000c0)=""/102400, 0x19000) 07:38:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:38:53 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bind$isdn_base(r0, &(0x7f0000000000)={0x22, 0x5, 0x1, 0x9, 0xd4}, 0x6) (async) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x82, 0x4) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r1, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xb5d, 0x5, 0xdb, 0x13d6, 0x35, 0x885, 0x7f}, 0x9c) (async) r2 = syz_open_dev$vcsu(&(0x7f0000000240), 0x80, 0x111000) sendto$isdn(r2, &(0x7f0000000280)={0x8, 0x1, "de89a6a54ac5826dd648f8505bf6aa0827a6594d14295751126fd6cc11e07e246effc4d3d9ec805b70e4766a9ac620e48463714a4de3bcf01fda01e3fd7c821a8fed7626c1523f5bee5acc17440689c42c594e20d70152c728"}, 0x61, 0x8080, &(0x7f0000000300)={0x22, 0x7, 0x1, 0x6, 0x2}, 0x6) (async) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) (async) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000000c0)=0x7, 0x4) 07:38:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$sock_int(r1, 0x1, 0x27, 0x0, 0x1) r2 = socket$rxrpc(0x21, 0x2, 0xa) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000240)="3d455ba08a29410c00de784389261a0495ab15ac0d374aadd21f93bbbf5d0a03d8cf4ad658d10643dc11c2cf8fe0bc4c9489a73e259dc2938ec07cc1f49a11214241b0efde", 0x45}, {&(0x7f00000001c0)="f9abe62c6006938f26022268566430ef9eec6cbd979eaf5b9f3de934c50fa163002a151a0d93fd26f0ca4669fb1345c265a50975c92b189225d4ce61f75f28d4343e5c5e5c", 0x45}, {&(0x7f0000000000)="96", 0x1}], 0x3, 0x6, 0x2) 07:38:53 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 31) 07:38:53 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$isdn(0x22, 0x3, 0x2) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000), 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'}) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10450, 0x0, 0x0, 0x0, 0x6fa, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r4, &(0x7f0000019180)=""/102395, 0x18ffb) 07:38:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000", 0x2b}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:38:53 executing program 0: close(0xffffffffffffffff) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f000001bcc0), r0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f000001bd80)={&(0x7f000001bc80), 0xc, &(0x7f000001bd40)={&(0x7f000001bd00)={0x28, r2, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x4d}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000c0) clock_gettime(0x0, &(0x7f000001bc00)={0x0, 0x0}) recvmmsg(r1, &(0x7f000001bb80)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000019600)=[{&(0x7f00000190c0)=""/155, 0x9b}, {&(0x7f0000019180)=""/231, 0xe7}, {&(0x7f0000019280)=""/176, 0xb0}, {&(0x7f0000019340)=""/246, 0xf6}, {&(0x7f0000019440)=""/226, 0xe2}, {&(0x7f0000019540)=""/154, 0x9a}], 0x6, &(0x7f0000019680)=""/4096, 0x1000}, 0x4}, {{&(0x7f000001a680)=@un=@abs, 0x80, &(0x7f000001bb00)=[{&(0x7f000001a700)=""/222, 0xde}, {&(0x7f000001a800)=""/4096, 0x1000}, {&(0x7f000001b800)=""/199, 0xc7}, {0xfffffffffffffffe}, {&(0x7f000001b900)=""/238, 0xee}, {&(0x7f000001ba00)=""/171, 0xab}, {&(0x7f000001bac0)=""/55, 0x37}], 0x7}, 0x5a}], 0x2, 0xc0012140, &(0x7f000001bc40)={r3, r4+10000000}) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r5, &(0x7f00000000c0)=""/102400, 0x19000) close(0xffffffffffffffff) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) socket$phonet(0x23, 0x2, 0x1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f000001bcc0), r0) (async) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f000001bd80)={&(0x7f000001bc80), 0xc, &(0x7f000001bd40)={&(0x7f000001bd00)={0x28, r2, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x4d}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000c0) (async) clock_gettime(0x0, &(0x7f000001bc00)) (async) recvmmsg(r1, &(0x7f000001bb80)=[{{&(0x7f0000000000)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000019600)=[{&(0x7f00000190c0)=""/155, 0x9b}, {&(0x7f0000019180)=""/231, 0xe7}, {&(0x7f0000019280)=""/176, 0xb0}, {&(0x7f0000019340)=""/246, 0xf6}, {&(0x7f0000019440)=""/226, 0xe2}, {&(0x7f0000019540)=""/154, 0x9a}], 0x6, &(0x7f0000019680)=""/4096, 0x1000}, 0x4}, {{&(0x7f000001a680)=@un=@abs, 0x80, &(0x7f000001bb00)=[{&(0x7f000001a700)=""/222, 0xde}, {&(0x7f000001a800)=""/4096, 0x1000}, {&(0x7f000001b800)=""/199, 0xc7}, {0xfffffffffffffffe}, {&(0x7f000001b900)=""/238, 0xee}, {&(0x7f000001ba00)=""/171, 0xab}, {&(0x7f000001bac0)=""/55, 0x37}], 0x7}, 0x5a}], 0x2, 0xc0012140, &(0x7f000001bc40)={r3, r4+10000000}) (async) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (async) read$char_usb(r5, &(0x7f00000000c0)=""/102400, 0x19000) (async) [ 2289.031001][T15969] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2289.047632][T15972] FAULT_INJECTION: forcing a failure. [ 2289.047632][T15972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2289.060949][T15972] CPU: 1 PID: 15972 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 07:38:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000", 0x2b}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:38:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000", 0x2b}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2289.073457][T15972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2289.078258][T15982] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2289.083560][T15972] Call Trace: [ 2289.083570][T15972] [ 2289.083613][T15972] dump_stack_lvl+0xd6/0x122 [ 2289.102521][T15972] dump_stack+0x11/0x12 [ 2289.106741][T15972] should_fail+0x242/0x250 [ 2289.111168][T15972] should_fail_usercopy+0x16/0x20 [ 2289.115986][T15985] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2289.116212][T15972] _copy_to_user+0x1a/0x90 07:38:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000000000060400", 0x32}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2289.128766][T15972] rng_dev_read+0x2bd/0x630 [ 2289.133287][T15972] ? devm_hwrng_match+0x50/0x50 [ 2289.138188][T15972] vfs_read+0x198/0x560 [ 2289.142399][T15972] ? __fget_files+0x1a7/0x1e0 [ 2289.143801][T15996] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2289.147074][T15972] ksys_read+0xe8/0x1a0 [ 2289.147099][T15972] __x64_sys_read+0x3e/0x50 [ 2289.163836][T15972] do_syscall_64+0x2b/0x70 [ 2289.168269][T15972] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2289.174326][T15972] RIP: 0033:0x7f8359bbc279 07:38:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000000000060400", 0x32}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2289.175067][T15998] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2289.178733][T15972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2289.178761][T15972] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2289.178780][T15972] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2289.178831][T15972] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 07:38:53 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000019240), 0x200002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000019100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000190c0)={&(0x7f0000000040)={0x28, 0x3f7, 0x8, 0x70bd29, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000019140)={@null, 0x8, 'ip6_vti0\x00'}) read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) 07:38:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000000000060400", 0x32}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:38:53 executing program 3: ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) [ 2289.178843][T15972] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2289.208112][T16000] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2289.215229][T15972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2289.215245][T15972] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2289.215262][T15972] [ 2289.294642][T16007] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:39:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) r1 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$sock_int(r1, 0x1, 0x27, 0x0, 0x1) (async) r2 = socket$rxrpc(0x21, 0x2, 0xa) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000240)="3d455ba08a29410c00de784389261a0495ab15ac0d374aadd21f93bbbf5d0a03d8cf4ad658d10643dc11c2cf8fe0bc4c9489a73e259dc2938ec07cc1f49a11214241b0efde", 0x45}, {&(0x7f00000001c0)="f9abe62c6006938f26022268566430ef9eec6cbd979eaf5b9f3de934c50fa163002a151a0d93fd26f0ca4669fb1345c265a50975c92b189225d4ce61f75f28d4343e5c5e5c", 0x45}, {&(0x7f0000000000)="96", 0x1}], 0x3, 0x6, 0x2) 07:39:02 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 32) 07:39:02 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000019240), 0x200002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (async) r1 = socket(0x2, 0x80802, 0x0) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000019100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000190c0)={&(0x7f0000000040)={0x28, 0x3f7, 0x8, 0x70bd29, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000019140)={@null, 0x8, 'ip6_vti0\x00'}) (async) read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) 07:39:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000", 0x36}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:39:02 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$isdn(0x22, 0x3, 0x2) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000), 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'}) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10450, 0x0, 0x0, 0x0, 0x6fa, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r4, &(0x7f0000019180)=""/102395, 0x18ffb) socket$unix(0x1, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$isdn(0x22, 0x3, 0x2) (async) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000), 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'}) (async) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10450, 0x0, 0x0, 0x0, 0x6fa, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$char_usb(r4, &(0x7f0000019180)=""/102395, 0x18ffb) (async) 07:39:02 executing program 3: ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000)) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) 07:39:02 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000019240), 0x200002, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (async, rerun: 64) r1 = socket(0x2, 0x80802, 0x0) (rerun: 64) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000019100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000190c0)={&(0x7f0000000040)={0x28, 0x3f7, 0x8, 0x70bd29, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000019140)={@null, 0x8, 'ip6_vti0\x00'}) (async) read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) 07:39:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000", 0x36}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2298.237946][T16014] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2298.266610][T16018] FAULT_INJECTION: forcing a failure. [ 2298.266610][T16018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2298.280013][T16018] CPU: 0 PID: 16018 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2298.283562][T16031] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2298.292442][T16018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2298.292461][T16018] Call Trace: [ 2298.292467][T16018] [ 2298.292473][T16018] dump_stack_lvl+0xd6/0x122 [ 2298.292501][T16018] dump_stack+0x11/0x12 [ 2298.320190][T16033] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2298.321354][T16018] should_fail+0x242/0x250 07:39:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000", 0x36}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:39:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f931", 0x38}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:39:02 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x12}, 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_io_uring_complete(0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) 07:39:02 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x12}, 0x800, 0x0, 0x1, 0x1}, 0x20) (async) r0 = syz_io_uring_complete(0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x1) (async) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) [ 2298.338150][T16018] should_fail_usercopy+0x16/0x20 [ 2298.343192][T16018] _copy_to_user+0x1a/0x90 [ 2298.347690][T16018] rng_dev_read+0x2bd/0x630 [ 2298.352292][T16018] ? devm_hwrng_match+0x50/0x50 [ 2298.357154][T16018] vfs_read+0x198/0x560 [ 2298.361364][T16018] ? __fget_files+0x1a7/0x1e0 [ 2298.366078][T16018] ksys_read+0xe8/0x1a0 [ 2298.370284][T16018] __x64_sys_read+0x3e/0x50 [ 2298.374856][T16018] do_syscall_64+0x2b/0x70 [ 2298.379336][T16018] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2298.385284][T16018] RIP: 0033:0x7f8359bbc279 [ 2298.387236][T16035] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2298.389700][T16018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2298.389721][T16018] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2298.425881][T16018] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2298.433836][T16018] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2298.441864][T16018] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2298.449888][T16018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2298.457898][T16018] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2298.465864][T16018] 07:39:09 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x12}, 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_io_uring_complete(0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) 07:39:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$sock_int(r1, 0x1, 0x27, 0x0, 0x1) r2 = socket$rxrpc(0x21, 0x2, 0xa) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000240)="3d455ba08a29410c00de784389261a0495ab15ac0d374aadd21f93bbbf5d0a03d8cf4ad658d10643dc11c2cf8fe0bc4c9489a73e259dc2938ec07cc1f49a11214241b0efde", 0x45}, {&(0x7f00000001c0)="f9abe62c6006938f26022268566430ef9eec6cbd979eaf5b9f3de934c50fa163002a151a0d93fd26f0ca4669fb1345c265a50975c92b189225d4ce61f75f28d4343e5c5e5c", 0x45}, {&(0x7f0000000000)="96", 0x1}], 0x3, 0x6, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$sock_int(r1, 0x1, 0x27, 0x0, 0x1) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000240)="3d455ba08a29410c00de784389261a0495ab15ac0d374aadd21f93bbbf5d0a03d8cf4ad658d10643dc11c2cf8fe0bc4c9489a73e259dc2938ec07cc1f49a11214241b0efde", 0x45}, {&(0x7f00000001c0)="f9abe62c6006938f26022268566430ef9eec6cbd979eaf5b9f3de934c50fa163002a151a0d93fd26f0ca4669fb1345c265a50975c92b189225d4ce61f75f28d4343e5c5e5c", 0x45}, {&(0x7f0000000000)="96", 0x1}], 0x3, 0x6, 0x2) (async) 07:39:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f931", 0x38}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:39:09 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$isdn(0x22, 0x3, 0x2) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000), 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'}) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10450, 0x0, 0x0, 0x0, 0x6fa, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r4, &(0x7f0000019180)=""/102395, 0x18ffb) socket$unix(0x1, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$isdn(0x22, 0x3, 0x2) (async) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000), 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'}) (async) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10450, 0x0, 0x0, 0x0, 0x6fa, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$char_usb(r4, &(0x7f0000019180)=""/102395, 0x18ffb) (async) 07:39:09 executing program 3: ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000000)) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) (async) 07:39:09 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 33) 07:39:09 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r1 = dup(0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000080)=0x2, 0x4) fcntl$lock(r0, 0x26, &(0x7f0000019280)={0x0, 0x1, 0x9}) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f00000000c0)=0x4, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmmsg$inet(r2, &(0x7f000001ae40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}, {{&(0x7f000001a700)={0x2, 0x4e22, @remote}, 0x10, &(0x7f000001ab80)=[{&(0x7f000001a740)="a0503a7079fb3bd71a8bb718179e979858b9235e6b804fb068064cacea1e1b54ba", 0x21}, {&(0x7f000001a780)="51ea53c9bf3c20df9ebb7b2baea6d191c412b1f248c5909e4c1f001baf5c5467dbe1dca32237c08ddbfd0cca4c914c6d8b881d16bfd5551cc1cd351b5c3b1348cd7c1e2c442aee4d212f65bd23f191e6040d8ba52cbb42537ec08a1ed1db0a7160131b5f90584c83b49cc3e14e555d333155a7752804e28c641f35fdcbd80eda68826c6f5c28952e177c105006915a3cad68ad19313db041b75701", 0x9b}, {&(0x7f000001aa40)="7c30d2ec06ad1cc8c3c1789f475ccd97fc56d576049ee8b948aa7fb640f74c2b689db7c53e82a33795ced09b950dcd48dc81e45c8ae8b687a58834990ccead589e3673e123251ca9da24ec6329358868171d403effccb4721da946bdf1af5092d42aa2dca2d98f5781e0abefb69f7384b513ae55a1962010d922305d5c414389be939be425a65c0a2d19168b95410251ce9cad579fd8e26e5eb8f59499ef3127169f76a96e19d15a8d50276398bf2411011179a49acc4d41551725afc35c41d2804fbd44a90d234b459fa4f0cd5d80b32166f07110b1aac89894d426f1a6a2161f79e86f1736ede8ad285a08504c7f74612976f0ba7e72fec2", 0xf9}, {&(0x7f000001ab40)="dd594c3fa89b64a661d1025430a593fd10066f8316225f7d785df3b5fc204732e9fa845c5a0f53d22a481e39c392a3bf833f", 0x32}], 0x4, &(0x7f000001abc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x15}}, @ip_retopts={{0xcc, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x22, [@dev={0xac, 0x14, 0x14, 0x2b}, @local]}, @rr={0x7, 0x1b, 0x83, [@private=0xa010101, @multicast1, @rand_addr=0x64010100, @private=0xa010102, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0xf, 0xf0, [@multicast2, @remote, @multicast1]}, @timestamp_addr={0x44, 0x24, 0xd9, 0x1, 0x8, [{@broadcast, 0xffffffff}, {@local, 0x7}, {@rand_addr=0x64010101, 0x5d37}, {@remote, 0xfffffff8}]}, @lsrr={0x83, 0x17, 0x12, [@local, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1, @loopback, @remote]}, @end, @rr={0x7, 0x23, 0x15, [@remote, @rand_addr=0x64010100, @empty, @empty, @dev={0xac, 0x14, 0x14, 0xa}, @broadcast, @remote, @multicast2]}, @timestamp_prespec={0x44, 0x14, 0xe6, 0x3, 0x5, [{@multicast2, 0x100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd2}]}, @ssrr={0x89, 0x13, 0x40, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x26}, @empty, @dev={0xac, 0x14, 0x14, 0x2c}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x4e, [@broadcast, @private=0xa010101, @remote, @remote, @rand_addr=0x64010101, @private=0xa010100]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9ae}}, @ip_retopts={{0x80, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0x44, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @local, @remote]}, @cipso={0x86, 0x40, 0x0, [{0x5, 0x10, "0a464516359da95a038598b6e22c"}, {0x2, 0xf, "847e7f285dc19fe82fa1ffb367"}, {0x2, 0x12, "a89d648e6ae29050502fe11efbc2a7ff"}, {0x5, 0x9, "001c54e60ece89"}]}, @noop, @timestamp={0x44, 0xc, 0x14, 0x0, 0xc, [0x4, 0x200]}, @timestamp_addr={0x44, 0xc, 0xec, 0x1, 0x2, [{@broadcast, 0x95e}]}, @ra={0x94, 0x4, 0x1}]}}}], 0x228}}], 0x2, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r4}, 0x10, &(0x7f0000000200)={&(0x7f000001aec0)=ANY=[@ANYBLOB="04000000000000000007005bad56def0cf860000000000b7694ade20ca5508237e8a702b23cefda2d379b75e1d1d131be1a39eacaf434109629058cd811e57322522072eae75736eb16cef968ff2", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="03000000010000000000008000000000a7a80e1ea3468f8938edeae721a1edd6d2cdcb4c5c8e36f4af45778ef6d463a5bcfa0bb43ed70a8ed13ec0cb831f5285f6f1d418d5ef"], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r5 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000019180)={{{@in6=@empty, @in6=@mcast2, 0x4e22, 0x3, 0x4e22, 0x1f, 0xa, 0x40, 0x0, 0x4, r4, r5}, {0x8, 0x80000001, 0x81, 0x7fffffff, 0x4, 0xfffffffffffffff7, 0x6000000000000, 0x5}, {0x3ff, 0x6, 0x2, 0x1}, 0x6, 0x6e6bb2, 0x2, 0x1, 0x3, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d6, 0xff}, 0xa, @in=@multicast1, 0x3506, 0x2, 0x3, 0xd4, 0x5, 0xffffffff, 0xfffffffe}}, 0xe8) read$char_usb(0xffffffffffffffff, &(0x7f00000000c0)=""/102385, 0x18ff1) sendmsg$kcm(0xffffffffffffffff, &(0x7f000001a6c0)={&(0x7f00000192c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x3, 0x0, 0x1, {0xa, 0x4e21, 0x9, @private2, 0x89}}}, 0x80, &(0x7f0000019380)=[{&(0x7f0000019340)="ba1f15", 0x3}], 0x1, &(0x7f00000193c0)=[{0x1010, 0x103, 0x80000001, "803bb089f8f8d9540a2dec165519db7ac0d0ed6b8a4c5570e59e14bd81c3eaa8d129e6b03d608ee175dfe0695483a64028478f5142ae957382ce6ba3367d304ed9621de7334a79baf8698b41c6243815a232c6f518333a2ff8f085f46706ae5b082df394b84449c9dccbd68e9c9ed3e6ad6dc69f4ff1bc8ec865b2d4d2731d11b42b7f0e8a3ef4ca16b031784548c0d10fa3c840bbeb852f788276886d0efc3364a7814b3c1399930f9620a4b00dade161afd442d84275673a420b7ae58c994f9875e10e1b1e75da9f7934b1dd2ce9170bc3eac456aec0c2a12dd3617bbfe526b037c37a5f096e795965084df279c0290d5a492d20301961582ad2dd3d86fffce34ff435a3ea49d331553ef1800421cfff8d65f754498989388b4a05e42c0464d21f7d25b0591a6cba62ad24a6f8858de90dac92409c151b33b0b46f81922ab7311eaed18d32391e0f13a0fdce1dd883c2b5e9eed17a31ddf109d52a30b7b9d5900db7387dc3170528af4dfba54af4a170a946886668fefcac627cc26f679f1c7bc1b83745613a7d15348908ee15d9159e88801059ff5f4acb126c3f6d5df71a418e05030fb5590580d4fd6224a6bb684d0d0fd247df7ffd8e034f673304db1ceaf13dac6c45dad37bfee403c0f4f590f22dfb8013998cc819d06b80ce9f833b270401a43e5ef9d0dff908e28f4e49913bad01ba347fe951c6b491614845cbe686aedcd4587ec5f55dc96b67a981975680a39639db2963886ff08ce8ed83dfb5b8762fbc5c37a18d643470e2e128ebbacce8070380f31e1378e4ab19d6f9b7f0eebdf112d3e381e71201b20d723cb13f57d2b197dbb17197647bfba0148c7759be723fe2e6aacf3c0bdd202a430b3179a57d794284d234fda43d6ccebf8ff3c6ca575a84e9f54a73db8ccbd14516a7c7630a13fbe5dad5bd4c81d7bf861f63b278bc70b45ad2b958b457533363a572994c08841d3749e451f505c86569d201c49641a2c81791a95bc96491eb0607eb8889b0918d9d29d4a3382ed3b777dd05aabc713c85bf0764a3784b49b0c98e7092dfef44bc8fc38e7252568275f08b82ae39bdf83ecdcd12f8e8e759426ef6272c955bf0b416cde60038694451f442d130cc61b2b25750040201a4a26915d79aea79a23b866b1df942ba3895eca2c64e9cf29063660dee6d787980329d939723c54b38ea1242ec45d911e5def0947239948f4b0755822484a3eca26d7ca5355b76e62369942b6f3407c755e30557486f039922a3299b9e3fee5f516213c7441cdcd376ea9a20fe107d2490fb4d6370ced8e611dba02d1ef9e5d0ec7ea5dd5ea2266862aa412e8cb0aa618a8183ea1d7a03a6044001e14e4f0d0042006db05e73726dddc90830168d55be46270153a523664a42e7d6efd8a7e9d7c137c2cc51f2a4323d8195841e5230b5e58ab60ec0a8b221e4f35471e8c90e4650b9a61cabf4cfbc498f3f1e4ccaa0fc374f8c464a12111ed3075dfaf1a062fe1c6d0445ead3c45ec7e2c54be3181dd36d2470089812c1ef7a4679e465edd93cc31a243beb588a49f34a97e5f740332c0ae27be35f7ea974280c429008e1a3a37d4d87712bc8b9382684e27ee5acf493798a5aff85eb13ed15e0c6cbcdfc983b3837c42d42023ceba026231cbab2b7d30b6b390c7f350a9ac589bd7ea2e5227ed69d6d8a15b025aa97a9b6529fb65d60cb8d933154b76099a84590ebfdc8bb8882b5c58f1b961f801f46c5d4154cf34a6d11c0fca3243ecac761b2fe7a8a69e28a176d17fa6d86705d3dcdb1c495f46aaf80bde130046b60a3f1dc683e7707870918ee5b815af5baa5022a9d5639be130fb622791d708a105e11a7d0c7a894058e23559332d39cc2af61a587cf94d990d2d3e4e14b948f359a4da1cdb08791691c1eeeff792af2b13437d63d72d74030be380bafbd9a914742321764f7ef291b854d51710a8b130565dd231076081a0ce7ce41ca435b941bead8dc3383e7ae9835e29f319a7065b5289b4ce3c510b7d0d124d98b7cdef5cc4e0634128a322c3806a9fed02f44804385d7cbaac37cf6085dc631e0c4a94071b2ec2bdbd642a300cd4733c88dcb9e84023c70001f058f116c870c0dfe1e30412349e2641304ac45ac80d8041980f8b4b46282b00ef8aef9ded87adde6d254984bfe6becaaa966e0e9555d1c83576ccd0ae4206818e8d891098d030cd68401fafba7e379ed633a00147c6681ed90dd68da6742bd5e1d67da2d8f76fbb7981ddeaa85507d2fb96c9bc894a035d4efc7ccb730d2c020e13c76f4d32cafa82c4bd7a588a8be06811e91e96454b7a48c56dad78250632f98ec606a12949c841caae70cc2d714b1d8073679ec142b9d07b95bfdb024c04ba0bb1bbda6eb37445c5fdffca180b1d19f4c7aebf65fc5e30628e817e5eb2b53be5e361b818c5e4ed9b9a84fc767d38c661f7455e5385da87de266f6956b1187cad61d8b2747b8b4a0b8b464c9073dfdb841c84830b54f103b0ad06847669c17cbd8b7b0e58c573a231abd3d72e02496317684974c638f8e0b7dec4102500aa3080a326e7c87b2d3e4f015129bd01e30d4715a46ce1c1ea3f5052140c07bf9c6e0aea712d4790aa52b5ba5c98c65bc47c7fff1f29aa770693e097b1b7737151323241b1c8575d13940506abd949810372768468fe32fae099de7f1d9d026fff8c4952d470cde72272e9db5eb7e52180cc39e7a84bfa6c66f20de5948b14aa6a98a69da0a5ece60c02c3d54a99f7ed547dc0ad739aba56562360e9417d2dff38912cf0ab3f7a61c5f744e6a1b2e4ae31a7cd9e4846df397e962de1e8573d8dedca673074296af7cb83d98cd3ed2c8eef836630cff2b59e1281956e050b1accd4eb48913ec22bc312d050859d69c5af0cf4304df60afb6bc9cba679f94091da4a18c39d44bc82c2739ce7d30d86ddd274d4709d779a145147d7268f251839bf023c0e5dde252db1b3dd337296a23258ffe72255b27ead9928a9de00f084b3d74b5f5c0deca6d788d43bdd6547a8763e1bf79040d717aa1f928a60e5b4fddfcb1f910b871d392ef05330b97e298bd49136332c5a9a9ae8dcb030596771c2d3bb035739ecb0afaba5d5f8dfe88df992f79601525316eaa93a25087f9f5847b609fb68353feaa665a4d91ae0eb31cbf91e675a7a3b86f08af4aa9b64f25ec6b92797c07dc44f7180977b3944aebe15d8889b7e3ddedf357c24c847299967e6292148fb35120b2eb639e3d88f95382d1627e6c9a2f75094be89f3856ed1f3fc2c7adae2e792060ed0d05955663b667fcdda90bc0018eb98426d4a51c3473c5447e65f2236494ffc15af9b53526cdbb59c198a865882e0e97a1eb5748a3a071d1c03c5ad729d641b44213b6a45b1e82e870d3a52c7a572a2dfc0699c1a91857cb9107eac9ab738af82c75dd18bb20f61ffc2d866a6bff40f0b192fb382dd8a314b70ff411d9d77e23b832f65eab600382ea827735649065b16b239b68091aff16ae439d843141b7e47bcde3a0f1b6891d8c98c61fc9e3e2da1464eb789fe78343bf89aa0ad4ebc44d7bd779466b3ba33f849e3c1b8160049dde789891ed939d2b04321320bde74bc1b88379c2c64236fd37daf1998b8acc5850c5d54b1c102562c5ec903ba4e36caf68481486c1094e89a6e2298813fe8d5485f7687474e92a3fdab9507ec843256800df123ee973468e33779b552f64c058a283120b16767e68260f4d31787451cac9cff060a27a3ccbc18f7f5fb68a85f770dfce1d44ef289f8d1160df00c520565536d417f1828634f2de4ef3a12514cf0ca9e8460b0da4910f1fed6c484e521b0bef65336298fcc9a3b5821a6c01c257b643d0d76eb3ac41f6a07838132ffede3fafe171bd83a163f86dbda291a2bb59dea373f1fb409485cf85a87f919d76d1df4770835b38a4cd5622bc70b47e9a51187edc10be8869dff0b911dbe68b5bbffb3d059719cd2ccda5644739522c92de64080a72b74bbd969cee5d459836f127a5e274e3ff39d0b7483a9434f314eb1cfa11fe64acae74e10223e906cc0a1696cc388bb25f5547b3c8919d2d6bbc9be8b58551abd468d5d9a2c22bec76e24f23f7e00b0c5e9848e1e792aa7ca781c039690226de7fe23d037970bdf97f177893fd063532d4abeb054998d2616eb94a462bfa52098ab7c70599e402b288a0e66fc9c1df0e13c766662ab784769a56e6f406623809d3d369bd05fe8cabf0aeb5056b6ce82bf5f09c1d149cccf28f3e5dfbe4d9708b8a144e336ae23769151b9be8cfbbbc2f12f26090b256f0147ed18d2864da809d5cff4c5bdd4a33954832a252840fdd8770c20a546268ef766c4c3dc7e396a60fb119e4db1043e8797b0a110dac47a9fc294068492f630d27287a10058c915b13ca827c8f41f244691fb86167f373586a9f50edf87f3f3e6a67d1a8f50e64ca7945fd814ce5dcb25b15b67e536b2e4718ed0a650db3945cb777423aa0e9cc2c271c84fa0dcd77cd4f5f133128827e88e7e7ce6ce4e6a3f8d1f70c6bfd8a657baa1bffebc5bf99179ba593224a253d383c7cd146fa7c343a311648f989f2dccdf585912f8c7677e9fdeaeb20afc3f7c3da840f9f2a4c845d423676a525e5398a2c1b1d90292e747bccb8b094b231b9f0620e10484112b8d6d88e2aeba792b702c73cb6846fb0a0c23862d1ec9817ca0de33558c8ef115f65a0960b8a589655e74c3a1c0301f4daa003a66a2a7c76c4086392527ddc48cde57a1b3763efb11f38a53dbec638cfd8e29ec59f4cef4dfc14b74b6f50d3b1fd63f8e8b90a7ae6cf8316f3082fdeb2911a25f6c390a33314fbe44772ca26b02c160587a795e25c76a1fe63aba102fb11d9f5ed6869e0825daf2b61ec3c424762abc1634b2f2b3a81e234955caf6f07cfa9c5db0da237361617da0063b2b4575dc78257407cd7d077e80ca552aae8bca821b013656cf06afde82c8ecd72171e20f4907eab258ab1e9d542bdc113189b0a7edd59ae09a22c1b6b5ed80623d9c101d5e98602f7bfac84c37b19d515e225146a5e787599b46971c6158ea21dae2735165d8e48c5f3fb50d4e0b69f15ceee9e0b554e4c11f5c47e81dc3dd739179dc0cc304103650f56e6509377e186e7bf8036fa96b61f33ab6e4f4b979d4f798ebfec616f52c7b1cacd9a70b698cb2d1de593ac2b8a0c8e8ac357f3d8fe5c9146a2078671338a733ad923adfe2b4dda6999a6910f98b4412a0572ca3eccf4d0650939026ffe6ef671de717aaedd7b7d358bcbcb7ac4b2239e92eb818483542faf463911968402b19c018f5dd881af97900ab8dc39d594e806178fd5170b605e7d195f99f24e0656bc962504b189da408eec6f53a4b0d3a7093ad1bd1129a6f9bb93db75eac5ac9408a7c5875ec3cce372d89c7a7da84d1dfce5c13f4c5fcf9217604681a772ff8b9037674ca6be2f932510320149aff888ebbe2b58f055c962524ce141ccf472f62f4faa9cfacd00688b198d84e1d6b596c946485ea3c02298a09558c524825eb1ebad358c011b0cff1950f74f325cebdf7bd8b0d0c97f87dd8c83852ab7b6e2a2e471109210dcff516ce7a6adf09caf0038433db6007b0896a84f14c1c97388666163aaaf890504c4a948a7fea1bceebbf28695bde9feb02c7a9984b385843f98f221a9df8ab46107c0c96b30d4262735c698e5d7d0a2a860c4a60f3f83cfb8f05ea715f280b90d5c6f560e4d015c2e89b36cc286f0edcc22a23aaed29fd4db0d28eb6e6619c099adc86559b7838dfde3aa1f82c5ea"}, {0xf8, 0x119, 0x4, "f16792f7488c3a38105ae713626a897864f61a19d54db319a1b1ac6e3aaa72c001e81a036e656dd0293bf0d5979e119aae83a31ea6c26a61021387d895621b8cc16233b9a348ad0bf4d03bbd37c823b1c2c42f1fca333530ad8697f84fe72f4fb8676fdf4d767b97d8d476c8aba720654e4d694af39d113817e7b155ab05e788d6b4978663c716de49aa78e8a633d4b1ae424cd87e928395aa1650686db8888df64c55b52cce120d45b03e9213c95c4a1581dde746a7a9c850dc635f9a620fea45e3021d7d12fa6a381ed83811e2f5d07254be758a7365a8597e4b6f529f6725e671646c6a"}, {0x100, 0x112, 0x200000, "6ef048f40277ef3b853e99e43a7d5a479aa7082ef81695c94ee2873424ba0972f256c5a59ad103a8ed691f00af7d157ff559643a236d4661801644e4447e1312c0fc29f8484614009d6a9f45d7210c466f01199a07db80bcd4f59247ddcc0ec2034bbaa8f38c9b433b49c7008bfe69825eb2ef446831f63690813aa65aa8a9bd3941a0c25cd9a4c9e8bfdbf6cb02491a69b37fb69ebdf8bd67ec754c30e67a75b91f035d6ea46e2cd79a91e00a3db05e59d897e37be4dd723b47e991395dc0cbdd92b8519738fc662035f73b6cdc265edd38b28e4f764179135fd2a54ca0455f0ab425610e2b0191609e"}, {0xd0, 0x88, 0x4, "0ca7fa3a392b4525fce2d06f1499e59b33218bacd7eaea9b49f4f8a74b75b0125f324c1663bb0531ca114dfdeffa6baf3d389964813f402e4a173bc3804fc61cb3e7d360d6761d8cc3356d034b17fc9fe8f60d1a3c8e3f2f53ab97d4ab6dc48f51ffc9a1fd8014bfc89d0c1cbe934153f6fb967a3df18a7739445e060a8f86f3b84d74afa5a5d2406481188258ac6609e619de65713af3fba843c2ac2b9eae71ec97c97a6087d175a44ea567c12c1de1b9b244d153c908010e921a33"}], 0x12d8}, 0x4841) r6 = socket(0x2, 0x80802, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000019140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f000001a840)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x20000001}, 0x2bf57d5640cd1bc8) 07:39:09 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r1 = dup(0xffffffffffffffff) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) fcntl$lock(r0, 0x26, &(0x7f0000019280)={0x0, 0x1, 0x9}) (async) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f00000000c0)=0x4, 0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmmsg$inet(r2, &(0x7f000001ae40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}, {{&(0x7f000001a700)={0x2, 0x4e22, @remote}, 0x10, &(0x7f000001ab80)=[{&(0x7f000001a740)="a0503a7079fb3bd71a8bb718179e979858b9235e6b804fb068064cacea1e1b54ba", 0x21}, {&(0x7f000001a780)="51ea53c9bf3c20df9ebb7b2baea6d191c412b1f248c5909e4c1f001baf5c5467dbe1dca32237c08ddbfd0cca4c914c6d8b881d16bfd5551cc1cd351b5c3b1348cd7c1e2c442aee4d212f65bd23f191e6040d8ba52cbb42537ec08a1ed1db0a7160131b5f90584c83b49cc3e14e555d333155a7752804e28c641f35fdcbd80eda68826c6f5c28952e177c105006915a3cad68ad19313db041b75701", 0x9b}, {&(0x7f000001aa40)="7c30d2ec06ad1cc8c3c1789f475ccd97fc56d576049ee8b948aa7fb640f74c2b689db7c53e82a33795ced09b950dcd48dc81e45c8ae8b687a58834990ccead589e3673e123251ca9da24ec6329358868171d403effccb4721da946bdf1af5092d42aa2dca2d98f5781e0abefb69f7384b513ae55a1962010d922305d5c414389be939be425a65c0a2d19168b95410251ce9cad579fd8e26e5eb8f59499ef3127169f76a96e19d15a8d50276398bf2411011179a49acc4d41551725afc35c41d2804fbd44a90d234b459fa4f0cd5d80b32166f07110b1aac89894d426f1a6a2161f79e86f1736ede8ad285a08504c7f74612976f0ba7e72fec2", 0xf9}, {&(0x7f000001ab40)="dd594c3fa89b64a661d1025430a593fd10066f8316225f7d785df3b5fc204732e9fa845c5a0f53d22a481e39c392a3bf833f", 0x32}], 0x4, &(0x7f000001abc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x15}}, @ip_retopts={{0xcc, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x22, [@dev={0xac, 0x14, 0x14, 0x2b}, @local]}, @rr={0x7, 0x1b, 0x83, [@private=0xa010101, @multicast1, @rand_addr=0x64010100, @private=0xa010102, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0xf, 0xf0, [@multicast2, @remote, @multicast1]}, @timestamp_addr={0x44, 0x24, 0xd9, 0x1, 0x8, [{@broadcast, 0xffffffff}, {@local, 0x7}, {@rand_addr=0x64010101, 0x5d37}, {@remote, 0xfffffff8}]}, @lsrr={0x83, 0x17, 0x12, [@local, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1, @loopback, @remote]}, @end, @rr={0x7, 0x23, 0x15, [@remote, @rand_addr=0x64010100, @empty, @empty, @dev={0xac, 0x14, 0x14, 0xa}, @broadcast, @remote, @multicast2]}, @timestamp_prespec={0x44, 0x14, 0xe6, 0x3, 0x5, [{@multicast2, 0x100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd2}]}, @ssrr={0x89, 0x13, 0x40, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x26}, @empty, @dev={0xac, 0x14, 0x14, 0x2c}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x4e, [@broadcast, @private=0xa010101, @remote, @remote, @rand_addr=0x64010101, @private=0xa010100]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9ae}}, @ip_retopts={{0x80, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0x44, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @local, @remote]}, @cipso={0x86, 0x40, 0x0, [{0x5, 0x10, "0a464516359da95a038598b6e22c"}, {0x2, 0xf, "847e7f285dc19fe82fa1ffb367"}, {0x2, 0x12, "a89d648e6ae29050502fe11efbc2a7ff"}, {0x5, 0x9, "001c54e60ece89"}]}, @noop, @timestamp={0x44, 0xc, 0x14, 0x0, 0xc, [0x4, 0x200]}, @timestamp_addr={0x44, 0xc, 0xec, 0x1, 0x2, [{@broadcast, 0x95e}]}, @ra={0x94, 0x4, 0x1}]}}}], 0x228}}], 0x2, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r4}, 0x10, &(0x7f0000000200)={&(0x7f000001aec0)=ANY=[@ANYBLOB="04000000000000000007005bad56def0cf860000000000b7694ade20ca5508237e8a702b23cefda2d379b75e1d1d131be1a39eacaf434109629058cd811e57322522072eae75736eb16cef968ff2", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="03000000010000000000008000000000a7a80e1ea3468f8938edeae721a1edd6d2cdcb4c5c8e36f4af45778ef6d463a5bcfa0bb43ed70a8ed13ec0cb831f5285f6f1d418d5ef"], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async, rerun: 64) r5 = getuid() (rerun: 64) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000019180)={{{@in6=@empty, @in6=@mcast2, 0x4e22, 0x3, 0x4e22, 0x1f, 0xa, 0x40, 0x0, 0x4, r4, r5}, {0x8, 0x80000001, 0x81, 0x7fffffff, 0x4, 0xfffffffffffffff7, 0x6000000000000, 0x5}, {0x3ff, 0x6, 0x2, 0x1}, 0x6, 0x6e6bb2, 0x2, 0x1, 0x3, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d6, 0xff}, 0xa, @in=@multicast1, 0x3506, 0x2, 0x3, 0xd4, 0x5, 0xffffffff, 0xfffffffe}}, 0xe8) (async) read$char_usb(0xffffffffffffffff, &(0x7f00000000c0)=""/102385, 0x18ff1) sendmsg$kcm(0xffffffffffffffff, &(0x7f000001a6c0)={&(0x7f00000192c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x3, 0x0, 0x1, {0xa, 0x4e21, 0x9, @private2, 0x89}}}, 0x80, &(0x7f0000019380)=[{&(0x7f0000019340)="ba1f15", 0x3}], 0x1, &(0x7f00000193c0)=[{0x1010, 0x103, 0x80000001, "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"}, {0xf8, 0x119, 0x4, "f16792f7488c3a38105ae713626a897864f61a19d54db319a1b1ac6e3aaa72c001e81a036e656dd0293bf0d5979e119aae83a31ea6c26a61021387d895621b8cc16233b9a348ad0bf4d03bbd37c823b1c2c42f1fca333530ad8697f84fe72f4fb8676fdf4d767b97d8d476c8aba720654e4d694af39d113817e7b155ab05e788d6b4978663c716de49aa78e8a633d4b1ae424cd87e928395aa1650686db8888df64c55b52cce120d45b03e9213c95c4a1581dde746a7a9c850dc635f9a620fea45e3021d7d12fa6a381ed83811e2f5d07254be758a7365a8597e4b6f529f6725e671646c6a"}, {0x100, 0x112, 0x200000, "6ef048f40277ef3b853e99e43a7d5a479aa7082ef81695c94ee2873424ba0972f256c5a59ad103a8ed691f00af7d157ff559643a236d4661801644e4447e1312c0fc29f8484614009d6a9f45d7210c466f01199a07db80bcd4f59247ddcc0ec2034bbaa8f38c9b433b49c7008bfe69825eb2ef446831f63690813aa65aa8a9bd3941a0c25cd9a4c9e8bfdbf6cb02491a69b37fb69ebdf8bd67ec754c30e67a75b91f035d6ea46e2cd79a91e00a3db05e59d897e37be4dd723b47e991395dc0cbdd92b8519738fc662035f73b6cdc265edd38b28e4f764179135fd2a54ca0455f0ab425610e2b0191609e"}, {0xd0, 0x88, 0x4, "0ca7fa3a392b4525fce2d06f1499e59b33218bacd7eaea9b49f4f8a74b75b0125f324c1663bb0531ca114dfdeffa6baf3d389964813f402e4a173bc3804fc61cb3e7d360d6761d8cc3356d034b17fc9fe8f60d1a3c8e3f2f53ab97d4ab6dc48f51ffc9a1fd8014bfc89d0c1cbe934153f6fb967a3df18a7739445e060a8f86f3b84d74afa5a5d2406481188258ac6609e619de65713af3fba843c2ac2b9eae71ec97c97a6087d175a44ea567c12c1de1b9b244d153c908010e921a33"}], 0x12d8}, 0x4841) (async) r6 = socket(0x2, 0x80802, 0x0) (async) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)) (async) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000019140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f000001a840)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000827bd7000fbdbdf250b000000080004002400000008000400000000004c00028006000e004e23000008000400ff07000008000900060000000800070000100000080009005b8e0000080008000004000006000f0001800000080003000400000005000d00010000000c00028006f50f0081000000a7befc3f4b27f8679a8281c169239714f98910d8f9b0e398ff651b0a12704383396ec7a27314f5c39283a4bb95eb432d56fee719a9dcf78d62ed7ef0465a1d3ddbb64694da23bcc6d0d416ebe735c772188eda4985da82a94a75b8944ee26a7fb2f7094543c9bc023543f90e61d8ad266b67c8c7e3cfc50390dc5892f12ea55317b8391a064371218adfef7a93ff0597841dc9b96b1204b64356509c0151bea1c517db17c20a1f12f43f9b827e1e895d50720dd262e2465b7f10fd954a383f48517155e3c1c8c91cb53dc28e77c0a846cda4301681a9891a9b87371103a299d50e1a6048fb39174128f9f924e822f3f55146b904f6421ca62eab8c574599345c85ba4ab2278ec213fcfcb3447f500949f840cdfeef48c0e7eaed9abf7297038387402e97a958146947fe262a3ffe331d93b19e85673b0f5a82096033d77e4a494875b4ee205e4714"], 0x7c}, 0x1, 0x0, 0x0, 0x20000001}, 0x2bf57d5640cd1bc8) [ 2305.476475][T16058] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2305.503495][T16060] FAULT_INJECTION: forcing a failure. [ 2305.503495][T16060] name fail_usercopy, interval 1, probability 0, space 0, times 0 07:39:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f931", 0x38}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:39:09 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) read$char_usb(r0, &(0x7f0000000000)=""/93, 0x5d) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) close(r2) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f00000000c0)) 07:39:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2305.517009][T16060] CPU: 1 PID: 16060 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2305.529548][T16060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2305.531813][T16074] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2305.539680][T16060] Call Trace: [ 2305.539690][T16060] [ 2305.539697][T16060] dump_stack_lvl+0xd6/0x122 [ 2305.558610][T16060] dump_stack+0x11/0x12 [ 2305.562919][T16060] should_fail+0x242/0x250 [ 2305.567347][T16060] should_fail_usercopy+0x16/0x20 [ 2305.572402][T16060] _copy_to_user+0x1a/0x90 [ 2305.576832][T16060] rng_dev_read+0x2bd/0x630 [ 2305.581419][T16060] ? devm_hwrng_match+0x50/0x50 [ 2305.586343][T16060] vfs_read+0x198/0x560 [ 2305.590821][T16060] ? __fget_files+0x1a7/0x1e0 [ 2305.592874][T16088] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2305.595500][T16060] ksys_read+0xe8/0x1a0 [ 2305.595536][T16060] __x64_sys_read+0x3e/0x50 [ 2305.604904][T16088] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2305.607719][T16060] do_syscall_64+0x2b/0x70 [ 2305.624999][T16060] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2305.630954][T16060] RIP: 0033:0x7f8359bbc279 [ 2305.635432][T16060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2305.644259][T16091] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2305.655036][T16060] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 07:39:09 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r1 = dup(0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000080)=0x2, 0x4) fcntl$lock(r0, 0x26, &(0x7f0000019280)={0x0, 0x1, 0x9}) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f00000000c0)=0x4, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmmsg$inet(r2, &(0x7f000001ae40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}, {{&(0x7f000001a700)={0x2, 0x4e22, @remote}, 0x10, &(0x7f000001ab80)=[{&(0x7f000001a740)="a0503a7079fb3bd71a8bb718179e979858b9235e6b804fb068064cacea1e1b54ba", 0x21}, {&(0x7f000001a780)="51ea53c9bf3c20df9ebb7b2baea6d191c412b1f248c5909e4c1f001baf5c5467dbe1dca32237c08ddbfd0cca4c914c6d8b881d16bfd5551cc1cd351b5c3b1348cd7c1e2c442aee4d212f65bd23f191e6040d8ba52cbb42537ec08a1ed1db0a7160131b5f90584c83b49cc3e14e555d333155a7752804e28c641f35fdcbd80eda68826c6f5c28952e177c105006915a3cad68ad19313db041b75701", 0x9b}, {&(0x7f000001aa40)="7c30d2ec06ad1cc8c3c1789f475ccd97fc56d576049ee8b948aa7fb640f74c2b689db7c53e82a33795ced09b950dcd48dc81e45c8ae8b687a58834990ccead589e3673e123251ca9da24ec6329358868171d403effccb4721da946bdf1af5092d42aa2dca2d98f5781e0abefb69f7384b513ae55a1962010d922305d5c414389be939be425a65c0a2d19168b95410251ce9cad579fd8e26e5eb8f59499ef3127169f76a96e19d15a8d50276398bf2411011179a49acc4d41551725afc35c41d2804fbd44a90d234b459fa4f0cd5d80b32166f07110b1aac89894d426f1a6a2161f79e86f1736ede8ad285a08504c7f74612976f0ba7e72fec2", 0xf9}, {&(0x7f000001ab40)="dd594c3fa89b64a661d1025430a593fd10066f8316225f7d785df3b5fc204732e9fa845c5a0f53d22a481e39c392a3bf833f", 0x32}], 0x4, &(0x7f000001abc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x15}}, @ip_retopts={{0xcc, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x22, [@dev={0xac, 0x14, 0x14, 0x2b}, @local]}, @rr={0x7, 0x1b, 0x83, [@private=0xa010101, @multicast1, @rand_addr=0x64010100, @private=0xa010102, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0xf, 0xf0, [@multicast2, @remote, @multicast1]}, @timestamp_addr={0x44, 0x24, 0xd9, 0x1, 0x8, [{@broadcast, 0xffffffff}, {@local, 0x7}, {@rand_addr=0x64010101, 0x5d37}, {@remote, 0xfffffff8}]}, @lsrr={0x83, 0x17, 0x12, [@local, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1, @loopback, @remote]}, @end, @rr={0x7, 0x23, 0x15, [@remote, @rand_addr=0x64010100, @empty, @empty, @dev={0xac, 0x14, 0x14, 0xa}, @broadcast, @remote, @multicast2]}, @timestamp_prespec={0x44, 0x14, 0xe6, 0x3, 0x5, [{@multicast2, 0x100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd2}]}, @ssrr={0x89, 0x13, 0x40, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x26}, @empty, @dev={0xac, 0x14, 0x14, 0x2c}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x4e, [@broadcast, @private=0xa010101, @remote, @remote, @rand_addr=0x64010101, @private=0xa010100]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9ae}}, @ip_retopts={{0x80, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0x44, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @local, @remote]}, @cipso={0x86, 0x40, 0x0, [{0x5, 0x10, "0a464516359da95a038598b6e22c"}, {0x2, 0xf, "847e7f285dc19fe82fa1ffb367"}, {0x2, 0x12, "a89d648e6ae29050502fe11efbc2a7ff"}, {0x5, 0x9, "001c54e60ece89"}]}, @noop, @timestamp={0x44, 0xc, 0x14, 0x0, 0xc, [0x4, 0x200]}, @timestamp_addr={0x44, 0xc, 0xec, 0x1, 0x2, [{@broadcast, 0x95e}]}, @ra={0x94, 0x4, 0x1}]}}}], 0x228}}], 0x2, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r4}, 0x10, &(0x7f0000000200)={&(0x7f000001aec0)=ANY=[@ANYBLOB="04000000000000000007005bad56def0cf860000000000b7694ade20ca5508237e8a702b23cefda2d379b75e1d1d131be1a39eacaf434109629058cd811e57322522072eae75736eb16cef968ff2", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="03000000010000000000008000000000a7a80e1ea3468f8938edeae721a1edd6d2cdcb4c5c8e36f4af45778ef6d463a5bcfa0bb43ed70a8ed13ec0cb831f5285f6f1d418d5ef"], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r5 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000019180)={{{@in6=@empty, @in6=@mcast2, 0x4e22, 0x3, 0x4e22, 0x1f, 0xa, 0x40, 0x0, 0x4, r4, r5}, {0x8, 0x80000001, 0x81, 0x7fffffff, 0x4, 0xfffffffffffffff7, 0x6000000000000, 0x5}, {0x3ff, 0x6, 0x2, 0x1}, 0x6, 0x6e6bb2, 0x2, 0x1, 0x3, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d6, 0xff}, 0xa, @in=@multicast1, 0x3506, 0x2, 0x3, 0xd4, 0x5, 0xffffffff, 0xfffffffe}}, 0xe8) read$char_usb(0xffffffffffffffff, &(0x7f00000000c0)=""/102385, 0x18ff1) sendmsg$kcm(0xffffffffffffffff, &(0x7f000001a6c0)={&(0x7f00000192c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x3, 0x0, 0x1, {0xa, 0x4e21, 0x9, @private2, 0x89}}}, 0x80, &(0x7f0000019380)=[{&(0x7f0000019340)="ba1f15", 0x3}], 0x1, &(0x7f00000193c0)=[{0x1010, 0x103, 0x80000001, "803bb089f8f8d9540a2dec165519db7ac0d0ed6b8a4c5570e59e14bd81c3eaa8d129e6b03d608ee175dfe0695483a64028478f5142ae957382ce6ba3367d304ed9621de7334a79baf8698b41c6243815a232c6f518333a2ff8f085f46706ae5b082df394b84449c9dccbd68e9c9ed3e6ad6dc69f4ff1bc8ec865b2d4d2731d11b42b7f0e8a3ef4ca16b031784548c0d10fa3c840bbeb852f788276886d0efc3364a7814b3c1399930f9620a4b00dade161afd442d84275673a420b7ae58c994f9875e10e1b1e75da9f7934b1dd2ce9170bc3eac456aec0c2a12dd3617bbfe526b037c37a5f096e795965084df279c0290d5a492d20301961582ad2dd3d86fffce34ff435a3ea49d331553ef1800421cfff8d65f754498989388b4a05e42c0464d21f7d25b0591a6cba62ad24a6f8858de90dac92409c151b33b0b46f81922ab7311eaed18d32391e0f13a0fdce1dd883c2b5e9eed17a31ddf109d52a30b7b9d5900db7387dc3170528af4dfba54af4a170a946886668fefcac627cc26f679f1c7bc1b83745613a7d15348908ee15d9159e88801059ff5f4acb126c3f6d5df71a418e05030fb5590580d4fd6224a6bb684d0d0fd247df7ffd8e034f673304db1ceaf13dac6c45dad37bfee403c0f4f590f22dfb8013998cc819d06b80ce9f833b270401a43e5ef9d0dff908e28f4e49913bad01ba347fe951c6b491614845cbe686aedcd4587ec5f55dc96b67a981975680a39639db2963886ff08ce8ed83dfb5b8762fbc5c37a18d643470e2e128ebbacce8070380f31e1378e4ab19d6f9b7f0eebdf112d3e381e71201b20d723cb13f57d2b197dbb17197647bfba0148c7759be723fe2e6aacf3c0bdd202a430b3179a57d794284d234fda43d6ccebf8ff3c6ca575a84e9f54a73db8ccbd14516a7c7630a13fbe5dad5bd4c81d7bf861f63b278bc70b45ad2b958b457533363a572994c08841d3749e451f505c86569d201c49641a2c81791a95bc96491eb0607eb8889b0918d9d29d4a3382ed3b777dd05aabc713c85bf0764a3784b49b0c98e7092dfef44bc8fc38e7252568275f08b82ae39bdf83ecdcd12f8e8e759426ef6272c955bf0b416cde60038694451f442d130cc61b2b25750040201a4a26915d79aea79a23b866b1df942ba3895eca2c64e9cf29063660dee6d787980329d939723c54b38ea1242ec45d911e5def0947239948f4b0755822484a3eca26d7ca5355b76e62369942b6f3407c755e30557486f039922a3299b9e3fee5f516213c7441cdcd376ea9a20fe107d2490fb4d6370ced8e611dba02d1ef9e5d0ec7ea5dd5ea2266862aa412e8cb0aa618a8183ea1d7a03a6044001e14e4f0d0042006db05e73726dddc90830168d55be46270153a523664a42e7d6efd8a7e9d7c137c2cc51f2a4323d8195841e5230b5e58ab60ec0a8b221e4f35471e8c90e4650b9a61cabf4cfbc498f3f1e4ccaa0fc374f8c464a12111ed3075dfaf1a062fe1c6d0445ead3c45ec7e2c54be3181dd36d2470089812c1ef7a4679e465edd93cc31a243beb588a49f34a97e5f740332c0ae27be35f7ea974280c429008e1a3a37d4d87712bc8b9382684e27ee5acf493798a5aff85eb13ed15e0c6cbcdfc983b3837c42d42023ceba026231cbab2b7d30b6b390c7f350a9ac589bd7ea2e5227ed69d6d8a15b025aa97a9b6529fb65d60cb8d933154b76099a84590ebfdc8bb8882b5c58f1b961f801f46c5d4154cf34a6d11c0fca3243ecac761b2fe7a8a69e28a176d17fa6d86705d3dcdb1c495f46aaf80bde130046b60a3f1dc683e7707870918ee5b815af5baa5022a9d5639be130fb622791d708a105e11a7d0c7a894058e23559332d39cc2af61a587cf94d990d2d3e4e14b948f359a4da1cdb08791691c1eeeff792af2b13437d63d72d74030be380bafbd9a914742321764f7ef291b854d51710a8b130565dd231076081a0ce7ce41ca435b941bead8dc3383e7ae9835e29f319a7065b5289b4ce3c510b7d0d124d98b7cdef5cc4e0634128a322c3806a9fed02f44804385d7cbaac37cf6085dc631e0c4a94071b2ec2bdbd642a300cd4733c88dcb9e84023c70001f058f116c870c0dfe1e30412349e2641304ac45ac80d8041980f8b4b46282b00ef8aef9ded87adde6d254984bfe6becaaa966e0e9555d1c83576ccd0ae4206818e8d891098d030cd68401fafba7e379ed633a00147c6681ed90dd68da6742bd5e1d67da2d8f76fbb7981ddeaa85507d2fb96c9bc894a035d4efc7ccb730d2c020e13c76f4d32cafa82c4bd7a588a8be06811e91e96454b7a48c56dad78250632f98ec606a12949c841caae70cc2d714b1d8073679ec142b9d07b95bfdb024c04ba0bb1bbda6eb37445c5fdffca180b1d19f4c7aebf65fc5e30628e817e5eb2b53be5e361b818c5e4ed9b9a84fc767d38c661f7455e5385da87de266f6956b1187cad61d8b2747b8b4a0b8b464c9073dfdb841c84830b54f103b0ad06847669c17cbd8b7b0e58c573a231abd3d72e02496317684974c638f8e0b7dec4102500aa3080a326e7c87b2d3e4f015129bd01e30d4715a46ce1c1ea3f5052140c07bf9c6e0aea712d4790aa52b5ba5c98c65bc47c7fff1f29aa770693e097b1b7737151323241b1c8575d13940506abd949810372768468fe32fae099de7f1d9d026fff8c4952d470cde72272e9db5eb7e52180cc39e7a84bfa6c66f20de5948b14aa6a98a69da0a5ece60c02c3d54a99f7ed547dc0ad739aba56562360e9417d2dff38912cf0ab3f7a61c5f744e6a1b2e4ae31a7cd9e4846df397e962de1e8573d8dedca673074296af7cb83d98cd3ed2c8eef836630cff2b59e1281956e050b1accd4eb48913ec22bc312d050859d69c5af0cf4304df60afb6bc9cba679f94091da4a18c39d44bc82c2739ce7d30d86ddd274d4709d779a145147d7268f251839bf023c0e5dde252db1b3dd337296a23258ffe72255b27ead9928a9de00f084b3d74b5f5c0deca6d788d43bdd6547a8763e1bf79040d717aa1f928a60e5b4fddfcb1f910b871d392ef05330b97e298bd49136332c5a9a9ae8dcb030596771c2d3bb035739ecb0afaba5d5f8dfe88df992f79601525316eaa93a25087f9f5847b609fb68353feaa665a4d91ae0eb31cbf91e675a7a3b86f08af4aa9b64f25ec6b92797c07dc44f7180977b3944aebe15d8889b7e3ddedf357c24c847299967e6292148fb35120b2eb639e3d88f95382d1627e6c9a2f75094be89f3856ed1f3fc2c7adae2e792060ed0d05955663b667fcdda90bc0018eb98426d4a51c3473c5447e65f2236494ffc15af9b53526cdbb59c198a865882e0e97a1eb5748a3a071d1c03c5ad729d641b44213b6a45b1e82e870d3a52c7a572a2dfc0699c1a91857cb9107eac9ab738af82c75dd18bb20f61ffc2d866a6bff40f0b192fb382dd8a314b70ff411d9d77e23b832f65eab600382ea827735649065b16b239b68091aff16ae439d843141b7e47bcde3a0f1b6891d8c98c61fc9e3e2da1464eb789fe78343bf89aa0ad4ebc44d7bd779466b3ba33f849e3c1b8160049dde789891ed939d2b04321320bde74bc1b88379c2c64236fd37daf1998b8acc5850c5d54b1c102562c5ec903ba4e36caf68481486c1094e89a6e2298813fe8d5485f7687474e92a3fdab9507ec843256800df123ee973468e33779b552f64c058a283120b16767e68260f4d31787451cac9cff060a27a3ccbc18f7f5fb68a85f770dfce1d44ef289f8d1160df00c520565536d417f1828634f2de4ef3a12514cf0ca9e8460b0da4910f1fed6c484e521b0bef65336298fcc9a3b5821a6c01c257b643d0d76eb3ac41f6a07838132ffede3fafe171bd83a163f86dbda291a2bb59dea373f1fb409485cf85a87f919d76d1df4770835b38a4cd5622bc70b47e9a51187edc10be8869dff0b911dbe68b5bbffb3d059719cd2ccda5644739522c92de64080a72b74bbd969cee5d459836f127a5e274e3ff39d0b7483a9434f314eb1cfa11fe64acae74e10223e906cc0a1696cc388bb25f5547b3c8919d2d6bbc9be8b58551abd468d5d9a2c22bec76e24f23f7e00b0c5e9848e1e792aa7ca781c039690226de7fe23d037970bdf97f177893fd063532d4abeb054998d2616eb94a462bfa52098ab7c70599e402b288a0e66fc9c1df0e13c766662ab784769a56e6f406623809d3d369bd05fe8cabf0aeb5056b6ce82bf5f09c1d149cccf28f3e5dfbe4d9708b8a144e336ae23769151b9be8cfbbbc2f12f26090b256f0147ed18d2864da809d5cff4c5bdd4a33954832a252840fdd8770c20a546268ef766c4c3dc7e396a60fb119e4db1043e8797b0a110dac47a9fc294068492f630d27287a10058c915b13ca827c8f41f244691fb86167f373586a9f50edf87f3f3e6a67d1a8f50e64ca7945fd814ce5dcb25b15b67e536b2e4718ed0a650db3945cb777423aa0e9cc2c271c84fa0dcd77cd4f5f133128827e88e7e7ce6ce4e6a3f8d1f70c6bfd8a657baa1bffebc5bf99179ba593224a253d383c7cd146fa7c343a311648f989f2dccdf585912f8c7677e9fdeaeb20afc3f7c3da840f9f2a4c845d423676a525e5398a2c1b1d90292e747bccb8b094b231b9f0620e10484112b8d6d88e2aeba792b702c73cb6846fb0a0c23862d1ec9817ca0de33558c8ef115f65a0960b8a589655e74c3a1c0301f4daa003a66a2a7c76c4086392527ddc48cde57a1b3763efb11f38a53dbec638cfd8e29ec59f4cef4dfc14b74b6f50d3b1fd63f8e8b90a7ae6cf8316f3082fdeb2911a25f6c390a33314fbe44772ca26b02c160587a795e25c76a1fe63aba102fb11d9f5ed6869e0825daf2b61ec3c424762abc1634b2f2b3a81e234955caf6f07cfa9c5db0da237361617da0063b2b4575dc78257407cd7d077e80ca552aae8bca821b013656cf06afde82c8ecd72171e20f4907eab258ab1e9d542bdc113189b0a7edd59ae09a22c1b6b5ed80623d9c101d5e98602f7bfac84c37b19d515e225146a5e787599b46971c6158ea21dae2735165d8e48c5f3fb50d4e0b69f15ceee9e0b554e4c11f5c47e81dc3dd739179dc0cc304103650f56e6509377e186e7bf8036fa96b61f33ab6e4f4b979d4f798ebfec616f52c7b1cacd9a70b698cb2d1de593ac2b8a0c8e8ac357f3d8fe5c9146a2078671338a733ad923adfe2b4dda6999a6910f98b4412a0572ca3eccf4d0650939026ffe6ef671de717aaedd7b7d358bcbcb7ac4b2239e92eb818483542faf463911968402b19c018f5dd881af97900ab8dc39d594e806178fd5170b605e7d195f99f24e0656bc962504b189da408eec6f53a4b0d3a7093ad1bd1129a6f9bb93db75eac5ac9408a7c5875ec3cce372d89c7a7da84d1dfce5c13f4c5fcf9217604681a772ff8b9037674ca6be2f932510320149aff888ebbe2b58f055c962524ce141ccf472f62f4faa9cfacd00688b198d84e1d6b596c946485ea3c02298a09558c524825eb1ebad358c011b0cff1950f74f325cebdf7bd8b0d0c97f87dd8c83852ab7b6e2a2e471109210dcff516ce7a6adf09caf0038433db6007b0896a84f14c1c97388666163aaaf890504c4a948a7fea1bceebbf28695bde9feb02c7a9984b385843f98f221a9df8ab46107c0c96b30d4262735c698e5d7d0a2a860c4a60f3f83cfb8f05ea715f280b90d5c6f560e4d015c2e89b36cc286f0edcc22a23aaed29fd4db0d28eb6e6619c099adc86559b7838dfde3aa1f82c5ea"}, {0xf8, 0x119, 0x4, "f16792f7488c3a38105ae713626a897864f61a19d54db319a1b1ac6e3aaa72c001e81a036e656dd0293bf0d5979e119aae83a31ea6c26a61021387d895621b8cc16233b9a348ad0bf4d03bbd37c823b1c2c42f1fca333530ad8697f84fe72f4fb8676fdf4d767b97d8d476c8aba720654e4d694af39d113817e7b155ab05e788d6b4978663c716de49aa78e8a633d4b1ae424cd87e928395aa1650686db8888df64c55b52cce120d45b03e9213c95c4a1581dde746a7a9c850dc635f9a620fea45e3021d7d12fa6a381ed83811e2f5d07254be758a7365a8597e4b6f529f6725e671646c6a"}, {0x100, 0x112, 0x200000, "6ef048f40277ef3b853e99e43a7d5a479aa7082ef81695c94ee2873424ba0972f256c5a59ad103a8ed691f00af7d157ff559643a236d4661801644e4447e1312c0fc29f8484614009d6a9f45d7210c466f01199a07db80bcd4f59247ddcc0ec2034bbaa8f38c9b433b49c7008bfe69825eb2ef446831f63690813aa65aa8a9bd3941a0c25cd9a4c9e8bfdbf6cb02491a69b37fb69ebdf8bd67ec754c30e67a75b91f035d6ea46e2cd79a91e00a3db05e59d897e37be4dd723b47e991395dc0cbdd92b8519738fc662035f73b6cdc265edd38b28e4f764179135fd2a54ca0455f0ab425610e2b0191609e"}, {0xd0, 0x88, 0x4, "0ca7fa3a392b4525fce2d06f1499e59b33218bacd7eaea9b49f4f8a74b75b0125f324c1663bb0531ca114dfdeffa6baf3d389964813f402e4a173bc3804fc61cb3e7d360d6761d8cc3356d034b17fc9fe8f60d1a3c8e3f2f53ab97d4ab6dc48f51ffc9a1fd8014bfc89d0c1cbe934153f6fb967a3df18a7739445e060a8f86f3b84d74afa5a5d2406481188258ac6609e619de65713af3fba843c2ac2b9eae71ec97c97a6087d175a44ea567c12c1de1b9b244d153c908010e921a33"}], 0x12d8}, 0x4841) r6 = socket(0x2, 0x80802, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000019140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f000001a840)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x20000001}, 0x2bf57d5640cd1bc8) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (async) dup(0xffffffffffffffff) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) fcntl$lock(r0, 0x26, &(0x7f0000019280)={0x0, 0x1, 0x9}) (async) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f00000000c0)=0x4, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00'}) (async) sendmmsg$inet(r2, &(0x7f000001ae40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}, {{&(0x7f000001a700)={0x2, 0x4e22, @remote}, 0x10, &(0x7f000001ab80)=[{&(0x7f000001a740)="a0503a7079fb3bd71a8bb718179e979858b9235e6b804fb068064cacea1e1b54ba", 0x21}, {&(0x7f000001a780)="51ea53c9bf3c20df9ebb7b2baea6d191c412b1f248c5909e4c1f001baf5c5467dbe1dca32237c08ddbfd0cca4c914c6d8b881d16bfd5551cc1cd351b5c3b1348cd7c1e2c442aee4d212f65bd23f191e6040d8ba52cbb42537ec08a1ed1db0a7160131b5f90584c83b49cc3e14e555d333155a7752804e28c641f35fdcbd80eda68826c6f5c28952e177c105006915a3cad68ad19313db041b75701", 0x9b}, {&(0x7f000001aa40)="7c30d2ec06ad1cc8c3c1789f475ccd97fc56d576049ee8b948aa7fb640f74c2b689db7c53e82a33795ced09b950dcd48dc81e45c8ae8b687a58834990ccead589e3673e123251ca9da24ec6329358868171d403effccb4721da946bdf1af5092d42aa2dca2d98f5781e0abefb69f7384b513ae55a1962010d922305d5c414389be939be425a65c0a2d19168b95410251ce9cad579fd8e26e5eb8f59499ef3127169f76a96e19d15a8d50276398bf2411011179a49acc4d41551725afc35c41d2804fbd44a90d234b459fa4f0cd5d80b32166f07110b1aac89894d426f1a6a2161f79e86f1736ede8ad285a08504c7f74612976f0ba7e72fec2", 0xf9}, {&(0x7f000001ab40)="dd594c3fa89b64a661d1025430a593fd10066f8316225f7d785df3b5fc204732e9fa845c5a0f53d22a481e39c392a3bf833f", 0x32}], 0x4, &(0x7f000001abc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x15}}, @ip_retopts={{0xcc, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x22, [@dev={0xac, 0x14, 0x14, 0x2b}, @local]}, @rr={0x7, 0x1b, 0x83, [@private=0xa010101, @multicast1, @rand_addr=0x64010100, @private=0xa010102, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0xf, 0xf0, [@multicast2, @remote, @multicast1]}, @timestamp_addr={0x44, 0x24, 0xd9, 0x1, 0x8, [{@broadcast, 0xffffffff}, {@local, 0x7}, {@rand_addr=0x64010101, 0x5d37}, {@remote, 0xfffffff8}]}, @lsrr={0x83, 0x17, 0x12, [@local, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1, @loopback, @remote]}, @end, @rr={0x7, 0x23, 0x15, [@remote, @rand_addr=0x64010100, @empty, @empty, @dev={0xac, 0x14, 0x14, 0xa}, @broadcast, @remote, @multicast2]}, @timestamp_prespec={0x44, 0x14, 0xe6, 0x3, 0x5, [{@multicast2, 0x100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd2}]}, @ssrr={0x89, 0x13, 0x40, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x26}, @empty, @dev={0xac, 0x14, 0x14, 0x2c}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x4e, [@broadcast, @private=0xa010101, @remote, @remote, @rand_addr=0x64010101, @private=0xa010100]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9ae}}, @ip_retopts={{0x80, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0x44, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @local, @remote]}, @cipso={0x86, 0x40, 0x0, [{0x5, 0x10, "0a464516359da95a038598b6e22c"}, {0x2, 0xf, "847e7f285dc19fe82fa1ffb367"}, {0x2, 0x12, "a89d648e6ae29050502fe11efbc2a7ff"}, {0x5, 0x9, "001c54e60ece89"}]}, @noop, @timestamp={0x44, 0xc, 0x14, 0x0, 0xc, [0x4, 0x200]}, @timestamp_addr={0x44, 0xc, 0xec, 0x1, 0x2, [{@broadcast, 0x95e}]}, @ra={0x94, 0x4, 0x1}]}}}], 0x228}}], 0x2, 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r4}, 0x10, &(0x7f0000000200)={&(0x7f000001aec0)=ANY=[@ANYBLOB="04000000000000000007005bad56def0cf860000000000b7694ade20ca5508237e8a702b23cefda2d379b75e1d1d131be1a39eacaf434109629058cd811e57322522072eae75736eb16cef968ff2", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="03000000010000000000008000000000a7a80e1ea3468f8938edeae721a1edd6d2cdcb4c5c8e36f4af45778ef6d463a5bcfa0bb43ed70a8ed13ec0cb831f5285f6f1d418d5ef"], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) getuid() (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000019180)={{{@in6=@empty, @in6=@mcast2, 0x4e22, 0x3, 0x4e22, 0x1f, 0xa, 0x40, 0x0, 0x4, r4, r5}, {0x8, 0x80000001, 0x81, 0x7fffffff, 0x4, 0xfffffffffffffff7, 0x6000000000000, 0x5}, {0x3ff, 0x6, 0x2, 0x1}, 0x6, 0x6e6bb2, 0x2, 0x1, 0x3, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d6, 0xff}, 0xa, @in=@multicast1, 0x3506, 0x2, 0x3, 0xd4, 0x5, 0xffffffff, 0xfffffffe}}, 0xe8) (async) read$char_usb(0xffffffffffffffff, &(0x7f00000000c0)=""/102385, 0x18ff1) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f000001a6c0)={&(0x7f00000192c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x3, 0x0, 0x1, {0xa, 0x4e21, 0x9, @private2, 0x89}}}, 0x80, &(0x7f0000019380)=[{&(0x7f0000019340)="ba1f15", 0x3}], 0x1, &(0x7f00000193c0)=[{0x1010, 0x103, 0x80000001, "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"}, {0xf8, 0x119, 0x4, "f16792f7488c3a38105ae713626a897864f61a19d54db319a1b1ac6e3aaa72c001e81a036e656dd0293bf0d5979e119aae83a31ea6c26a61021387d895621b8cc16233b9a348ad0bf4d03bbd37c823b1c2c42f1fca333530ad8697f84fe72f4fb8676fdf4d767b97d8d476c8aba720654e4d694af39d113817e7b155ab05e788d6b4978663c716de49aa78e8a633d4b1ae424cd87e928395aa1650686db8888df64c55b52cce120d45b03e9213c95c4a1581dde746a7a9c850dc635f9a620fea45e3021d7d12fa6a381ed83811e2f5d07254be758a7365a8597e4b6f529f6725e671646c6a"}, {0x100, 0x112, 0x200000, "6ef048f40277ef3b853e99e43a7d5a479aa7082ef81695c94ee2873424ba0972f256c5a59ad103a8ed691f00af7d157ff559643a236d4661801644e4447e1312c0fc29f8484614009d6a9f45d7210c466f01199a07db80bcd4f59247ddcc0ec2034bbaa8f38c9b433b49c7008bfe69825eb2ef446831f63690813aa65aa8a9bd3941a0c25cd9a4c9e8bfdbf6cb02491a69b37fb69ebdf8bd67ec754c30e67a75b91f035d6ea46e2cd79a91e00a3db05e59d897e37be4dd723b47e991395dc0cbdd92b8519738fc662035f73b6cdc265edd38b28e4f764179135fd2a54ca0455f0ab425610e2b0191609e"}, {0xd0, 0x88, 0x4, "0ca7fa3a392b4525fce2d06f1499e59b33218bacd7eaea9b49f4f8a74b75b0125f324c1663bb0531ca114dfdeffa6baf3d389964813f402e4a173bc3804fc61cb3e7d360d6761d8cc3356d034b17fc9fe8f60d1a3c8e3f2f53ab97d4ab6dc48f51ffc9a1fd8014bfc89d0c1cbe934153f6fb967a3df18a7739445e060a8f86f3b84d74afa5a5d2406481188258ac6609e619de65713af3fba843c2ac2b9eae71ec97c97a6087d175a44ea567c12c1de1b9b244d153c908010e921a33"}], 0x12d8}, 0x4841) (async) socket(0x2, 0x80802, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)) (async) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000019140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f000001a840)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x20000001}, 0x2bf57d5640cd1bc8) (async) 07:39:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) [ 2305.655061][T16060] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2305.655072][T16060] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2305.655083][T16060] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2305.695588][T16060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2305.703593][T16060] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2305.711627][T16060] [ 2305.726850][T16113] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:39:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f0000000000)="814e4a259bde1984f33fa28b2247d32f52a672a3e2c633b3b0598454205679c0a553570e906c65c8cb2405c5bd72e6290983666b1ab0334105429dbdc733", 0x3e}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x3) 07:39:16 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/l2cap\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) 07:39:16 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x2, 0x80802, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xdf96}, @generic={0x3, 0x2, 0x2, 0x2, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100}, @call={0x85, 0x0, 0x0, 0xc5}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0xc}, @map_idx={0x18, 0xc, 0x5, 0x0, 0xe}], &(0x7f00000000c0)='syzkaller\x00', 0xdd54, 0x90, &(0x7f0000000100)=""/144, 0x40f00, 0x10, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x9, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1, r1, r5, r1, r1]}, 0x80) 07:39:16 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 34) 07:39:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x3, [@empty, @loopback, @empty]}, 0x1c) 07:39:16 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) (async) read$char_usb(r0, &(0x7f0000000000)=""/93, 0x5d) (async) r1 = socket(0x2, 0x80802, 0x0) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) (async) close(r2) (async) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f00000000c0)) 07:39:16 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/l2cap\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) syz_open_procfs(0x0, &(0x7f0000000040)='net/l2cap\x00') (async) read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) (async) 07:39:17 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/l2cap\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) 07:39:17 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) read$char_usb(r0, &(0x7f0000000000)=""/93, 0x5d) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) close(r2) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f00000000c0)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) (async) read$char_usb(r0, &(0x7f0000000000)=""/93, 0x5d) (async) socket(0x2, 0x80802, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) (async) close(r2) (async) ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f00000000c0)) (async) [ 2312.640803][T16126] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2312.661932][T16128] FAULT_INJECTION: forcing a failure. [ 2312.661932][T16128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2312.675245][T16128] CPU: 1 PID: 16128 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 07:39:17 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000190c0)=""/102391, 0x18ff7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) read$char_usb(r2, &(0x7f0000000100)=""/226, 0xe2) [ 2312.687754][T16128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2312.697888][T16128] Call Trace: [ 2312.701173][T16128] [ 2312.704103][T16128] dump_stack_lvl+0xd6/0x122 [ 2312.708801][T16128] dump_stack+0x11/0x12 [ 2312.713014][T16128] should_fail+0x242/0x250 [ 2312.717443][T16128] should_fail_usercopy+0x16/0x20 [ 2312.722450][T16128] _copy_to_user+0x1a/0x90 [ 2312.726869][T16128] rng_dev_read+0x2bd/0x630 [ 2312.731399][T16128] ? devm_hwrng_match+0x50/0x50 [ 2312.736282][T16128] vfs_read+0x198/0x560 [ 2312.740449][T16128] ? __fget_files+0x1a7/0x1e0 [ 2312.745114][T16128] ksys_read+0xe8/0x1a0 [ 2312.749282][T16128] __x64_sys_read+0x3e/0x50 [ 2312.753794][T16128] do_syscall_64+0x2b/0x70 [ 2312.758315][T16128] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2312.764229][T16128] RIP: 0033:0x7f8359bbc279 [ 2312.768628][T16128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 07:39:17 executing program 3: r0 = socket(0x2, 0x80802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000000)=""/142, 0x8e}, &(0x7f00000000c0), 0xc}, 0x20) read$char_usb(0xffffffffffffffff, &(0x7f0000019180)=""/102395, 0x18ffb) 07:39:17 executing program 3: r0 = socket(0x2, 0x80802, 0x0) (async) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000000)=""/142, 0x8e}, &(0x7f00000000c0), 0xc}, 0x20) read$char_usb(0xffffffffffffffff, &(0x7f0000019180)=""/102395, 0x18ffb) [ 2312.788332][T16128] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2312.796862][T16128] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2312.804843][T16128] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2312.812832][T16128] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2312.820823][T16128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2312.828812][T16128] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2312.836786][T16128] [ 2312.841341][T16140] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:39:24 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 35) 07:39:24 executing program 3: r0 = socket(0x2, 0x80802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000000)=""/142, 0x8e}, &(0x7f00000000c0), 0xc}, 0x20) read$char_usb(0xffffffffffffffff, &(0x7f0000019180)=""/102395, 0x18ffb) 07:39:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f0000000000)="814e4a259bde1984f33fa28b2247d32f52a672a3e2c633b3b0598454205679c0a553570e906c65c8cb2405c5bd72e6290983666b1ab0334105429dbdc733", 0x3e}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f0000000000)="814e4a259bde1984f33fa28b2247d32f52a672a3e2c633b3b0598454205679c0a553570e906c65c8cb2405c5bd72e6290983666b1ab0334105429dbdc733", 0x3e}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x3) (async) 07:39:24 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x2, 0x80802, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xdf96}, @generic={0x3, 0x2, 0x2, 0x2, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100}, @call={0x85, 0x0, 0x0, 0xc5}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0xc}, @map_idx={0x18, 0xc, 0x5, 0x0, 0xe}], &(0x7f00000000c0)='syzkaller\x00', 0xdd54, 0x90, &(0x7f0000000100)=""/144, 0x40f00, 0x10, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x9, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1, r1, r5, r1, r1]}, 0x80) socket$unix(0x1, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00'}) (async) socket(0x2, 0x80802, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xdf96}, @generic={0x3, 0x2, 0x2, 0x2, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100}, @call={0x85, 0x0, 0x0, 0xc5}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0xc}, @map_idx={0x18, 0xc, 0x5, 0x0, 0xe}], &(0x7f00000000c0)='syzkaller\x00', 0xdd54, 0x90, &(0x7f0000000100)=""/144, 0x40f00, 0x10, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x9, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1, r1, r5, r1, r1]}, 0x80) (async) 07:39:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 07:39:24 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000190c0)=""/102391, 0x18ff7) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) read$char_usb(r2, &(0x7f0000000100)=""/226, 0xe2) 07:39:24 executing program 3: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f00000000c0)="b26d46fb9dda799cbd8b7a19c7d762a243295c92a9254ef69f0216a3b4279de8d0850d901938f7060289bcf8dfecae52e551a77f27ce00c691823b464709c4760d8edcaf1619f5ab8bfbf4bf1fdfb0688385") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) [ 2319.765808][T16172] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2319.793051][T16170] FAULT_INJECTION: forcing a failure. [ 2319.793051][T16170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2319.794873][T16172] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:39:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) [ 2319.806272][T16170] CPU: 1 PID: 16170 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2319.826846][T16170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2319.836913][T16170] Call Trace: [ 2319.837479][T16181] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2319.840181][T16170] [ 2319.840189][T16170] dump_stack_lvl+0xd6/0x122 [ 2319.855753][T16170] dump_stack+0x11/0x12 [ 2319.859940][T16170] should_fail+0x242/0x250 [ 2319.864385][T16170] should_fail_usercopy+0x16/0x20 [ 2319.869444][T16170] _copy_to_user+0x1a/0x90 [ 2319.873885][T16170] rng_dev_read+0x2bd/0x630 [ 2319.878416][T16170] ? devm_hwrng_match+0x50/0x50 [ 2319.883299][T16170] vfs_read+0x198/0x560 [ 2319.887471][T16170] ? __fget_files+0x1a7/0x1e0 [ 2319.892165][T16170] ksys_read+0xe8/0x1a0 [ 2319.896358][T16170] __x64_sys_read+0x3e/0x50 [ 2319.900894][T16170] do_syscall_64+0x2b/0x70 [ 2319.905361][T16170] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2319.911288][T16170] RIP: 0033:0x7f8359bbc279 [ 2319.915721][T16170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2319.935401][T16170] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2319.943815][T16170] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2319.951778][T16170] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 07:39:24 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) (async) r3 = socket(0x2, 0x80802, 0x0) (async) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xdf96}, @generic={0x3, 0x2, 0x2, 0x2, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100}, @call={0x85, 0x0, 0x0, 0xc5}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0xc}, @map_idx={0x18, 0xc, 0x5, 0x0, 0xe}], &(0x7f00000000c0)='syzkaller\x00', 0xdd54, 0x90, &(0x7f0000000100)=""/144, 0x40f00, 0x10, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x9, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r1, r1, r5, r1, r1]}, 0x80) 07:39:24 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 36) [ 2319.959755][T16170] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2319.967786][T16170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2319.975738][T16170] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2319.983703][T16170] [ 2319.998303][T16182] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:39:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) [ 2320.035310][T16197] FAULT_INJECTION: forcing a failure. [ 2320.035310][T16197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2320.048448][T16197] CPU: 1 PID: 16197 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2320.060944][T16197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2320.062022][T16199] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2320.071061][T16197] Call Trace: [ 2320.071071][T16197] [ 2320.071077][T16197] dump_stack_lvl+0xd6/0x122 [ 2320.089988][T16197] dump_stack+0x11/0x12 [ 2320.094168][T16197] should_fail+0x242/0x250 [ 2320.098621][T16197] should_fail_usercopy+0x16/0x20 [ 2320.103657][T16197] _copy_to_user+0x1a/0x90 [ 2320.108182][T16197] rng_dev_read+0x2bd/0x630 [ 2320.112688][T16197] ? devm_hwrng_match+0x50/0x50 [ 2320.117660][T16197] vfs_read+0x198/0x560 [ 2320.121805][T16197] ? __fget_files+0x1a7/0x1e0 [ 2320.126517][T16197] ksys_read+0xe8/0x1a0 [ 2320.130655][T16197] __x64_sys_read+0x3e/0x50 [ 2320.135157][T16197] do_syscall_64+0x2b/0x70 [ 2320.139644][T16197] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2320.145536][T16197] RIP: 0033:0x7f8359bbc279 [ 2320.149937][T16197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2320.169548][T16197] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2320.177947][T16197] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 07:39:24 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x65, 0x40, 0x8, @loopback, @loopback, 0x10, 0x8000, 0x4, 0x8}}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000180)={0x1d, r2}, 0x10) read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/71, 0x47) [ 2320.185917][T16197] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2320.193875][T16197] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2320.201840][T16197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2320.209826][T16197] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2320.217928][T16197] 07:39:24 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 37) [ 2320.240804][T16200] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2320.267321][T16205] FAULT_INJECTION: forcing a failure. [ 2320.267321][T16205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2320.280595][T16205] CPU: 1 PID: 16205 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2320.293080][T16205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2320.303117][T16205] Call Trace: [ 2320.306417][T16205] [ 2320.309340][T16205] dump_stack_lvl+0xd6/0x122 [ 2320.313936][T16205] dump_stack+0x11/0x12 [ 2320.318074][T16205] should_fail+0x242/0x250 [ 2320.322476][T16205] should_fail_usercopy+0x16/0x20 [ 2320.327570][T16205] _copy_to_user+0x1a/0x90 [ 2320.332030][T16205] rng_dev_read+0x2bd/0x630 [ 2320.336547][T16205] ? devm_hwrng_match+0x50/0x50 [ 2320.341537][T16205] vfs_read+0x198/0x560 [ 2320.345706][T16205] ? __fget_files+0x1a7/0x1e0 [ 2320.350376][T16205] ksys_read+0xe8/0x1a0 [ 2320.354540][T16205] __x64_sys_read+0x3e/0x50 [ 2320.359033][T16205] do_syscall_64+0x2b/0x70 [ 2320.363677][T16205] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2320.369568][T16205] RIP: 0033:0x7f8359bbc279 [ 2320.374025][T16205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2320.393624][T16205] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2320.402055][T16205] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2320.410025][T16205] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2320.418052][T16205] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2320.426030][T16205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2320.434145][T16205] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2320.442111][T16205] 07:39:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f0000000000)="814e4a259bde1984f33fa28b2247d32f52a672a3e2c633b3b0598454205679c0a553570e906c65c8cb2405c5bd72e6290983666b1ab0334105429dbdc733", 0x3e}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f0000000000)="814e4a259bde1984f33fa28b2247d32f52a672a3e2c633b3b0598454205679c0a553570e906c65c8cb2405c5bd72e6290983666b1ab0334105429dbdc733", 0x3e}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x3) (async) 07:39:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x2, [@empty, @loopback]}, 0x18) 07:39:33 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 38) 07:39:33 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000190c0)=""/102391, 0x18ff7) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) read$char_usb(r2, &(0x7f0000000100)=""/226, 0xe2) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (async) read$char_usb(r0, &(0x7f00000190c0)=""/102391, 0x18ff7) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) read$char_usb(r2, &(0x7f0000000100)=""/226, 0xe2) (async) 07:39:33 executing program 3: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f00000000c0)="b26d46fb9dda799cbd8b7a19c7d762a243295c92a9254ef69f0216a3b4279de8d0850d901938f7060289bcf8dfecae52e551a77f27ce00c691823b464709c4760d8edcaf1619f5ab8bfbf4bf1fdfb0688385") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) 07:39:33 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x65, 0x40, 0x8, @loopback, @loopback, 0x10, 0x8000, 0x4, 0x8}}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000180)={0x1d, r2}, 0x10) read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/71, 0x47) socket$unix(0x1, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x65, 0x40, 0x8, @loopback, @loopback, 0x10, 0x8000, 0x4, 0x8}}) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r1, &(0x7f0000000180)={0x1d, r2}, 0x10) (async) read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/71, 0x47) (async) [ 2329.087188][T16220] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2329.115445][T16220] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2329.122756][T16219] FAULT_INJECTION: forcing a failure. [ 2329.122756][T16219] name fail_usercopy, interval 1, probability 0, space 0, times 0 07:39:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x2, [@empty, @loopback]}, 0x18) [ 2329.136861][T16219] CPU: 1 PID: 16219 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2329.149071][T16223] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2329.149505][T16219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2329.149518][T16219] Call Trace: [ 2329.149524][T16219] [ 2329.173859][T16219] dump_stack_lvl+0xd6/0x122 [ 2329.178548][T16219] dump_stack+0x11/0x12 [ 2329.182691][T16219] should_fail+0x242/0x250 [ 2329.187092][T16219] should_fail_usercopy+0x16/0x20 [ 2329.192102][T16219] _copy_to_user+0x1a/0x90 [ 2329.196500][T16219] rng_dev_read+0x2bd/0x630 [ 2329.200987][T16219] ? devm_hwrng_match+0x50/0x50 [ 2329.205846][T16219] vfs_read+0x198/0x560 [ 2329.209989][T16219] ? __fget_files+0x1a7/0x1e0 [ 2329.214651][T16219] ksys_read+0xe8/0x1a0 [ 2329.218839][T16219] __x64_sys_read+0x3e/0x50 [ 2329.223416][T16219] do_syscall_64+0x2b/0x70 [ 2329.227886][T16219] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2329.233772][T16219] RIP: 0033:0x7f8359bbc279 [ 2329.238168][T16219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2329.257819][T16219] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2329.266334][T16219] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2329.274312][T16219] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 07:39:33 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x65, 0x40, 0x8, @loopback, @loopback, 0x10, 0x8000, 0x4, 0x8}}) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000180)={0x1d, r2}, 0x10) read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/71, 0x47) socket$unix(0x1, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x65, 0x40, 0x8, @loopback, @loopback, 0x10, 0x8000, 0x4, 0x8}}) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r1, &(0x7f0000000180)={0x1d, r2}, 0x10) (async) read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/71, 0x47) (async) [ 2329.282320][T16219] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2329.290387][T16219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2329.298496][T16219] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2329.306454][T16219] 07:39:33 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x280000, 0x0) accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f00000190c0)=0x10, 0x800) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r2 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r2, r3, &(0x7f0000000240)=0x208, 0x9) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) r5 = socket(0x2, 0x80802, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000019100), &(0x7f0000019140)=0x4) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r4, @ANYBLOB="00022dbd7000fedbdf250300000008000400e0000002c4bd4572333c6ec1b1fd5b8b01f7dfe7e3996772fc12b05b245ee1735be6071e583078abc90d94248538991e5fcf2dc96a8ed8defc60b1c608a1b8eecc0a2fc4dc983e0d29b79f0878db3b8c92ae16b7e3db182d2fcdd95c9d3422c0bb84dac0de0b39d3e19fbcfded53530b06b41c68baa2cc58db4e2166ce7a610000ffedff581bd7ba9d2c6aafce42270343107f695871e73e8bd41867ef145a9223bdb122aa29464c36aca08d609c170b21843de1ec2611cdb8f19b7f05e8296b2947cfac6543c3319cae2f62a524d8665397a63bb405c0a3eed31cc7b54e64e076b025cce944a1616177bc9d1b0bf31380fd81f762a446c31f9aaa1622b12fafd1a2c4f9779b44301d3de5fcd3eacec73ed41f6c882834e8a6ce1e036126446de3b839b2e3fb6707cf1bb64273b2d44b03360e9f209d2f005c9cca77f60d26d55ff7dd4f365ea86dc72279c9e9218ab09869cdbb2e5cb0a9c7f9e3cd20544feb15def710480227f681e9fb37dfd4186b4657d49c0d35ec2d5cc24b69568678fe1f70d361b88080", @ANYRESOCT=r1], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) 07:39:33 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 39) [ 2329.335279][T16224] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:39:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x2, [@empty, @loopback]}, 0x18) 07:39:33 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x280000, 0x0) accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f00000190c0)=0x10, 0x800) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r2 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r2, r3, &(0x7f0000000240)=0x208, 0x9) (async) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) (async) r5 = socket(0x2, 0x80802, 0x0) (async) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000019100), &(0x7f0000019140)=0x4) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r4, @ANYBLOB="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", @ANYRESOCT=r1], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) [ 2329.382031][T16249] FAULT_INJECTION: forcing a failure. [ 2329.382031][T16249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2329.395428][T16249] CPU: 1 PID: 16249 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2329.407966][T16249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2329.408451][T16257] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2329.418076][T16249] Call Trace: [ 2329.418086][T16249] [ 2329.432449][T16249] dump_stack_lvl+0xd6/0x122 [ 2329.437058][T16249] dump_stack+0x11/0x12 [ 2329.441282][T16249] should_fail+0x242/0x250 [ 2329.445711][T16249] should_fail_usercopy+0x16/0x20 [ 2329.450728][T16249] _copy_to_user+0x1a/0x90 [ 2329.455149][T16249] rng_dev_read+0x2bd/0x630 [ 2329.459660][T16249] ? devm_hwrng_match+0x50/0x50 [ 2329.464652][T16249] vfs_read+0x198/0x560 [ 2329.468794][T16249] ? __fget_files+0x1a7/0x1e0 [ 2329.473467][T16249] ksys_read+0xe8/0x1a0 [ 2329.477656][T16249] __x64_sys_read+0x3e/0x50 [ 2329.482149][T16249] do_syscall_64+0x2b/0x70 [ 2329.486554][T16249] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2329.492486][T16249] RIP: 0033:0x7f8359bbc279 [ 2329.496890][T16249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2329.516497][T16249] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2329.525084][T16249] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2329.533063][T16249] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2329.541036][T16249] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2329.549137][T16249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2329.557288][T16249] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2329.565311][T16249] [ 2329.578954][T16268] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:39:38 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 40) 07:39:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) r1 = memfd_secret(0x0) ioctl$TUNSETGROUP(r1, 0x400454ce, 0xffffffffffffffff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x8) 07:39:38 executing program 3: r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f00000000c0)="b26d46fb9dda799cbd8b7a19c7d762a243295c92a9254ef69f0216a3b4279de8d0850d901938f7060289bcf8dfecae52e551a77f27ce00c691823b464709c4760d8edcaf1619f5ab8bfbf4bf1fdfb0688385") (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) 07:39:38 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x280000, 0x0) accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f00000190c0)=0x10, 0x800) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r2 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r2, r3, &(0x7f0000000240)=0x208, 0x9) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) r5 = socket(0x2, 0x80802, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000019100), &(0x7f0000019140)=0x4) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r4, @ANYBLOB="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", @ANYRESOCT=r1], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x280000, 0x0) (async) accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f00000190c0)=0x10, 0x800) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) socket$inet6(0xa, 0x0, 0x9) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) (async) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (async) sendfile(r2, r3, &(0x7f0000000240)=0x208, 0x9) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) (async) socket(0x2, 0x80802, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) (async) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000019100), &(0x7f0000019140)=0x4) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r4, @ANYBLOB="00022dbd7000fedbdf250300000008000400e0000002c4bd4572333c6ec1b1fd5b8b01f7dfe7e3996772fc12b05b245ee1735be6071e583078abc90d94248538991e5fcf2dc96a8ed8defc60b1c608a1b8eecc0a2fc4dc983e0d29b79f0878db3b8c92ae16b7e3db182d2fcdd95c9d3422c0bb84dac0de0b39d3e19fbcfded53530b06b41c68baa2cc58db4e2166ce7a610000ffedff581bd7ba9d2c6aafce42270343107f695871e73e8bd41867ef145a9223bdb122aa29464c36aca08d609c170b21843de1ec2611cdb8f19b7f05e8296b2947cfac6543c3319cae2f62a524d8665397a63bb405c0a3eed31cc7b54e64e076b025cce944a1616177bc9d1b0bf31380fd81f762a446c31f9aaa1622b12fafd1a2c4f9779b44301d3de5fcd3eacec73ed41f6c882834e8a6ce1e036126446de3b839b2e3fb6707cf1bb64273b2d44b03360e9f209d2f005c9cca77f60d26d55ff7dd4f365ea86dc72279c9e9218ab09869cdbb2e5cb0a9c7f9e3cd20544feb15def710480227f681e9fb37dfd4186b4657d49c0d35ec2d5cc24b69568678fe1f70d361b88080", @ANYRESOCT=r1], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) (async) 07:39:38 executing program 4: socket$unix(0x1, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x0, 0x8, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000600)={'sit0\x00', r1, 0x1, 0x80, 0xffffffff, 0x9, {{0x19, 0x4, 0x0, 0x3, 0x64, 0x65, 0x0, 0x3, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x17}, {[@timestamp_prespec={0x44, 0x44, 0xcf, 0x3, 0x9, [{@multicast2, 0x7dfb}, {@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x80}, {@remote, 0xbc}, {@remote, 0x77}, {@broadcast, 0x101}, {@loopback, 0x1}, {@private=0xa010101, 0x6aa}]}, @lsrr={0x83, 0xb, 0xfa, [@loopback, @rand_addr=0x64010101]}]}}}}}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) close(r3) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000800), 0x1000, 0x0) fcntl$dupfd(r3, 0x406, r5) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r2}, 0x10, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="05000000000000007100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="020000c00100002382b5523d0af67100a05734300d67e1ea9db5b0354032389448d396853c8931c8f001e21816d6aaa567aaa4ea662aa9db0000000000000000000000000000e8059effe1a6c14eb2a2d2710c755085f0f397c19b782c984446cbb78cdd1395a510c8d4710800000000000000653be843a620d9c79d473cd5554c6045249668bba1d50cd04cd7381cb44403450fd952069cbe31"], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x4c860) r6 = socket(0x2, 0x80802, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)) sendmsg$can_bcm(r6, &(0x7f00000007c0)={&(0x7f0000000400), 0x10, &(0x7f00000004c0)={&(0x7f0000000580)={0x3, 0x920, 0x5, {}, {}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x0, 0x1}, 0x25, 0x3, 0x0, 0x0, "3362f9024c636244ce9750d945f1e27bfe89d47f3e0a79168184316bf4e91d9cc12e1bd0a2167bc706406fba2e3bf125ff5c6630dcdb7384e90467daa68fdd87"}}, 0x80}, 0x1, 0x0, 0x0, 0x4080}, 0x50) 07:39:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x2, [@empty, @empty]}, 0x18) [ 2334.234364][T16276] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2334.256323][T16276] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2334.264996][T16280] FAULT_INJECTION: forcing a failure. [ 2334.264996][T16280] name fail_usercopy, interval 1, probability 0, space 0, times 0 07:39:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x1, [@empty]}, 0x14) 07:39:38 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) read$char_usb(0xffffffffffffffff, &(0x7f00000000c0)=""/102400, 0x19000) r0 = socket(0x2, 0x80802, 0x0) r1 = epoll_create1(0x0) r2 = memfd_secret(0x80000) read$char_usb(r2, &(0x7f00000190c0)=""/86, 0x56) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="8218b98ac54fa1ce641af0eac26b5560", 0x10) [ 2334.278324][T16280] CPU: 1 PID: 16280 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2334.290810][T16280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2334.300926][T16280] Call Trace: [ 2334.304208][T16280] [ 2334.307138][T16280] dump_stack_lvl+0xd6/0x122 [ 2334.311787][T16280] dump_stack+0x11/0x12 [ 2334.313786][T16303] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2334.316016][T16280] should_fail+0x242/0x250 [ 2334.328499][T16280] should_fail_usercopy+0x16/0x20 07:39:38 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) read$char_usb(0xffffffffffffffff, &(0x7f00000000c0)=""/102400, 0x19000) r0 = socket(0x2, 0x80802, 0x0) r1 = epoll_create1(0x0) r2 = memfd_secret(0x80000) read$char_usb(r2, &(0x7f00000190c0)=""/86, 0x56) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="8218b98ac54fa1ce641af0eac26b5560", 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) read$char_usb(0xffffffffffffffff, &(0x7f00000000c0)=""/102400, 0x19000) (async) socket(0x2, 0x80802, 0x0) (async) epoll_create1(0x0) (async) memfd_secret(0x80000) (async) read$char_usb(r2, &(0x7f00000190c0)=""/86, 0x56) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) (async) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="8218b98ac54fa1ce641af0eac26b5560", 0x10) (async) 07:39:38 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) read$char_usb(0xffffffffffffffff, &(0x7f00000000c0)=""/102400, 0x19000) (async) r0 = socket(0x2, 0x80802, 0x0) (async) r1 = epoll_create1(0x0) (async) r2 = memfd_secret(0x80000) read$char_usb(r2, &(0x7f00000190c0)=""/86, 0x56) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="8218b98ac54fa1ce641af0eac26b5560", 0x10) 07:39:38 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) openat$full(0xffffffffffffff9c, &(0x7f0000019100), 0x2000, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000019140)={@dev}, &(0x7f0000019180)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000190c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2, 0x40, 0xff, 0xfe53, 0x0, @local, @rand_addr=' \x01\x00', 0x8, 0x7, 0x3, 0x2}}) [ 2334.333600][T16280] _copy_to_user+0x1a/0x90 [ 2334.338075][T16280] rng_dev_read+0x2bd/0x630 [ 2334.342594][T16280] ? devm_hwrng_match+0x50/0x50 [ 2334.347458][T16280] vfs_read+0x198/0x560 [ 2334.351653][T16280] ? __fget_files+0x1a7/0x1e0 [ 2334.356370][T16280] ksys_read+0xe8/0x1a0 [ 2334.360610][T16280] __x64_sys_read+0x3e/0x50 [ 2334.365138][T16280] do_syscall_64+0x2b/0x70 [ 2334.369639][T16280] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2334.375614][T16280] RIP: 0033:0x7f8359bbc279 [ 2334.380037][T16280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2334.399659][T16280] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2334.408056][T16280] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2334.416074][T16280] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2334.424045][T16280] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 07:39:38 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 41) 07:39:38 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) openat$full(0xffffffffffffff9c, &(0x7f0000019100), 0x2000, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000019140)={@dev}, &(0x7f0000019180)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000190c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2, 0x40, 0xff, 0xfe53, 0x0, @local, @rand_addr=' \x01\x00', 0x8, 0x7, 0x3, 0x2}}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (async) read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) (async) socket(0x2, 0x80802, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000019100), 0x2000, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000019140)={@dev}, &(0x7f0000019180)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000190c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2, 0x40, 0xff, 0xfe53, 0x0, @local, @rand_addr=' \x01\x00', 0x8, 0x7, 0x3, 0x2}}) (async) [ 2334.431996][T16280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2334.439973][T16280] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2334.448013][T16280] [ 2334.454547][T16316] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2334.512130][T16340] FAULT_INJECTION: forcing a failure. [ 2334.512130][T16340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2334.525467][T16340] CPU: 1 PID: 16340 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2334.537938][T16340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2334.548016][T16340] Call Trace: [ 2334.551304][T16340] [ 2334.554226][T16340] dump_stack_lvl+0xd6/0x122 [ 2334.558804][T16340] dump_stack+0x11/0x12 [ 2334.562967][T16340] should_fail+0x242/0x250 [ 2334.567425][T16340] should_fail_usercopy+0x16/0x20 [ 2334.572525][T16340] _copy_to_user+0x1a/0x90 [ 2334.576955][T16340] rng_dev_read+0x2bd/0x630 [ 2334.581538][T16340] ? devm_hwrng_match+0x50/0x50 [ 2334.586473][T16340] vfs_read+0x198/0x560 [ 2334.590652][T16340] ? __fget_files+0x1a7/0x1e0 [ 2334.595361][T16340] ksys_read+0xe8/0x1a0 [ 2334.599583][T16340] __x64_sys_read+0x3e/0x50 [ 2334.604243][T16340] do_syscall_64+0x2b/0x70 [ 2334.608669][T16340] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2334.614563][T16340] RIP: 0033:0x7f8359bbc279 [ 2334.618958][T16340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2334.638610][T16340] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2334.647092][T16340] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2334.655095][T16340] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2334.663052][T16340] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2334.671023][T16340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2334.679086][T16340] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2334.687063][T16340] 07:39:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (async) r1 = memfd_secret(0x0) ioctl$TUNSETGROUP(r1, 0x400454ce, 0xffffffffffffffff) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x8) 07:39:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x1, [@empty]}, 0x14) 07:39:45 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) openat$full(0xffffffffffffff9c, &(0x7f0000019100), 0x2000, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000019140)={@dev}, &(0x7f0000019180)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000190c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2, 0x40, 0xff, 0xfe53, 0x0, @local, @rand_addr=' \x01\x00', 0x8, 0x7, 0x3, 0x2}}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (async) read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) (async) socket(0x2, 0x80802, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async) openat$full(0xffffffffffffff9c, &(0x7f0000019100), 0x2000, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000019140)={@dev}, &(0x7f0000019180)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000190c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2, 0x40, 0xff, 0xfe53, 0x0, @local, @rand_addr=' \x01\x00', 0x8, 0x7, 0x3, 0x2}}) (async) 07:39:45 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 42) 07:39:45 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) r1 = socket(0x2d, 0x2, 0x4000000) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) r4 = dup2(r0, r0) fsmount(r4, 0x1, 0x72) 07:39:45 executing program 4: socket$unix(0x1, 0x2, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x0, 0x8, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000600)={'sit0\x00', r1, 0x1, 0x80, 0xffffffff, 0x9, {{0x19, 0x4, 0x0, 0x3, 0x64, 0x65, 0x0, 0x3, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x17}, {[@timestamp_prespec={0x44, 0x44, 0xcf, 0x3, 0x9, [{@multicast2, 0x7dfb}, {@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x80}, {@remote, 0xbc}, {@remote, 0x77}, {@broadcast, 0x101}, {@loopback, 0x1}, {@private=0xa010101, 0x6aa}]}, @lsrr={0x83, 0xb, 0xfa, [@loopback, @rand_addr=0x64010101]}]}}}}}) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) (async) close(r3) (async) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000800), 0x1000, 0x0) fcntl$dupfd(r3, 0x406, r5) (async) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r2}, 0x10, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="05000000000000007100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="020000c00100002382b5523d0af67100a05734300d67e1ea9db5b0354032389448d396853c8931c8f001e21816d6aaa567aaa4ea662aa9db0000000000000000000000000000e8059effe1a6c14eb2a2d2710c755085f0f397c19b782c984446cbb78cdd1395a510c8d4710800000000000000653be843a620d9c79d473cd5554c6045249668bba1d50cd04cd7381cb44403450fd952069cbe31"], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x4c860) (async) r6 = socket(0x2, 0x80802, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)) (async, rerun: 64) sendmsg$can_bcm(r6, &(0x7f00000007c0)={&(0x7f0000000400), 0x10, &(0x7f00000004c0)={&(0x7f0000000580)={0x3, 0x920, 0x5, {}, {}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x0, 0x1}, 0x25, 0x3, 0x0, 0x0, "3362f9024c636244ce9750d945f1e27bfe89d47f3e0a79168184316bf4e91d9cc12e1bd0a2167bc706406fba2e3bf125ff5c6630dcdb7384e90467daa68fdd87"}}, 0x80}, 0x1, 0x0, 0x0, 0x4080}, 0x50) (rerun: 64) 07:39:45 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f00000000c0)=0x4, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x4, 0x0, 0x0, {}, {}, {0x3}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "a7a80e1ea3468f8938edeae721a1edd6d2cdcb4c5c8e36f4af45778ef6d463a5bcc03c8ef76b636c57401dfa3fde781575da324bc0cb831f5285f6f1d418d5ef"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000190c0)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', r5, 0x4, 0x3f, 0x80, 0x0, 0x10, @empty, @ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x80, 0xaf1, 0x24be}}) [ 2341.365118][T16364] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2341.375348][T16348] FAULT_INJECTION: forcing a failure. [ 2341.375348][T16348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2341.388853][T16348] CPU: 0 PID: 16348 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2341.401284][T16348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2341.411448][T16348] Call Trace: [ 2341.413040][ T24] audit: type=1400 audit(1662449985.744:342): avc: denied { create } for pid=16345 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2341.414793][T16348] [ 2341.414801][T16348] dump_stack_lvl+0xd6/0x122 [ 2341.414829][T16348] dump_stack+0x11/0x12 [ 2341.414865][T16348] should_fail+0x242/0x250 [ 2341.450831][T16348] should_fail_usercopy+0x16/0x20 [ 2341.455936][T16348] _copy_to_user+0x1a/0x90 [ 2341.460336][T16348] rng_dev_read+0x2bd/0x630 [ 2341.464832][T16348] ? devm_hwrng_match+0x50/0x50 [ 2341.469699][T16348] vfs_read+0x198/0x560 [ 2341.473840][T16348] ? ksys_read+0x8b/0x1a0 [ 2341.478159][T16348] ? ksys_read+0xa1/0x1a0 [ 2341.482468][T16348] ? ksys_read+0xa9/0x1a0 [ 2341.486781][T16348] ksys_read+0xe8/0x1a0 [ 2341.490928][T16348] __x64_sys_read+0x3e/0x50 [ 2341.495452][T16348] do_syscall_64+0x2b/0x70 [ 2341.499860][T16348] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2341.505751][T16348] RIP: 0033:0x7f8359bbc279 [ 2341.510146][T16348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2341.529817][T16348] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2341.538291][T16348] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2341.546252][T16348] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2341.554215][T16348] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 07:39:45 executing program 4: socket$unix(0x1, 0x2, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x0, 0x8, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000600)={'sit0\x00', r1, 0x1, 0x80, 0xffffffff, 0x9, {{0x19, 0x4, 0x0, 0x3, 0x64, 0x65, 0x0, 0x3, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x17}, {[@timestamp_prespec={0x44, 0x44, 0xcf, 0x3, 0x9, [{@multicast2, 0x7dfb}, {@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x80}, {@remote, 0xbc}, {@remote, 0x77}, {@broadcast, 0x101}, {@loopback, 0x1}, {@private=0xa010101, 0x6aa}]}, @lsrr={0x83, 0xb, 0xfa, [@loopback, @rand_addr=0x64010101]}]}}}}}) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)) (async) close(r3) (async, rerun: 64) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000800), 0x1000, 0x0) (rerun: 64) fcntl$dupfd(r3, 0x406, r5) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r2}, 0x10, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="05000000000000007100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="020000c00100002382b5523d0af67100a05734300d67e1ea9db5b0354032389448d396853c8931c8f001e21816d6aaa567aaa4ea662aa9db0000000000000000000000000000e8059effe1a6c14eb2a2d2710c755085f0f397c19b782c984446cbb78cdd1395a510c8d4710800000000000000653be843a620d9c79d473cd5554c6045249668bba1d50cd04cd7381cb44403450fd952069cbe31"], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x4c860) r6 = socket(0x2, 0x80802, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)) (async, rerun: 32) sendmsg$can_bcm(r6, &(0x7f00000007c0)={&(0x7f0000000400), 0x10, &(0x7f00000004c0)={&(0x7f0000000580)={0x3, 0x920, 0x5, {}, {}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x0, 0x1}, 0x25, 0x3, 0x0, 0x0, "3362f9024c636244ce9750d945f1e27bfe89d47f3e0a79168184316bf4e91d9cc12e1bd0a2167bc706406fba2e3bf125ff5c6630dcdb7384e90467daa68fdd87"}}, 0x80}, 0x1, 0x0, 0x0, 0x4080}, 0x50) (rerun: 32) 07:39:45 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 43) 07:39:45 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) 07:39:45 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f00000000c0)=0x4, 0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x4, 0x0, 0x0, {}, {}, {0x3}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "a7a80e1ea3468f8938edeae721a1edd6d2cdcb4c5c8e36f4af45778ef6d463a5bcc03c8ef76b636c57401dfa3fde781575da324bc0cb831f5285f6f1d418d5ef"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000190c0)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', r5, 0x4, 0x3f, 0x80, 0x0, 0x10, @empty, @ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x80, 0xaf1, 0x24be}}) [ 2341.562165][T16348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2341.570205][T16348] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2341.578221][T16348] [ 2341.599603][T16370] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:39:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @loopback, 0x0, 0x1, [@empty]}, 0x14) [ 2341.638423][T16380] FAULT_INJECTION: forcing a failure. [ 2341.638423][T16380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2341.650023][T16388] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 2341.651665][T16380] CPU: 1 PID: 16380 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2341.672106][T16380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2341.682204][T16380] Call Trace: [ 2341.685485][T16380] [ 2341.688449][T16380] dump_stack_lvl+0xd6/0x122 [ 2341.693126][T16380] dump_stack+0x11/0x12 [ 2341.697327][T16380] should_fail+0x242/0x250 [ 2341.701757][T16380] should_fail_usercopy+0x16/0x20 [ 2341.706760][T16380] _copy_to_user+0x1a/0x90 [ 2341.711179][T16380] rng_dev_read+0x2bd/0x630 [ 2341.715701][T16380] ? devm_hwrng_match+0x50/0x50 [ 2341.720618][T16380] vfs_read+0x198/0x560 [ 2341.724881][T16380] ? __fget_files+0x1a7/0x1e0 [ 2341.729626][T16380] ksys_read+0xe8/0x1a0 [ 2341.733764][T16380] __x64_sys_read+0x3e/0x50 [ 2341.738288][T16380] do_syscall_64+0x2b/0x70 [ 2341.742700][T16380] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2341.749452][T16380] RIP: 0033:0x7f8359bbc279 [ 2341.753936][T16380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2341.773893][T16380] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2341.782330][T16380] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2341.790314][T16380] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2341.798287][T16380] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2341.806253][T16380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2341.814223][T16380] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2341.822231][T16380] [ 2341.828198][T16390] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 07:39:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) r1 = memfd_secret(0x0) ioctl$TUNSETGROUP(r1, 0x400454ce, 0xffffffffffffffff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x8) 07:39:52 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async, rerun: 64) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) (async) r1 = socket(0x2, 0x80802, 0x0) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f00000000c0)=0x4, 0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x4, 0x0, 0x0, {}, {}, {0x3}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "a7a80e1ea3468f8938edeae721a1edd6d2cdcb4c5c8e36f4af45778ef6d463a5bcc03c8ef76b636c57401dfa3fde781575da324bc0cb831f5285f6f1d418d5ef"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000190c0)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', r5, 0x4, 0x3f, 0x80, 0x0, 0x10, @empty, @ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x80, 0xaf1, 0x24be}}) (rerun: 32) 07:39:52 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 44) 07:39:52 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc020}, 0x8000) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) 07:39:52 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) (async) r1 = socket(0x2d, 0x2, 0x4000000) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) r4 = dup2(r0, r0) fsmount(r4, 0x1, 0x72) 07:39:52 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) socket$unix(0x1, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) (async) 07:39:52 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) (async) r1 = socket(0x2d, 0x2, 0x4000000) (async, rerun: 64) r2 = epoll_create1(0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) (async) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) (async, rerun: 64) r4 = dup2(r0, r0) (rerun: 64) fsmount(r4, 0x1, 0x72) 07:39:52 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) dup3(r0, r0, 0x80000) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) write$binfmt_elf32(r0, &(0x7f00000190c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x96, 0x1f, 0x0, 0x1, 0x2, 0x0, 0x1, 0x3bd, 0x38, 0x166, 0x3, 0x6612, 0x20, 0x1, 0xcf, 0x0, 0x15c}, [{0x3, 0x10000, 0x8000, 0x9, 0x401, 0x0, 0x1bd, 0xffff3f4e}, {0x6474e551, 0xd234, 0x2, 0x7, 0x9, 0x401, 0xff, 0x1}], "2fad9927a496d0f7907b226bf46aa4b90bbeb49d5474952c80c061bc282e4f68d42e27ac794f71399e7d1fcb7c33fe1201d7b5ac30f6ba0938c8fef90da9bb00eee98d464a350e8dcec174ec08d5d7f520b3a827a646ef97523a0c9be40da790cd8dea645ee6e68f6ee74047a29f86742ed5374cd7c1ccb433464cedd9970117e23bbfcc4bc15315660053c69f4c03ef6725e29e581c557bed38896acd48c2b1836987ba78a635ee6c48a02ae7ef8ae901f8929133f59467f3296a65a66ea84e0f285ec73a24aaabd89666ddf074cbc494f007", ['\x00']}, 0x24b) 07:39:52 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) dup3(r0, r0, 0x80000) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) write$binfmt_elf32(r0, &(0x7f00000190c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x96, 0x1f, 0x0, 0x1, 0x2, 0x0, 0x1, 0x3bd, 0x38, 0x166, 0x3, 0x6612, 0x20, 0x1, 0xcf, 0x0, 0x15c}, [{0x3, 0x10000, 0x8000, 0x9, 0x401, 0x0, 0x1bd, 0xffff3f4e}, {0x6474e551, 0xd234, 0x2, 0x7, 0x9, 0x401, 0xff, 0x1}], "2fad9927a496d0f7907b226bf46aa4b90bbeb49d5474952c80c061bc282e4f68d42e27ac794f71399e7d1fcb7c33fe1201d7b5ac30f6ba0938c8fef90da9bb00eee98d464a350e8dcec174ec08d5d7f520b3a827a646ef97523a0c9be40da790cd8dea645ee6e68f6ee74047a29f86742ed5374cd7c1ccb433464cedd9970117e23bbfcc4bc15315660053c69f4c03ef6725e29e581c557bed38896acd48c2b1836987ba78a635ee6c48a02ae7ef8ae901f8929133f59467f3296a65a66ea84e0f285ec73a24aaabd89666ddf074cbc494f007", ['\x00']}, 0x24b) 07:39:52 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) [ 2348.494506][T16404] FAULT_INJECTION: forcing a failure. [ 2348.494506][T16404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2348.508098][T16404] CPU: 0 PID: 16404 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2348.520554][T16404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2348.530703][T16404] Call Trace: [ 2348.533990][T16404] [ 2348.536942][T16404] dump_stack_lvl+0xd6/0x122 07:39:52 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) dup3(r0, r0, 0x80000) (async) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) (async) write$binfmt_elf32(r0, &(0x7f00000190c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x96, 0x1f, 0x0, 0x1, 0x2, 0x0, 0x1, 0x3bd, 0x38, 0x166, 0x3, 0x6612, 0x20, 0x1, 0xcf, 0x0, 0x15c}, [{0x3, 0x10000, 0x8000, 0x9, 0x401, 0x0, 0x1bd, 0xffff3f4e}, {0x6474e551, 0xd234, 0x2, 0x7, 0x9, 0x401, 0xff, 0x1}], "2fad9927a496d0f7907b226bf46aa4b90bbeb49d5474952c80c061bc282e4f68d42e27ac794f71399e7d1fcb7c33fe1201d7b5ac30f6ba0938c8fef90da9bb00eee98d464a350e8dcec174ec08d5d7f520b3a827a646ef97523a0c9be40da790cd8dea645ee6e68f6ee74047a29f86742ed5374cd7c1ccb433464cedd9970117e23bbfcc4bc15315660053c69f4c03ef6725e29e581c557bed38896acd48c2b1836987ba78a635ee6c48a02ae7ef8ae901f8929133f59467f3296a65a66ea84e0f285ec73a24aaabd89666ddf074cbc494f007", ['\x00']}, 0x24b) 07:39:52 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) socket$unix(0x1, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) (async) [ 2348.541557][T16404] dump_stack+0x11/0x12 [ 2348.545795][T16404] should_fail+0x242/0x250 [ 2348.550224][T16404] should_fail_usercopy+0x16/0x20 [ 2348.555257][T16404] _copy_to_user+0x1a/0x90 [ 2348.559705][T16404] rng_dev_read+0x2bd/0x630 [ 2348.564395][T16404] ? devm_hwrng_match+0x50/0x50 [ 2348.569328][T16404] vfs_read+0x198/0x560 [ 2348.573628][T16404] ksys_read+0xe8/0x1a0 [ 2348.577796][T16404] __x64_sys_read+0x3e/0x50 [ 2348.582311][T16404] do_syscall_64+0x2b/0x70 [ 2348.586823][T16404] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2348.592731][T16404] RIP: 0033:0x7f8359bbc279 [ 2348.597153][T16404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2348.616903][T16404] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2348.625314][T16404] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2348.633288][T16404] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2348.642714][T16404] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2348.650760][T16404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2348.658780][T16404] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2348.666839][T16404] 07:40:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r3 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r3, r4, &(0x7f0000000240)=0x208, 0x9) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r5, @ANYBLOB="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", @ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'netdevsim0\x00', 0x1000}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) 07:40:01 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) 07:40:01 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r2 = socket(0x2, 0x80802, 0x0) r3 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000019140)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r5 = socket(0x2, 0x80802, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000019180)={{0x1, 0x1, 0x18, r7, {0x5}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) sendmsg$nl_route_sched(r2, &(0x7f0000019100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000190c0)={&(0x7f0000000040)=@delqdisc={0x24, 0x25, 0x4, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x8}, {0x16, 0xe}, {0xc, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0xd4}, 0x800) read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) 07:40:01 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 45) 07:40:01 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) 07:40:01 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc020}, 0x8000) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) 07:40:01 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r2 = socket(0x2, 0x80802, 0x0) r3 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000019140)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r5 = socket(0x2, 0x80802, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000019180)={{0x1, 0x1, 0x18, r7, {0x5}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) sendmsg$nl_route_sched(r2, &(0x7f0000019100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000190c0)={&(0x7f0000000040)=@delqdisc={0x24, 0x25, 0x4, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x8}, {0x16, 0xe}, {0xc, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0xd4}, 0x800) read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (async) socket(0x2, 0x80802, 0x0) (async) epoll_create1(0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000019140)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) (async) socket(0x2, 0x80802, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000000)) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000019180)={{0x1, 0x1, 0x18, r7, {0x5}}, './file0\x00'}) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) (async) sendmsg$nl_route_sched(r2, &(0x7f0000019100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000190c0)={&(0x7f0000000040)=@delqdisc={0x24, 0x25, 0x4, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x8}, {0x16, 0xe}, {0xc, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0xd4}, 0x800) (async) read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) (async) 07:40:01 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (async) r2 = socket(0x2, 0x80802, 0x0) (async) r3 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000019140)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) (async) r5 = socket(0x2, 0x80802, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000019180)={{0x1, 0x1, 0x18, r7, {0x5}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) sendmsg$nl_route_sched(r2, &(0x7f0000019100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000190c0)={&(0x7f0000000040)=@delqdisc={0x24, 0x25, 0x4, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x8}, {0x16, 0xe}, {0xc, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0xd4}, 0x800) (async) read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) 07:40:01 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = socket$can_j1939(0x1d, 0x2, 0x7) dup2(r0, r1) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r2, &(0x7f00000000c0)=""/102400, 0x19000) r3 = socket(0x2, 0x80802, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f00000190c0)={'erspan0\x00', 0x0, 0x80, 0x8000, 0x0, 0x7, {{0x3b, 0x4, 0x0, 0x2, 0xec, 0x68, 0x0, 0x5, 0x2f, 0x0, @empty, @loopback, {[@cipso={0x86, 0x41, 0x3, [{0x1, 0xe, "5635ed249b1a6355f4fe99b1"}, {0x1, 0xb, "14703371383a63e578"}, {0x0, 0x10, "ee56da45f972c1ccc112741a3f29"}, {0x7, 0x5, "eb8602"}, {0x5, 0xd, "5b0a3f31744068f702d8bd"}]}, @rr={0x7, 0x7, 0xbd, [@local]}, @end, @timestamp_prespec={0x44, 0x3c, 0xa, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x1d}, 0x81}, {@multicast1, 0x6}, {@local, 0x4}, {@multicast1, 0x93}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x19a}, {@rand_addr=0x64010102, 0x3e664dde}]}, @generic={0x94, 0xe, "e39a9c2369e0f1516159a391"}, @timestamp_prespec={0x44, 0x44, 0x6, 0x3, 0x8, [{@rand_addr=0x64010101, 0x1000}, {@loopback, 0x2}, {@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x3}, {@broadcast, 0x10001}, {@local, 0x6}, {@multicast1, 0x1000}, {@rand_addr=0x64010102, 0x1}]}]}}}}}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r5, 0x0, {0x0, 0xe, 0x1}}, 0x18) 07:40:01 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = socket$can_j1939(0x1d, 0x2, 0x7) dup2(r0, r1) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r2, &(0x7f00000000c0)=""/102400, 0x19000) r3 = socket(0x2, 0x80802, 0x0) (async) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f00000190c0)={'erspan0\x00', 0x0, 0x80, 0x8000, 0x0, 0x7, {{0x3b, 0x4, 0x0, 0x2, 0xec, 0x68, 0x0, 0x5, 0x2f, 0x0, @empty, @loopback, {[@cipso={0x86, 0x41, 0x3, [{0x1, 0xe, "5635ed249b1a6355f4fe99b1"}, {0x1, 0xb, "14703371383a63e578"}, {0x0, 0x10, "ee56da45f972c1ccc112741a3f29"}, {0x7, 0x5, "eb8602"}, {0x5, 0xd, "5b0a3f31744068f702d8bd"}]}, @rr={0x7, 0x7, 0xbd, [@local]}, @end, @timestamp_prespec={0x44, 0x3c, 0xa, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x1d}, 0x81}, {@multicast1, 0x6}, {@local, 0x4}, {@multicast1, 0x93}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x19a}, {@rand_addr=0x64010102, 0x3e664dde}]}, @generic={0x94, 0xe, "e39a9c2369e0f1516159a391"}, @timestamp_prespec={0x44, 0x44, 0x6, 0x3, 0x8, [{@rand_addr=0x64010101, 0x1000}, {@loopback, 0x2}, {@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x3}, {@broadcast, 0x10001}, {@local, 0x6}, {@multicast1, 0x1000}, {@rand_addr=0x64010102, 0x1}]}]}}}}}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r5, 0x0, {0x0, 0xe, 0x1}}, 0x18) 07:40:01 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = socket$can_j1939(0x1d, 0x2, 0x7) dup2(r0, r1) (async) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r2, &(0x7f00000000c0)=""/102400, 0x19000) (async) r3 = socket(0x2, 0x80802, 0x0) (async) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f00000190c0)={'erspan0\x00', 0x0, 0x80, 0x8000, 0x0, 0x7, {{0x3b, 0x4, 0x0, 0x2, 0xec, 0x68, 0x0, 0x5, 0x2f, 0x0, @empty, @loopback, {[@cipso={0x86, 0x41, 0x3, [{0x1, 0xe, "5635ed249b1a6355f4fe99b1"}, {0x1, 0xb, "14703371383a63e578"}, {0x0, 0x10, "ee56da45f972c1ccc112741a3f29"}, {0x7, 0x5, "eb8602"}, {0x5, 0xd, "5b0a3f31744068f702d8bd"}]}, @rr={0x7, 0x7, 0xbd, [@local]}, @end, @timestamp_prespec={0x44, 0x3c, 0xa, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x1d}, 0x81}, {@multicast1, 0x6}, {@local, 0x4}, {@multicast1, 0x93}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x19a}, {@rand_addr=0x64010102, 0x3e664dde}]}, @generic={0x94, 0xe, "e39a9c2369e0f1516159a391"}, @timestamp_prespec={0x44, 0x44, 0x6, 0x3, 0x8, [{@rand_addr=0x64010101, 0x1000}, {@loopback, 0x2}, {@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x3}, {@broadcast, 0x10001}, {@local, 0x6}, {@multicast1, 0x1000}, {@rand_addr=0x64010102, 0x1}]}]}}}}}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r5, 0x0, {0x0, 0xe, 0x1}}, 0x18) [ 2356.914912][T16450] FAULT_INJECTION: forcing a failure. [ 2356.914912][T16450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2356.928377][T16450] CPU: 0 PID: 16450 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2356.940831][T16450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2356.950930][T16450] Call Trace: [ 2356.954217][T16450] [ 2356.957156][T16450] dump_stack_lvl+0xd6/0x122 07:40:01 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000019140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000019100)={&(0x7f00000190c0)=@newtclass={0x2c, 0x28, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x2, 0xe}, {0x6, 0x4}, {0xffff, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x3, 0x1}, 0x20) accept(r0, &(0x7f0000019180)=@in={0x2, 0x0, @broadcast}, &(0x7f0000019200)=0x80) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r2, &(0x7f00000000c0)=""/102400, 0x19000) [ 2356.961829][T16450] dump_stack+0x11/0x12 [ 2356.966075][T16450] should_fail+0x242/0x250 [ 2356.970511][T16450] should_fail_usercopy+0x16/0x20 [ 2356.975584][T16450] _copy_to_user+0x1a/0x90 [ 2356.980150][T16450] rng_dev_read+0x2bd/0x630 [ 2356.984667][T16450] ? devm_hwrng_match+0x50/0x50 [ 2356.989542][T16450] vfs_read+0x198/0x560 [ 2356.993741][T16450] ? __fdget_pos+0x115/0x1a0 [ 2356.998323][T16450] ? __tsan_read4+0x11c/0x180 [ 2357.002991][T16450] ksys_read+0xe8/0x1a0 [ 2357.007211][T16450] __x64_sys_read+0x3e/0x50 [ 2357.011707][T16450] do_syscall_64+0x2b/0x70 [ 2357.016181][T16450] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2357.022076][T16450] RIP: 0033:0x7f8359bbc279 [ 2357.026486][T16450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2357.046236][T16450] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2357.054635][T16450] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2357.062601][T16450] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2357.070569][T16450] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2357.078523][T16450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2357.086475][T16450] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2357.094457][T16450] 07:40:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) r3 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r3, r4, &(0x7f0000000240)=0x208, 0x9) (async) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r5, @ANYBLOB="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", @ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'netdevsim0\x00', 0x1000}) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) 07:40:08 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000019140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000019100)={&(0x7f00000190c0)=@newtclass={0x2c, 0x28, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x2, 0xe}, {0x6, 0x4}, {0xffff, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x3, 0x1}, 0x20) accept(r0, &(0x7f0000019180)=@in={0x2, 0x0, @broadcast}, &(0x7f0000019200)=0x80) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r2, &(0x7f00000000c0)=""/102400, 0x19000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000019140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000019100)={&(0x7f00000190c0)=@newtclass={0x2c, 0x28, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x2, 0xe}, {0x6, 0x4}, {0xffff, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x10) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x3, 0x1}, 0x20) (async) accept(r0, &(0x7f0000019180)=@in={0x2, 0x0, @broadcast}, &(0x7f0000019200)=0x80) (async) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (async) read$char_usb(r2, &(0x7f00000000c0)=""/102400, 0x19000) (async) 07:40:08 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 46) 07:40:08 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) (async) 07:40:08 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) 07:40:08 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc020}, 0x8000) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) 07:40:08 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000019140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000019100)={&(0x7f00000190c0)=@newtclass={0x2c, 0x28, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x2, 0xe}, {0x6, 0x4}, {0xffff, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x3, 0x1}, 0x20) accept(r0, &(0x7f0000019180)=@in={0x2, 0x0, @broadcast}, &(0x7f0000019200)=0x80) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r2, &(0x7f00000000c0)=""/102400, 0x19000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000019140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000019100)={&(0x7f00000190c0)=@newtclass={0x2c, 0x28, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x2, 0xe}, {0x6, 0x4}, {0xffff, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x81, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x10) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x3, 0x1}, 0x20) (async) accept(r0, &(0x7f0000019180)=@in={0x2, 0x0, @broadcast}, &(0x7f0000019200)=0x80) (async) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (async) read$char_usb(r2, &(0x7f00000000c0)=""/102400, 0x19000) (async) 07:40:08 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = socket$isdn_base(0x22, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f00000190c0)={'syz1', "f43a6714a21988c10287ea61cbf9d362f8326925467408c117a973b16310f32f1630ce301ce7ec2e9e056a6d1e8b8a7056ef880264dff065d6271745b9fe233b287623e59194a9c1d83c090298f181a43e90587f997f65164d2bc340b54c9a04927e704d07c0e1c0d3a0915d31bb0a149359affccb5a022b390e4538cc51135625c3b65d65f0d3d48adc6632f2402d87514897424826"}, 0x9a) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r2 = socket(0x2, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @loopback}}, 0x14) read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) [ 2364.010633][T16493] FAULT_INJECTION: forcing a failure. [ 2364.010633][T16493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2364.024822][T16493] CPU: 0 PID: 16493 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2364.031491][ T24] audit: type=1400 audit(1662450008.364:343): avc: denied { write } for pid=16509 comm="syz-executor.0" path="socket:[57308]" dev="sockfs" ino=57308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 07:40:08 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) r0 = socket$isdn_base(0x22, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f00000190c0)={'syz1', "f43a6714a21988c10287ea61cbf9d362f8326925467408c117a973b16310f32f1630ce301ce7ec2e9e056a6d1e8b8a7056ef880264dff065d6271745b9fe233b287623e59194a9c1d83c090298f181a43e90587f997f65164d2bc340b54c9a04927e704d07c0e1c0d3a0915d31bb0a149359affccb5a022b390e4538cc51135625c3b65d65f0d3d48adc6632f2402d87514897424826"}, 0x9a) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (async) r2 = socket(0x2, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) (async) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @loopback}}, 0x14) (async, rerun: 64) read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) (rerun: 64) 07:40:08 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) [ 2364.037273][T16493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2364.037286][T16493] Call Trace: [ 2364.037292][T16493] [ 2364.070996][T16493] dump_stack_lvl+0xd6/0x122 [ 2364.071027][T16493] dump_stack+0x11/0x12 [ 2364.086144][T16493] should_fail+0x242/0x250 [ 2364.090631][T16493] should_fail_usercopy+0x16/0x20 [ 2364.095685][T16493] _copy_to_user+0x1a/0x90 [ 2364.100127][T16493] rng_dev_read+0x2bd/0x630 [ 2364.104630][T16493] ? devm_hwrng_match+0x50/0x50 07:40:08 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = socket$isdn_base(0x22, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f00000190c0)={'syz1', "f43a6714a21988c10287ea61cbf9d362f8326925467408c117a973b16310f32f1630ce301ce7ec2e9e056a6d1e8b8a7056ef880264dff065d6271745b9fe233b287623e59194a9c1d83c090298f181a43e90587f997f65164d2bc340b54c9a04927e704d07c0e1c0d3a0915d31bb0a149359affccb5a022b390e4538cc51135625c3b65d65f0d3d48adc6632f2402d87514897424826"}, 0x9a) (async) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (async) r2 = socket(0x2, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) (async) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @loopback}}, 0x14) (async) read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) 07:40:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000019100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000190c0)={&(0x7f0000000040)={0x2c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8005}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r3 = accept4$inet(r1, &(0x7f0000019140)={0x2, 0x0, @broadcast}, &(0x7f0000019180)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000191c0)={0x5, 0x20, 0x87, 0x4}, 0x8) read$char_usb(r2, &(0x7f00000000c0)=""/102400, 0x19000) [ 2364.104695][T16493] vfs_read+0x198/0x560 [ 2364.113682][T16493] ? __fget_files+0x1a7/0x1e0 [ 2364.118411][T16493] ksys_read+0xe8/0x1a0 [ 2364.122601][T16493] __x64_sys_read+0x3e/0x50 [ 2364.127121][T16493] do_syscall_64+0x2b/0x70 [ 2364.131657][T16493] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2364.137638][T16493] RIP: 0033:0x7f8359bbc279 [ 2364.142092][T16493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2364.161714][T16493] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2364.170251][T16493] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2364.178225][T16493] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2364.186204][T16493] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2364.194173][T16493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2364.202192][T16493] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2364.210152][T16493] 07:40:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r3 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r3, r4, &(0x7f0000000240)=0x208, 0x9) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r5, @ANYBLOB="00022dbd7000fedbdf250300000008000400e0000002c4bd4572333c6ec1b1fd5b8b01f7dfe7e3996772fc12b05b245ee1735be6071e583078abc90d94248538991e5fcf2dc96a8ed8defc60b1c608a1b8eecc0a2fc4dc983e0d29b79f0878db3b8c92ae16b7e3db182d2fcdd95c9d3422c0bb84dac0de0b39d3e19fbcfded53530b06b41c68baa2cc58db4e2166ce7a610000ffedff581bd7ba9d2c6aafce42270343107f695871e73e8bd41867ef145a9223bdb122aa29464c36aca08d609c170b21843de1ec2611cdb8f19b7f05e8296b2947cfac6543c3319cae2f62a524d8665397a63bb405c0a3eed31cc7b54e64e076b025cce944a1616177bc9d1b0bf31380fd81f762a446c31f9aaa1622b12fafd1a2c4f9779b44301d3de5fcd3eacec73ed41f6c882834e8a6ce1e036126446de3b839b2e3fb6707cf1bb64273b2d44b03360e9f209d2f005c9cca77f60d26d55ff7dd4f365ea86dc72279c9e9218ab09869cdbb2e5cb0a9c7f9e3cd20544feb15def710480227f681e9fb37dfd4186b4657d49c0d35ec2d5cc24b69568678fe1f70d361b88080", @ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'netdevsim0\x00', 0x1000}) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) 07:40:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000019100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000190c0)={&(0x7f0000000040)={0x2c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8005}, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') r3 = accept4$inet(r1, &(0x7f0000019140)={0x2, 0x0, @broadcast}, &(0x7f0000019180)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000191c0)={0x5, 0x20, 0x87, 0x4}, 0x8) (async) read$char_usb(r2, &(0x7f00000000c0)=""/102400, 0x19000) 07:40:18 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 47) 07:40:18 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) 07:40:18 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) 07:40:18 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc020}, 0x8000) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000019180)=""/102395, 0x18ffb) 07:40:18 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000019100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000190c0)={&(0x7f0000000040)={0x2c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8005}, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async, rerun: 32) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (rerun: 32) r3 = accept4$inet(r1, &(0x7f0000019140)={0x2, 0x0, @broadcast}, &(0x7f0000019180)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000191c0)={0x5, 0x20, 0x87, 0x4}, 0x8) (async, rerun: 32) read$char_usb(r2, &(0x7f00000000c0)=""/102400, 0x19000) (rerun: 32) 07:40:18 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc020}, 0x8000) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000019180)=""/102395, 0x18ffb) 07:40:18 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0xb}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) 07:40:18 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0xb}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0xb}, 0x20) (async) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (async) read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) (async) 07:40:18 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0xb}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0xb}, 0x20) (async) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (async) read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) (async) [ 2374.429560][T16549] FAULT_INJECTION: forcing a failure. [ 2374.429560][T16549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2374.443003][T16549] CPU: 1 PID: 16549 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2374.455500][T16549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2374.465591][T16549] Call Trace: [ 2374.468881][T16549] [ 2374.471836][T16549] dump_stack_lvl+0xd6/0x122 07:40:18 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x0, 0x1, 0x200}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) [ 2374.476635][T16549] dump_stack+0x11/0x12 [ 2374.482666][T16549] should_fail+0x242/0x250 [ 2374.487096][T16549] should_fail_usercopy+0x16/0x20 [ 2374.492180][T16549] _copy_to_user+0x1a/0x90 [ 2374.496709][T16549] rng_dev_read+0x2bd/0x630 [ 2374.501339][T16549] ? devm_hwrng_match+0x50/0x50 [ 2374.506208][T16549] vfs_read+0x198/0x560 [ 2374.510376][T16549] ? __fget_files+0x1a7/0x1e0 [ 2374.515042][T16549] ksys_read+0xe8/0x1a0 [ 2374.519184][T16549] __x64_sys_read+0x3e/0x50 [ 2374.523729][T16549] do_syscall_64+0x2b/0x70 [ 2374.528132][T16549] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2374.534146][T16549] RIP: 0033:0x7f8359bbc279 [ 2374.538748][T16549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2374.558469][T16549] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2374.566894][T16549] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2374.574858][T16549] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2374.582846][T16549] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2374.590834][T16549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2374.599356][T16549] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2374.607319][T16549] 07:40:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='macvtap0\x00') r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c057ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c526be83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@x25, 0x80, &(0x7f0000000100)=[{&(0x7f0000000300)="5542079e4d9f190d2eddb71efbe7fe018ad4a2a7a77c59e3864ed8387ba879a9385deed8455cd6508177dd453a17ca7d44a2fa672c13b4ae9a8519fba1d95afb9d92bf3274d58101c3eeafcd50f92bea8602534e10768b2e7e7d5e881b69b33a0d0e9a64", 0x64}, {&(0x7f0000000380)="46d91cbbf86dca1c9f498c39b474fad4df03d0d38499fda1ebac019391c553bfe1ff15235584189e9c5687ee6e73ece7940dcda6ef62e125025dd11e60f528de67c069a937da53af80a8cf2d54e5f489b608330ed36df83f08f96d8c39b579ac14f784c5aca4b57eecb5141ed685a9249c18f7c8efc2938b6a8fd2d3d7fc559c4995685f543168cf0b85116ebb454a7fcf650dbc5c8a2cdfbe122e01b4843b1c7f3a6c6f67d6b60b", 0xa8}], 0x2, &(0x7f0000000680)=[{0x108, 0x52abc53f314eb957, 0x8, "b1e4ff329e9fc881c897560e47e0bdfabb457b965c03acd904481ba82b017dd21d54ff48d781de3446d99e762895c48a2e312fd68f4fab1cb810f3d0e1bb746aa4c5d586892fce592f2568fb40aa4fcdfb0808b3cb7f664c8097718a68f43d3c707f32269dcd68e51a49b9fd8b93e363d75bd20af07117949aecd67fdcf2dc0ddbc23c0c311b0ed4fbe6ae46c80682e1e7ee68a92d263f15898615f900ab4d886cc93b88be9603fbd34a5f67a87da5c677f410052e5679efaa2a205ba5fac8d18d48232d94cbf0da0961d663f19d38b7e239ed15f06034d08fe4d9ab0d8ebb8bda0f4e1e686aff67c115be19290c781c6528b0e1b1a9b93a"}, {0xe8, 0xff, 0xf7, "b2b2b8704991278c71072cef5a075a746cfc837603420d968bdfe953a30a629a1a52f57c570e062d57780bf4837075a76ddfaaa06cfe2e78df7f0f6bf6061d942cd1564969582a00ffbe7293668bc3d7105dd17500ac7f4c828e838848a482b1ec296e3f91dc6dc20be0d182768749af6a40c7cf122dfd689711acde04b1b6cea883314909706ed742caa1a95ed4ed2792336f5de57171ddc545640afd50a2a2b73bc0a49a432f5cd31d6646f636e6dbd14bcfb86fce1e3f6b78502a607595fbb22fe90bb4fdea025abb1d1e55a5e6bf84"}], 0x1f0}, 0x4000008) r3 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r3, r4, &(0x7f0000000240)=0x208, 0x9) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r5, @ANYBLOB="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", @ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x737a4ae3eeaa24c) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) 07:40:25 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc020}, 0x8000) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000019180)=""/102395, 0x18ffb) 07:40:25 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x0, 0x1, 0x200}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x0, 0x1, 0x200}, 0x20) (async) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (async) read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) (async) 07:40:25 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 48) 07:40:25 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r2, &(0x7f0000019180)=""/102395, 0x18ffb) dup2(r0, r1) 07:40:25 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) 07:40:25 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc020}, 0x8000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) 07:40:25 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x0, 0x1, 0x200}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) [ 2381.539948][T16590] FAULT_INJECTION: forcing a failure. [ 2381.539948][T16590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2381.553432][T16590] CPU: 0 PID: 16590 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2381.565858][T16590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2381.575954][T16590] Call Trace: [ 2381.579235][T16590] [ 2381.582163][T16590] dump_stack_lvl+0xd6/0x122 [ 2381.586758][T16590] dump_stack+0x11/0x12 [ 2381.590988][T16590] should_fail+0x242/0x250 [ 2381.595411][T16590] should_fail_usercopy+0x16/0x20 [ 2381.600425][T16590] _copy_to_user+0x1a/0x90 [ 2381.604844][T16590] rng_dev_read+0x2bd/0x630 [ 2381.609457][T16590] ? devm_hwrng_match+0x50/0x50 [ 2381.614299][T16590] vfs_read+0x198/0x560 [ 2381.618459][T16590] ? __fget_files+0x1a7/0x1e0 [ 2381.623219][T16590] ksys_read+0xe8/0x1a0 [ 2381.627445][T16590] __x64_sys_read+0x3e/0x50 [ 2381.631946][T16590] do_syscall_64+0x2b/0x70 [ 2381.636363][T16590] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2381.642472][T16590] RIP: 0033:0x7f8359bbc279 [ 2381.646876][T16590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2381.666690][T16590] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2381.675108][T16590] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 07:40:25 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000190c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524d060024460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc480c35c88995abdab693a2dcbbfb591b34ea0d6f34a776b3638c1cab3a36b9df9bf6aec71ea129aeb78b3195c"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r1, r2, &(0x7f0000000240)=0x208, 0x9) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r3, @ANYBLOB="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", @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) r4 = socket(0x2, 0x80802, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x99, 0x0, 0xff, 0x8, 0x2, 0xfff8}, 0x20) write$P9_RLERROR(r2, &(0x7f0000000000)={0xe, 0x7, 0x1, {0x5, '.^&#['}}, 0xe) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x6753, 0x2, 0x1, 0x1}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r6, &(0x7f00000000c0)=""/102400, 0x19000) 07:40:26 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 49) 07:40:26 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000190c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524d060024460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc480c35c88995abdab693a2dcbbfb591b34ea0d6f34a776b3638c1cab3a36b9df9bf6aec71ea129aeb78b3195c"], 0x8) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) r1 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r1, r2, &(0x7f0000000240)=0x208, 0x9) (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r3, @ANYBLOB="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", @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) (async) r4 = socket(0x2, 0x80802, 0x0) (async, rerun: 64) r5 = epoll_create1(0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x99, 0x0, 0xff, 0x8, 0x2, 0xfff8}, 0x20) write$P9_RLERROR(r2, &(0x7f0000000000)={0xe, 0x7, 0x1, {0x5, '.^&#['}}, 0xe) (async, rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x6753, 0x2, 0x1, 0x1}, 0x20) (rerun: 32) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r6, &(0x7f00000000c0)=""/102400, 0x19000) 07:40:26 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000190c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524d060024460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc480c35c88995abdab693a2dcbbfb591b34ea0d6f34a776b3638c1cab3a36b9df9bf6aec71ea129aeb78b3195c"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r1, r2, &(0x7f0000000240)=0x208, 0x9) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r3, @ANYBLOB="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", @ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) (async) r4 = socket(0x2, 0x80802, 0x0) (async, rerun: 32) r5 = epoll_create1(0x0) (rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x99, 0x0, 0xff, 0x8, 0x2, 0xfff8}, 0x20) (async, rerun: 32) write$P9_RLERROR(r2, &(0x7f0000000000)={0xe, 0x7, 0x1, {0x5, '.^&#['}}, 0xe) (async, rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x6753, 0x2, 0x1, 0x1}, 0x20) (async) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r6, &(0x7f00000000c0)=""/102400, 0x19000) [ 2381.683070][T16590] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2381.691037][T16590] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2381.699158][T16590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2381.707131][T16590] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2381.715095][T16590] [ 2381.779911][T16604] FAULT_INJECTION: forcing a failure. [ 2381.779911][T16604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2381.793405][T16604] CPU: 1 PID: 16604 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2381.805941][T16604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2381.815997][T16604] Call Trace: [ 2381.819262][T16604] [ 2381.822179][T16604] dump_stack_lvl+0xd6/0x122 [ 2381.826767][T16604] dump_stack+0x11/0x12 [ 2381.830911][T16604] should_fail+0x242/0x250 [ 2381.835354][T16604] should_fail_usercopy+0x16/0x20 [ 2381.840390][T16604] _copy_to_user+0x1a/0x90 [ 2381.844823][T16604] rng_dev_read+0x2bd/0x630 [ 2381.849325][T16604] ? devm_hwrng_match+0x50/0x50 [ 2381.854245][T16604] vfs_read+0x198/0x560 [ 2381.858391][T16604] ? __fget_files+0x1a7/0x1e0 [ 2381.863136][T16604] ksys_read+0xe8/0x1a0 [ 2381.867300][T16604] __x64_sys_read+0x3e/0x50 [ 2381.871798][T16604] do_syscall_64+0x2b/0x70 [ 2381.876199][T16604] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2381.882085][T16604] RIP: 0033:0x7f8359bbc279 [ 2381.886492][T16604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2381.906087][T16604] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2381.914480][T16604] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2381.922434][T16604] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2381.930485][T16604] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2381.938500][T16604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2381.946517][T16604] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2381.954482][T16604] 07:40:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) r1 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='macvtap0\x00') (async, rerun: 32) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c057ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c526be83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@x25, 0x80, &(0x7f0000000100)=[{&(0x7f0000000300)="5542079e4d9f190d2eddb71efbe7fe018ad4a2a7a77c59e3864ed8387ba879a9385deed8455cd6508177dd453a17ca7d44a2fa672c13b4ae9a8519fba1d95afb9d92bf3274d58101c3eeafcd50f92bea8602534e10768b2e7e7d5e881b69b33a0d0e9a64", 0x64}, {&(0x7f0000000380)="46d91cbbf86dca1c9f498c39b474fad4df03d0d38499fda1ebac019391c553bfe1ff15235584189e9c5687ee6e73ece7940dcda6ef62e125025dd11e60f528de67c069a937da53af80a8cf2d54e5f489b608330ed36df83f08f96d8c39b579ac14f784c5aca4b57eecb5141ed685a9249c18f7c8efc2938b6a8fd2d3d7fc559c4995685f543168cf0b85116ebb454a7fcf650dbc5c8a2cdfbe122e01b4843b1c7f3a6c6f67d6b60b", 0xa8}], 0x2, &(0x7f0000000680)=[{0x108, 0x52abc53f314eb957, 0x8, "b1e4ff329e9fc881c897560e47e0bdfabb457b965c03acd904481ba82b017dd21d54ff48d781de3446d99e762895c48a2e312fd68f4fab1cb810f3d0e1bb746aa4c5d586892fce592f2568fb40aa4fcdfb0808b3cb7f664c8097718a68f43d3c707f32269dcd68e51a49b9fd8b93e363d75bd20af07117949aecd67fdcf2dc0ddbc23c0c311b0ed4fbe6ae46c80682e1e7ee68a92d263f15898615f900ab4d886cc93b88be9603fbd34a5f67a87da5c677f410052e5679efaa2a205ba5fac8d18d48232d94cbf0da0961d663f19d38b7e239ed15f06034d08fe4d9ab0d8ebb8bda0f4e1e686aff67c115be19290c781c6528b0e1b1a9b93a"}, {0xe8, 0xff, 0xf7, "b2b2b8704991278c71072cef5a075a746cfc837603420d968bdfe953a30a629a1a52f57c570e062d57780bf4837075a76ddfaaa06cfe2e78df7f0f6bf6061d942cd1564969582a00ffbe7293668bc3d7105dd17500ac7f4c828e838848a482b1ec296e3f91dc6dc20be0d182768749af6a40c7cf122dfd689711acde04b1b6cea883314909706ed742caa1a95ed4ed2792336f5de57171ddc545640afd50a2a2b73bc0a49a432f5cd31d6646f636e6dbd14bcfb86fce1e3f6b78502a607595fbb22fe90bb4fdea025abb1d1e55a5e6bf84"}], 0x1f0}, 0x4000008) (async) r3 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) (async) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r3, r4, &(0x7f0000000240)=0x208, 0x9) (async, rerun: 32) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) (rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r5, @ANYBLOB="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", @ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) (async) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x737a4ae3eeaa24c) (async) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) 07:40:35 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000196c0)={@empty, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000019680), 0x410680, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1b, &(0x7f0000000040), 0x5b) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000019640)=0xffff, 0x1) read$char_usb(r2, &(0x7f00000000c0)=""/102400, 0x19000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000019540)=[{&(0x7f0000000000)="fc374b591bf012b4be9c124f214a99af4743c2aead535fbef0850519f99cfb68c29eab295a5d", 0x26}, {&(0x7f00000190c0)="7db52304a4dd88a9afbd2d7ca9b1d970416111ea4de9d8b0cb5b36afcd49b0df5110525097599c7fc93561e59cb41a11805986cae012e3f0219aca18e4cd88f0d4c8bbdb8420081899e37b0623649f67749d77855abdbaa5b15cfe67adc8a0b362ba6cb922156a9fb5e29634cc1f9e4e5a991651f3ec3829a395cf70a4b6788542f6c8b323db6e98b2000d7548e182f680780a73c1b120f9ea416f587c45311f37b4b0f8a257caaec6e19ad0fae313834d2aa8f313bacd8290fc7b1de3a14f8691c9efc9d5700ca62a4c57001f4a3f4958a92eb7aba30279c998cc985654", 0xde}, {&(0x7f00000191c0)="e1b28f070f7e45eb8ab169466c394c18a418679365e6802477dc52d7595db1544ac5812423483a95fbf9508ca9e101e27f2da084e9efa5e7a572e96f233aa94cfbae40cdd7e75705f37c191361407c09633bb145c9ecac6e24cb707368617b9c1f52935f9f554b4ac4be620f79b5b534b03fffb8e8699a3f94a2dab042c630a2cf721dd0505fae9f", 0x88}, {&(0x7f0000019280)="f080e8bb74d552602243f12aac71a2662f2fd9050fb6b54e71337756ea33fedee16da9e9b8f41cd741318cff2af780d0d1d17bdcb42ce245a08d71d68a9d90102f6f8fa88b6eed72c256fb354bc0a004bc6bcd261e39a25c0c70d6641cc4d112e545053d0a2b6dc75796aeaa23621d7ab2811fd68d53dbbe3305", 0x7a}, {&(0x7f0000019300)="08b6361e3f828e12d42332286a5e7394e6437d200f7ff0a2a71b82539f51092e2acd16d50879e727ff0836b1fe4e852835e228affec04aaa8697a82f5cd15416f10824f9b3503129c7e3b980f4d41ea25e0e6d2cc81fdd8e5885864bf4112f6f1dd21fd03159e680b618ef8ec762f3f7731e1c552b57326a58b5e3dc409118576c114c8b89b20891b4b9c007a9012a09d6", 0x91}, {&(0x7f00000193c0)="a1603accc726eababfc2ba5f0d573e1a4941595e95819660542399f0b44be2ac6a5d7eb274d0a1f74a4a25e3a6fda3357038ef7a2bb23c035b32223389043ed8d022f163f7270f872cf5b118e2f46d235bba28c0358a9648449a7af9ec3476c85eca4733d2df90a3c52f60aa30d7665c3478a04e98c69d7054ff86760061327b505eba42c2ccc589f21825542eb63d613492cc1a4a9b2f3c2121e105a947b0b8248e0bb116c8dda7bda578d17f350272ef4719f3d93e434b31d59bede38a5e784829d9", 0xc3}, {&(0x7f00000194c0)="eac8ff3abfa953c754d965143882a7c019eb327535a74b6fa9782ee3ae3146383d12d702f7eff1c4abc6362c39b298f839cdcbe678beca55806fc633ff0340f48798ee00061d86f026b6041d699e07786bb4a66b31de", 0x56}], 0x7, &(0x7f00000195c0)=ANY=[@ANYBLOB="580000000000000029000000390000006c08020700000000fc010000000000000000000000000001fe880000000000000000000000000001fe8000000000000000000000000000bbfe8800000000000000000000000000011400000000000000290000003e00000031adacf700748a00"], 0x70}, 0x10) 07:40:35 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 50) 07:40:35 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f00000190c0)=""/102400, 0x19000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getflags(r1, 0x1) 07:40:35 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc020}, 0x8000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) 07:40:35 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r2, &(0x7f0000019180)=""/102395, 0x18ffb) dup2(r0, r1) 07:40:35 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r2, &(0x7f0000019180)=""/102395, 0x18ffb) dup2(r0, r1) socket$unix(0x1, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$char_usb(r2, &(0x7f0000019180)=""/102395, 0x18ffb) (async) dup2(r0, r1) (async) 07:40:35 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000196c0)={@empty, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000019680), 0x410680, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1b, &(0x7f0000000040), 0x5b) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000019640)=0xffff, 0x1) read$char_usb(r2, &(0x7f00000000c0)=""/102400, 0x19000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000019540)=[{&(0x7f0000000000)="fc374b591bf012b4be9c124f214a99af4743c2aead535fbef0850519f99cfb68c29eab295a5d", 0x26}, {&(0x7f00000190c0)="7db52304a4dd88a9afbd2d7ca9b1d970416111ea4de9d8b0cb5b36afcd49b0df5110525097599c7fc93561e59cb41a11805986cae012e3f0219aca18e4cd88f0d4c8bbdb8420081899e37b0623649f67749d77855abdbaa5b15cfe67adc8a0b362ba6cb922156a9fb5e29634cc1f9e4e5a991651f3ec3829a395cf70a4b6788542f6c8b323db6e98b2000d7548e182f680780a73c1b120f9ea416f587c45311f37b4b0f8a257caaec6e19ad0fae313834d2aa8f313bacd8290fc7b1de3a14f8691c9efc9d5700ca62a4c57001f4a3f4958a92eb7aba30279c998cc985654", 0xde}, {&(0x7f00000191c0)="e1b28f070f7e45eb8ab169466c394c18a418679365e6802477dc52d7595db1544ac5812423483a95fbf9508ca9e101e27f2da084e9efa5e7a572e96f233aa94cfbae40cdd7e75705f37c191361407c09633bb145c9ecac6e24cb707368617b9c1f52935f9f554b4ac4be620f79b5b534b03fffb8e8699a3f94a2dab042c630a2cf721dd0505fae9f", 0x88}, {&(0x7f0000019280)="f080e8bb74d552602243f12aac71a2662f2fd9050fb6b54e71337756ea33fedee16da9e9b8f41cd741318cff2af780d0d1d17bdcb42ce245a08d71d68a9d90102f6f8fa88b6eed72c256fb354bc0a004bc6bcd261e39a25c0c70d6641cc4d112e545053d0a2b6dc75796aeaa23621d7ab2811fd68d53dbbe3305", 0x7a}, {&(0x7f0000019300)="08b6361e3f828e12d42332286a5e7394e6437d200f7ff0a2a71b82539f51092e2acd16d50879e727ff0836b1fe4e852835e228affec04aaa8697a82f5cd15416f10824f9b3503129c7e3b980f4d41ea25e0e6d2cc81fdd8e5885864bf4112f6f1dd21fd03159e680b618ef8ec762f3f7731e1c552b57326a58b5e3dc409118576c114c8b89b20891b4b9c007a9012a09d6", 0x91}, {&(0x7f00000193c0)="a1603accc726eababfc2ba5f0d573e1a4941595e95819660542399f0b44be2ac6a5d7eb274d0a1f74a4a25e3a6fda3357038ef7a2bb23c035b32223389043ed8d022f163f7270f872cf5b118e2f46d235bba28c0358a9648449a7af9ec3476c85eca4733d2df90a3c52f60aa30d7665c3478a04e98c69d7054ff86760061327b505eba42c2ccc589f21825542eb63d613492cc1a4a9b2f3c2121e105a947b0b8248e0bb116c8dda7bda578d17f350272ef4719f3d93e434b31d59bede38a5e784829d9", 0xc3}, {&(0x7f00000194c0)="eac8ff3abfa953c754d965143882a7c019eb327535a74b6fa9782ee3ae3146383d12d702f7eff1c4abc6362c39b298f839cdcbe678beca55806fc633ff0340f48798ee00061d86f026b6041d699e07786bb4a66b31de", 0x56}], 0x7, &(0x7f00000195c0)=ANY=[@ANYBLOB="580000000000000029000000390000006c08020700000000fc010000000000000000000000000001fe880000000000000000000000000001fe8000000000000000000000000000bbfe8800000000000000000000000000011400000000000000290000003e00000031adacf700748a00"], 0x70}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000196c0)={@empty, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000019680), 0x410680, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x1}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) (async) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480)) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1b, &(0x7f0000000040), 0x5b) (async) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000019640)=0xffff, 0x1) (async) read$char_usb(r2, &(0x7f00000000c0)=""/102400, 0x19000) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$inet6(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000019540)=[{&(0x7f0000000000)="fc374b591bf012b4be9c124f214a99af4743c2aead535fbef0850519f99cfb68c29eab295a5d", 0x26}, {&(0x7f00000190c0)="7db52304a4dd88a9afbd2d7ca9b1d970416111ea4de9d8b0cb5b36afcd49b0df5110525097599c7fc93561e59cb41a11805986cae012e3f0219aca18e4cd88f0d4c8bbdb8420081899e37b0623649f67749d77855abdbaa5b15cfe67adc8a0b362ba6cb922156a9fb5e29634cc1f9e4e5a991651f3ec3829a395cf70a4b6788542f6c8b323db6e98b2000d7548e182f680780a73c1b120f9ea416f587c45311f37b4b0f8a257caaec6e19ad0fae313834d2aa8f313bacd8290fc7b1de3a14f8691c9efc9d5700ca62a4c57001f4a3f4958a92eb7aba30279c998cc985654", 0xde}, {&(0x7f00000191c0)="e1b28f070f7e45eb8ab169466c394c18a418679365e6802477dc52d7595db1544ac5812423483a95fbf9508ca9e101e27f2da084e9efa5e7a572e96f233aa94cfbae40cdd7e75705f37c191361407c09633bb145c9ecac6e24cb707368617b9c1f52935f9f554b4ac4be620f79b5b534b03fffb8e8699a3f94a2dab042c630a2cf721dd0505fae9f", 0x88}, {&(0x7f0000019280)="f080e8bb74d552602243f12aac71a2662f2fd9050fb6b54e71337756ea33fedee16da9e9b8f41cd741318cff2af780d0d1d17bdcb42ce245a08d71d68a9d90102f6f8fa88b6eed72c256fb354bc0a004bc6bcd261e39a25c0c70d6641cc4d112e545053d0a2b6dc75796aeaa23621d7ab2811fd68d53dbbe3305", 0x7a}, {&(0x7f0000019300)="08b6361e3f828e12d42332286a5e7394e6437d200f7ff0a2a71b82539f51092e2acd16d50879e727ff0836b1fe4e852835e228affec04aaa8697a82f5cd15416f10824f9b3503129c7e3b980f4d41ea25e0e6d2cc81fdd8e5885864bf4112f6f1dd21fd03159e680b618ef8ec762f3f7731e1c552b57326a58b5e3dc409118576c114c8b89b20891b4b9c007a9012a09d6", 0x91}, {&(0x7f00000193c0)="a1603accc726eababfc2ba5f0d573e1a4941595e95819660542399f0b44be2ac6a5d7eb274d0a1f74a4a25e3a6fda3357038ef7a2bb23c035b32223389043ed8d022f163f7270f872cf5b118e2f46d235bba28c0358a9648449a7af9ec3476c85eca4733d2df90a3c52f60aa30d7665c3478a04e98c69d7054ff86760061327b505eba42c2ccc589f21825542eb63d613492cc1a4a9b2f3c2121e105a947b0b8248e0bb116c8dda7bda578d17f350272ef4719f3d93e434b31d59bede38a5e784829d9", 0xc3}, {&(0x7f00000194c0)="eac8ff3abfa953c754d965143882a7c019eb327535a74b6fa9782ee3ae3146383d12d702f7eff1c4abc6362c39b298f839cdcbe678beca55806fc633ff0340f48798ee00061d86f026b6041d699e07786bb4a66b31de", 0x56}], 0x7, &(0x7f00000195c0)=ANY=[@ANYBLOB="580000000000000029000000390000006c08020700000000fc010000000000000000000000000001fe880000000000000000000000000001fe8000000000000000000000000000bbfe8800000000000000000000000000011400000000000000290000003e00000031adacf700748a00"], 0x70}, 0x10) (async) [ 2390.735130][T16632] FAULT_INJECTION: forcing a failure. [ 2390.735130][T16632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2390.748494][T16632] CPU: 1 PID: 16632 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2390.760968][T16632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2390.771032][T16632] Call Trace: [ 2390.774318][T16632] [ 2390.777327][T16632] dump_stack_lvl+0xd6/0x122 [ 2390.782078][T16632] dump_stack+0x11/0x12 [ 2390.786330][T16632] should_fail+0x242/0x250 [ 2390.790792][T16632] should_fail_usercopy+0x16/0x20 [ 2390.795890][T16632] _copy_to_user+0x1a/0x90 [ 2390.800473][T16632] rng_dev_read+0x2bd/0x630 [ 2390.805039][T16632] ? devm_hwrng_match+0x50/0x50 [ 2390.809908][T16632] vfs_read+0x198/0x560 [ 2390.814200][T16632] ? __fget_files+0x1a7/0x1e0 [ 2390.818900][T16632] ksys_read+0xe8/0x1a0 [ 2390.823066][T16632] __x64_sys_read+0x3e/0x50 [ 2390.827569][T16632] do_syscall_64+0x2b/0x70 [ 2390.832004][T16632] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2390.837964][T16632] RIP: 0033:0x7f8359bbc279 [ 2390.842388][T16632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2390.862082][T16632] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2390.870553][T16632] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 07:40:35 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000196c0)={@empty, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) (async, rerun: 64) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000019680), 0x410680, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) (async, rerun: 32) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480)) (async, rerun: 32) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1b, &(0x7f0000000040), 0x5b) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000019640)=0xffff, 0x1) (async) read$char_usb(r2, &(0x7f00000000c0)=""/102400, 0x19000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000019540)=[{&(0x7f0000000000)="fc374b591bf012b4be9c124f214a99af4743c2aead535fbef0850519f99cfb68c29eab295a5d", 0x26}, {&(0x7f00000190c0)="7db52304a4dd88a9afbd2d7ca9b1d970416111ea4de9d8b0cb5b36afcd49b0df5110525097599c7fc93561e59cb41a11805986cae012e3f0219aca18e4cd88f0d4c8bbdb8420081899e37b0623649f67749d77855abdbaa5b15cfe67adc8a0b362ba6cb922156a9fb5e29634cc1f9e4e5a991651f3ec3829a395cf70a4b6788542f6c8b323db6e98b2000d7548e182f680780a73c1b120f9ea416f587c45311f37b4b0f8a257caaec6e19ad0fae313834d2aa8f313bacd8290fc7b1de3a14f8691c9efc9d5700ca62a4c57001f4a3f4958a92eb7aba30279c998cc985654", 0xde}, {&(0x7f00000191c0)="e1b28f070f7e45eb8ab169466c394c18a418679365e6802477dc52d7595db1544ac5812423483a95fbf9508ca9e101e27f2da084e9efa5e7a572e96f233aa94cfbae40cdd7e75705f37c191361407c09633bb145c9ecac6e24cb707368617b9c1f52935f9f554b4ac4be620f79b5b534b03fffb8e8699a3f94a2dab042c630a2cf721dd0505fae9f", 0x88}, {&(0x7f0000019280)="f080e8bb74d552602243f12aac71a2662f2fd9050fb6b54e71337756ea33fedee16da9e9b8f41cd741318cff2af780d0d1d17bdcb42ce245a08d71d68a9d90102f6f8fa88b6eed72c256fb354bc0a004bc6bcd261e39a25c0c70d6641cc4d112e545053d0a2b6dc75796aeaa23621d7ab2811fd68d53dbbe3305", 0x7a}, {&(0x7f0000019300)="08b6361e3f828e12d42332286a5e7394e6437d200f7ff0a2a71b82539f51092e2acd16d50879e727ff0836b1fe4e852835e228affec04aaa8697a82f5cd15416f10824f9b3503129c7e3b980f4d41ea25e0e6d2cc81fdd8e5885864bf4112f6f1dd21fd03159e680b618ef8ec762f3f7731e1c552b57326a58b5e3dc409118576c114c8b89b20891b4b9c007a9012a09d6", 0x91}, {&(0x7f00000193c0)="a1603accc726eababfc2ba5f0d573e1a4941595e95819660542399f0b44be2ac6a5d7eb274d0a1f74a4a25e3a6fda3357038ef7a2bb23c035b32223389043ed8d022f163f7270f872cf5b118e2f46d235bba28c0358a9648449a7af9ec3476c85eca4733d2df90a3c52f60aa30d7665c3478a04e98c69d7054ff86760061327b505eba42c2ccc589f21825542eb63d613492cc1a4a9b2f3c2121e105a947b0b8248e0bb116c8dda7bda578d17f350272ef4719f3d93e434b31d59bede38a5e784829d9", 0xc3}, {&(0x7f00000194c0)="eac8ff3abfa953c754d965143882a7c019eb327535a74b6fa9782ee3ae3146383d12d702f7eff1c4abc6362c39b298f839cdcbe678beca55806fc633ff0340f48798ee00061d86f026b6041d699e07786bb4a66b31de", 0x56}], 0x7, &(0x7f00000195c0)=ANY=[@ANYBLOB="580000000000000029000000390000006c08020700000000fc010000000000000000000000000001fe880000000000000000000000000001fe8000000000000000000000000000bbfe8800000000000000000000000000011400000000000000290000003e00000031adacf700748a00"], 0x70}, 0x10) 07:40:35 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x5, 0xff, 0x0, 0x81, 0x600}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) 07:40:35 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x5, 0xff, 0x0, 0x81, 0x600}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x5, 0xff, 0x0, 0x81, 0x600}, 0x20) (async) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (async) read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) (async) 07:40:35 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x5, 0xff, 0x0, 0x81, 0x600}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x5, 0xff, 0x0, 0x81, 0x600}, 0x20) (async) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (async) read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) (async) [ 2390.878580][T16632] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2390.886562][T16632] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2390.894565][T16632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2390.902538][T16632] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2390.910567][T16632] 07:40:42 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x7, 0x40, 0x1, {0x77359400}, {}, {0x0, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x2f, 0x2, 0x0, 0x0, "2dbeb3b7dde3c8ebeec2341159f75e8fc08ed406bf85f795099ae026e9588b07a14bdf3045292832213eb0a4a5a813d90f3e8c8280ee294cf6fc67b2616f4778"}}, 0x80}}, 0x11) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r6, &(0x7f0000019180)=""/102395, 0x18ffb) 07:40:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='macvtap0\x00') r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c057ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c526be83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@x25, 0x80, &(0x7f0000000100)=[{&(0x7f0000000300)="5542079e4d9f190d2eddb71efbe7fe018ad4a2a7a77c59e3864ed8387ba879a9385deed8455cd6508177dd453a17ca7d44a2fa672c13b4ae9a8519fba1d95afb9d92bf3274d58101c3eeafcd50f92bea8602534e10768b2e7e7d5e881b69b33a0d0e9a64", 0x64}, {&(0x7f0000000380)="46d91cbbf86dca1c9f498c39b474fad4df03d0d38499fda1ebac019391c553bfe1ff15235584189e9c5687ee6e73ece7940dcda6ef62e125025dd11e60f528de67c069a937da53af80a8cf2d54e5f489b608330ed36df83f08f96d8c39b579ac14f784c5aca4b57eecb5141ed685a9249c18f7c8efc2938b6a8fd2d3d7fc559c4995685f543168cf0b85116ebb454a7fcf650dbc5c8a2cdfbe122e01b4843b1c7f3a6c6f67d6b60b", 0xa8}], 0x2, &(0x7f0000000680)=[{0x108, 0x52abc53f314eb957, 0x8, "b1e4ff329e9fc881c897560e47e0bdfabb457b965c03acd904481ba82b017dd21d54ff48d781de3446d99e762895c48a2e312fd68f4fab1cb810f3d0e1bb746aa4c5d586892fce592f2568fb40aa4fcdfb0808b3cb7f664c8097718a68f43d3c707f32269dcd68e51a49b9fd8b93e363d75bd20af07117949aecd67fdcf2dc0ddbc23c0c311b0ed4fbe6ae46c80682e1e7ee68a92d263f15898615f900ab4d886cc93b88be9603fbd34a5f67a87da5c677f410052e5679efaa2a205ba5fac8d18d48232d94cbf0da0961d663f19d38b7e239ed15f06034d08fe4d9ab0d8ebb8bda0f4e1e686aff67c115be19290c781c6528b0e1b1a9b93a"}, {0xe8, 0xff, 0xf7, "b2b2b8704991278c71072cef5a075a746cfc837603420d968bdfe953a30a629a1a52f57c570e062d57780bf4837075a76ddfaaa06cfe2e78df7f0f6bf6061d942cd1564969582a00ffbe7293668bc3d7105dd17500ac7f4c828e838848a482b1ec296e3f91dc6dc20be0d182768749af6a40c7cf122dfd689711acde04b1b6cea883314909706ed742caa1a95ed4ed2792336f5de57171ddc545640afd50a2a2b73bc0a49a432f5cd31d6646f636e6dbd14bcfb86fce1e3f6b78502a607595fbb22fe90bb4fdea025abb1d1e55a5e6bf84"}], 0x1f0}, 0x4000008) r3 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r3, r4, &(0x7f0000000240)=0x208, 0x9) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r5, @ANYBLOB="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", @ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) (async) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x737a4ae3eeaa24c) (async) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) 07:40:42 executing program 0: socket(0x10, 0x803, 0x0) r0 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) mq_notify(r0, &(0x7f0000000480)={0x20000000, 0x3, 0x2, @thr={0x0, 0x0}}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='attr/keycreate\x00') read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) 07:40:42 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f00000190c0)=""/102400, 0x19000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getflags(r1, 0x1) 07:40:42 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) 07:40:42 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 51) 07:40:42 executing program 0: socket(0x10, 0x803, 0x0) (async) r0 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) mq_notify(r0, &(0x7f0000000480)={0x20000000, 0x3, 0x2, @thr={0x0, 0x0}}) (async, rerun: 64) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='attr/keycreate\x00') read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) [ 2397.870285][T16700] FAULT_INJECTION: forcing a failure. [ 2397.870285][T16700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2397.883703][T16700] CPU: 1 PID: 16700 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2397.896261][T16700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2397.906331][T16700] Call Trace: [ 2397.909686][T16700] [ 2397.912728][T16700] dump_stack_lvl+0xd6/0x122 07:40:42 executing program 0: socket(0x10, 0x803, 0x0) (async) r0 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) mq_notify(r0, &(0x7f0000000480)={0x20000000, 0x3, 0x2, @thr={0x0, 0x0}}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='attr/keycreate\x00') read$char_usb(r1, &(0x7f00000000c0)=""/102400, 0x19000) [ 2397.917333][T16700] dump_stack+0x11/0x12 [ 2397.921569][T16700] should_fail+0x242/0x250 [ 2397.926017][T16700] should_fail_usercopy+0x16/0x20 [ 2397.931125][T16700] _copy_to_user+0x1a/0x90 [ 2397.935569][T16700] rng_dev_read+0x2bd/0x630 [ 2397.940080][T16700] ? devm_hwrng_match+0x50/0x50 [ 2397.945010][T16700] vfs_read+0x198/0x560 [ 2397.949186][T16700] ? __fget_files+0x1a7/0x1e0 [ 2397.953896][T16700] ksys_read+0xe8/0x1a0 [ 2397.958066][T16700] __x64_sys_read+0x3e/0x50 [ 2397.962923][T16700] do_syscall_64+0x2b/0x70 [ 2397.967349][T16700] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2397.973325][T16700] RIP: 0033:0x7f8359bbc279 [ 2397.977903][T16700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2397.997532][T16700] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2398.006047][T16700] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 07:40:42 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 52) [ 2398.014030][T16700] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2398.022007][T16700] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2398.030079][T16700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2398.038063][T16700] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2398.046080][T16700] 07:40:42 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) [ 2398.127419][T16715] FAULT_INJECTION: forcing a failure. [ 2398.127419][T16715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2398.141090][T16715] CPU: 1 PID: 16715 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2398.153531][T16715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2398.163634][T16715] Call Trace: [ 2398.166947][T16715] [ 2398.169927][T16715] dump_stack_lvl+0xd6/0x122 07:40:42 executing program 0: sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000019100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000190c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x24000890) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000080}, 0x20004000) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)=[0xffffffb8, 0x100]) [ 2398.174605][T16715] dump_stack+0x11/0x12 [ 2398.178919][T16715] should_fail+0x242/0x250 [ 2398.183697][T16715] should_fail_usercopy+0x16/0x20 [ 2398.188811][T16715] _copy_to_user+0x1a/0x90 [ 2398.193244][T16715] rng_dev_read+0x2bd/0x630 [ 2398.197754][T16715] ? devm_hwrng_match+0x50/0x50 [ 2398.202613][T16715] vfs_read+0x198/0x560 [ 2398.206783][T16715] ? __fget_files+0x1a7/0x1e0 [ 2398.211507][T16715] ksys_read+0xe8/0x1a0 [ 2398.215724][T16715] __x64_sys_read+0x3e/0x50 [ 2398.220245][T16715] do_syscall_64+0x2b/0x70 [ 2398.224741][T16715] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2398.230714][T16715] RIP: 0033:0x7f8359bbc279 [ 2398.235135][T16715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2398.254773][T16715] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2398.263317][T16715] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 07:40:42 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 53) [ 2398.271303][T16715] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2398.279349][T16715] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2398.287340][T16715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2398.295374][T16715] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2398.303363][T16715] [ 2398.363651][T16722] FAULT_INJECTION: forcing a failure. [ 2398.363651][T16722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2398.377098][T16722] CPU: 1 PID: 16722 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2398.389522][T16722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2398.400407][T16722] Call Trace: [ 2398.403690][T16722] [ 2398.406629][T16722] dump_stack_lvl+0xd6/0x122 [ 2398.411290][T16722] dump_stack+0x11/0x12 [ 2398.415501][T16722] should_fail+0x242/0x250 [ 2398.420038][T16722] should_fail_usercopy+0x16/0x20 [ 2398.425084][T16722] _copy_to_user+0x1a/0x90 [ 2398.429517][T16722] rng_dev_read+0x2bd/0x630 [ 2398.434167][T16722] ? devm_hwrng_match+0x50/0x50 [ 2398.439025][T16722] vfs_read+0x198/0x560 [ 2398.443266][T16722] ? __fget_files+0x1a7/0x1e0 [ 2398.447956][T16722] ksys_read+0xe8/0x1a0 [ 2398.452147][T16722] __x64_sys_read+0x3e/0x50 [ 2398.456656][T16722] do_syscall_64+0x2b/0x70 [ 2398.461140][T16722] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2398.467045][T16722] RIP: 0033:0x7f8359bbc279 [ 2398.471528][T16722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2398.491146][T16722] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2398.499743][T16722] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2398.507723][T16722] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2398.515700][T16722] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2398.523707][T16722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2398.531804][T16722] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2398.539801][T16722] 07:40:43 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 54) [ 2398.683095][T16724] FAULT_INJECTION: forcing a failure. [ 2398.683095][T16724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2398.696562][T16724] CPU: 1 PID: 16724 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2398.708971][T16724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2398.719027][T16724] Call Trace: [ 2398.722297][T16724] [ 2398.725252][T16724] dump_stack_lvl+0xd6/0x122 [ 2398.730002][T16724] dump_stack+0x11/0x12 [ 2398.734140][T16724] should_fail+0x242/0x250 [ 2398.738576][T16724] should_fail_usercopy+0x16/0x20 [ 2398.743663][T16724] _copy_to_user+0x1a/0x90 [ 2398.748126][T16724] rng_dev_read+0x2bd/0x630 [ 2398.752620][T16724] ? devm_hwrng_match+0x50/0x50 [ 2398.757543][T16724] vfs_read+0x198/0x560 [ 2398.761689][T16724] ? __fget_files+0x1a7/0x1e0 [ 2398.766347][T16724] ksys_read+0xe8/0x1a0 [ 2398.770516][T16724] __x64_sys_read+0x3e/0x50 [ 2398.775039][T16724] do_syscall_64+0x2b/0x70 [ 2398.779457][T16724] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2398.785352][T16724] RIP: 0033:0x7f8359bbc279 [ 2398.789763][T16724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2398.809427][T16724] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2398.817820][T16724] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2398.825839][T16724] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2398.833820][T16724] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2398.841867][T16724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2398.849820][T16724] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2398.857797][T16724] 07:40:51 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f00000190c0)=""/102400, 0x19000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getflags(r1, 0x1) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$char_usb(r0, &(0x7f00000190c0)=""/102400, 0x19000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) fcntl$getflags(r1, 0x1) (async) 07:40:51 executing program 0: sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000019100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000190c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x24000890) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000080}, 0x20004000) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)=[0xffffffb8, 0x100]) 07:40:51 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x7, 0x40, 0x1, {0x77359400}, {}, {0x0, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x2f, 0x2, 0x0, 0x0, "2dbeb3b7dde3c8ebeec2341159f75e8fc08ed406bf85f795099ae026e9588b07a14bdf3045292832213eb0a4a5a813d90f3e8c8280ee294cf6fc67b2616f4778"}}, 0x80}}, 0x11) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r6, &(0x7f0000019180)=""/102395, 0x18ffb) socket$unix(0x1, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket(0x2, 0x80802, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) connect$can_bcm(r5, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x7, 0x40, 0x1, {0x77359400}, {}, {0x0, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x2f, 0x2, 0x0, 0x0, "2dbeb3b7dde3c8ebeec2341159f75e8fc08ed406bf85f795099ae026e9588b07a14bdf3045292832213eb0a4a5a813d90f3e8c8280ee294cf6fc67b2616f4778"}}, 0x80}}, 0x11) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$char_usb(r6, &(0x7f0000019180)=""/102395, 0x18ffb) (async) 07:40:51 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) 07:40:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r2 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r2, r3, &(0x7f0000000240)=0x208, 0x9) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r4, @ANYBLOB="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", @ANYRESOCT=r1], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001080)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000000f40)=[{{&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1, &(0x7f0000000100)=""/32, 0x20}, 0x6}, {{&(0x7f0000000300)=@hci, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000400)=""/51, 0x33}], 0x2, &(0x7f0000000480)=""/94, 0x5e}, 0x1ff}, {{&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000900)=[{&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000580)=""/167, 0xa7}, {&(0x7f0000000640)=""/3, 0x3}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000700)=""/98, 0x62}, {&(0x7f0000000780)=""/222, 0xde}, {&(0x7f0000000880)=""/86, 0x56}, {&(0x7f0000002300)=""/4096, 0x1000}], 0x8, &(0x7f0000000980)}, 0xd4fdb050}, {{&(0x7f00000009c0)=@xdp, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/49, 0x31}, {&(0x7f0000000a80)=""/13, 0xd}, {&(0x7f0000000ac0)=""/163, 0xa3}, {&(0x7f0000000b80)=""/92, 0x5c}, {&(0x7f0000000c00)=""/16, 0x10}, {&(0x7f0000000c40)=""/69, 0x45}], 0x7}, 0xfffffff7}, {{&(0x7f0000000d40)=@sco={0x1f, @none}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000dc0)=""/118, 0x76}], 0x1, &(0x7f0000000e80)=""/159, 0x9f}, 0x7ff}], 0x5, 0x10063, &(0x7f00000010c0)={r6, r7+60000000}) 07:40:51 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 55) 07:40:51 executing program 0: sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000019100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000190c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x24000890) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000080}, 0x20004000) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)=[0xffffffb8, 0x100]) [ 2407.050415][T16731] FAULT_INJECTION: forcing a failure. [ 2407.050415][T16731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2407.063982][T16731] CPU: 1 PID: 16731 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2407.076466][T16731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2407.086534][T16731] Call Trace: [ 2407.089817][T16731] [ 2407.092761][T16731] dump_stack_lvl+0xd6/0x122 [ 2407.097377][T16731] dump_stack+0x11/0x12 [ 2407.101574][T16731] should_fail+0x242/0x250 [ 2407.106000][T16731] should_fail_usercopy+0x16/0x20 [ 2407.111030][T16731] _copy_to_user+0x1a/0x90 [ 2407.115558][T16731] rng_dev_read+0x2bd/0x630 [ 2407.120099][T16731] ? devm_hwrng_match+0x50/0x50 [ 2407.124957][T16731] vfs_read+0x198/0x560 [ 2407.129198][T16731] ? __fget_files+0x1a7/0x1e0 [ 2407.133890][T16731] ksys_read+0xe8/0x1a0 [ 2407.138091][T16731] __x64_sys_read+0x3e/0x50 [ 2407.142676][T16731] do_syscall_64+0x2b/0x70 [ 2407.147116][T16731] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2407.153030][T16731] RIP: 0033:0x7f8359bbc279 [ 2407.157595][T16731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2407.177304][T16731] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2407.185735][T16731] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 07:40:51 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000190c0)=[@in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x1, 0x6, @local, 0x4}, @in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2b0000}, @in6={0xa, 0x4e22, 0x52e9, @remote}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20}, @in6={0xa, 0x4e22, 0x8, @mcast2, 0x5}, @in6={0xa, 0x0, 0x0, @private1, 0xa}], 0xd8) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) 07:40:51 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 56) 07:40:51 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) (async) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000190c0)=[@in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x1, 0x6, @local, 0x4}, @in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2b0000}, @in6={0xa, 0x4e22, 0x52e9, @remote}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20}, @in6={0xa, 0x4e22, 0x8, @mcast2, 0x5}, @in6={0xa, 0x0, 0x0, @private1, 0xa}], 0xd8) (async) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) [ 2407.193721][T16731] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2407.201704][T16731] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2407.209725][T16731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2407.217707][T16731] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2407.225696][T16731] 07:40:51 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000190c0)=[@in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x1, 0x6, @local, 0x4}, @in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2b0000}, @in6={0xa, 0x4e22, 0x52e9, @remote}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20}, @in6={0xa, 0x4e22, 0x8, @mcast2, 0x5}, @in6={0xa, 0x0, 0x0, @private1, 0xa}], 0xd8) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) 07:40:51 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x7, 0x40, 0x1, {0x77359400}, {}, {0x0, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x2f, 0x2, 0x0, 0x0, "2dbeb3b7dde3c8ebeec2341159f75e8fc08ed406bf85f795099ae026e9588b07a14bdf3045292832213eb0a4a5a813d90f3e8c8280ee294cf6fc67b2616f4778"}}, 0x80}}, 0x11) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r6, &(0x7f0000019180)=""/102395, 0x18ffb) 07:40:51 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f6945943a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4f5ca62d0696364005dadb67936d990b20919809f413ade908e7fefaf67f4e224b5c9f55ac9ccb05b565fe97b5de3711c814c0782b13e42e00fcb0b7e0df9a848447807196c2262db876c82b1976676fd6b8f1619d93a99e5184820a368367121ddf5c367e5fa13af2b27288bdcea3fcc5f61b029c200cb15ad5b71c402275140f4d7ee91bad6f208c22839a02b92caa938505086e54f5b"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r2 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r2, r3, &(0x7f0000000240)=0x208, 0x9) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r4, @ANYBLOB="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", @ANYRESOCT=r1], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x63a51628}, 0x1c) read$char_usb(r3, &(0x7f00000320c0)=""/102400, 0x19000) 07:40:51 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r2 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r2, r3, &(0x7f0000000240)=0x208, 0x9) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r4, @ANYBLOB="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", @ANYRESOCT=r1], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x63a51628}, 0x1c) read$char_usb(r3, &(0x7f00000320c0)=""/102400, 0x19000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) socket$inet6(0xa, 0x0, 0x9) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) (async) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (async) sendfile(r2, r3, &(0x7f0000000240)=0x208, 0x9) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r4, @ANYBLOB="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", @ANYRESOCT=r1], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x63a51628}, 0x1c) (async) read$char_usb(r3, &(0x7f00000320c0)=""/102400, 0x19000) (async) 07:40:51 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket(0x2, 0x80802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) getsockname$packet(r0, &(0x7f0000019100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000019140)=0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x1, 0x1, 0x1}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r3 = syz_open_procfs(r2, &(0x7f00000190c0)='net/ip6_flowlabel\x00') read$char_usb(r3, &(0x7f00000000c0)=""/102400, 0x19000) [ 2407.305305][T16768] FAULT_INJECTION: forcing a failure. [ 2407.305305][T16768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2407.318708][T16768] CPU: 1 PID: 16768 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2407.331230][T16768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2407.341375][T16768] Call Trace: [ 2407.344668][T16768] [ 2407.347634][T16768] dump_stack_lvl+0xd6/0x122 [ 2407.352310][T16768] dump_stack+0x11/0x12 [ 2407.356487][T16768] should_fail+0x242/0x250 [ 2407.360927][T16768] should_fail_usercopy+0x16/0x20 [ 2407.366099][T16768] _copy_to_user+0x1a/0x90 [ 2407.370595][T16768] rng_dev_read+0x2bd/0x630 [ 2407.375127][T16768] ? devm_hwrng_match+0x50/0x50 [ 2407.380079][T16768] vfs_read+0x198/0x560 [ 2407.384251][T16768] ? __fget_files+0x1a7/0x1e0 [ 2407.388958][T16768] ksys_read+0xe8/0x1a0 [ 2407.393156][T16768] __x64_sys_read+0x3e/0x50 [ 2407.397674][T16768] do_syscall_64+0x2b/0x70 [ 2407.402180][T16768] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2407.408155][T16768] RIP: 0033:0x7f8359bbc279 [ 2407.412553][T16768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2407.432162][T16768] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2407.440613][T16768] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 07:40:51 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc020}, 0x8000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) [ 2407.448595][T16768] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2407.456565][T16768] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2407.464597][T16768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2407.472561][T16768] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2407.480539][T16768] 07:40:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r2 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) (async) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r2, r3, &(0x7f0000000240)=0x208, 0x9) (async) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r4, @ANYBLOB="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", @ANYRESOCT=r1], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) (async, rerun: 32) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000001080)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000000f40)=[{{&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1, &(0x7f0000000100)=""/32, 0x20}, 0x6}, {{&(0x7f0000000300)=@hci, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000400)=""/51, 0x33}], 0x2, &(0x7f0000000480)=""/94, 0x5e}, 0x1ff}, {{&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000900)=[{&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000580)=""/167, 0xa7}, {&(0x7f0000000640)=""/3, 0x3}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000700)=""/98, 0x62}, {&(0x7f0000000780)=""/222, 0xde}, {&(0x7f0000000880)=""/86, 0x56}, {&(0x7f0000002300)=""/4096, 0x1000}], 0x8, &(0x7f0000000980)}, 0xd4fdb050}, {{&(0x7f00000009c0)=@xdp, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/49, 0x31}, {&(0x7f0000000a80)=""/13, 0xd}, {&(0x7f0000000ac0)=""/163, 0xa3}, {&(0x7f0000000b80)=""/92, 0x5c}, {&(0x7f0000000c00)=""/16, 0x10}, {&(0x7f0000000c40)=""/69, 0x45}], 0x7}, 0xfffffff7}, {{&(0x7f0000000d40)=@sco={0x1f, @none}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000dc0)=""/118, 0x76}], 0x1, &(0x7f0000000e80)=""/159, 0x9f}, 0x7ff}], 0x5, 0x10063, &(0x7f00000010c0)={r6, r7+60000000}) 07:40:58 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = socket(0x2, 0x80802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) (async) getsockname$packet(r0, &(0x7f0000019100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000019140)=0x14) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x1, 0x1, 0x1}, 0x20) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r3 = syz_open_procfs(r2, &(0x7f00000190c0)='net/ip6_flowlabel\x00') read$char_usb(r3, &(0x7f00000000c0)=""/102400, 0x19000) 07:40:58 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 57) 07:40:58 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x8) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r2 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r2, r3, &(0x7f0000000240)=0x208, 0x9) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r4, @ANYBLOB="00022dbd7000fedbdf250300000008000400e0000002c4bd4572333c6ec1b1fd5b8b01f7dfe7e3996772fc12b05b245ee1735be6071e583078abc90d94248538991e5fcf2dc96a8ed8defc60b1c608a1b8eecc0a2fc4dc983e0d29b79f0878db3b8c92ae16b7e3db182d2fcdd95c9d3422c0bb84dac0de0b39d3e19fbcfded53530b06b41c68baa2cc58db4e2166ce7a610000ffedff581bd7ba9d2c6aafce42270343107f695871e73e8bd41867ef145a9223bdb122aa29464c36aca08d609c170b21843de1ec2611cdb8f19b7f05e8296b2947cfac6543c3319cae2f62a524d8665397a63bb405c0a3eed31cc7b54e64e076b025cce944a1616177bc9d1b0bf31380fd81f762a446c31f9aaa1622b12fafd1a2c4f9779b44301d3de5fcd3eacec73ed41f6c882834e8a6ce1e036126446de3b839b2e3fb6707cf1bb64273b2d44b03360e9f209d2f005c9cca77f60d26d55ff7dd4f365ea86dc72279c9e9218ab09869cdbb2e5cb0a9c7f9e3cd20544feb15def710480227f681e9fb37dfd4186b4657d49c0d35ec2d5cc24b69568678fe1f70d361b88080", @ANYRESOCT=r1], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x63a51628}, 0x1c) read$char_usb(r3, &(0x7f00000320c0)=""/102400, 0x19000) 07:40:58 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc020}, 0x8000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) 07:40:58 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r3 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x80, 0x58, {0x0, 0xea60}, {r4, r5/1000+60000}, {0x1, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x0, 0x1}, 0xe, 0x0, 0x0, 0x0, "13369fbe28d52a54ab1074bfbcaecf22190ceb8d8315ea6a9952cfe15c0d8521a11d9919dd608d6d4816460c2bd1bc184844826cdf8e20fc73ba3e9fb2315434"}}, 0x80}}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r3, r6, &(0x7f0000000240)=0x208, 0x9) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r7, @ANYBLOB="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", @ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) read$char_usb(r6, &(0x7f0000000580)=""/4096, 0x1000) 07:40:58 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = socket(0x2, 0x80802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) getsockname$packet(r0, &(0x7f0000019100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000019140)=0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x1, 0x1, 0x1}, 0x20) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r3 = syz_open_procfs(r2, &(0x7f00000190c0)='net/ip6_flowlabel\x00') read$char_usb(r3, &(0x7f00000000c0)=""/102400, 0x19000) 07:40:58 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x40000000}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4000010, r3, 0x85dac000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0xa, &(0x7f00000190c0)=0x1, 0x4) fcntl$dupfd(r0, 0x406, r1) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r4, &(0x7f00000000c0)=""/102400, 0x19000) 07:40:58 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x40000000}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4000010, r3, 0x85dac000) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) setsockopt$inet6_int(r1, 0x29, 0xa, &(0x7f00000190c0)=0x1, 0x4) (async) fcntl$dupfd(r0, 0x406, r1) (async) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r4, &(0x7f00000000c0)=""/102400, 0x19000) 07:40:58 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f00000000c0)=0x4, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x4, 0x0, 0x0, {}, {}, {0x3}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "a7a80e1ea3468f8938edeae721a1edd6d2cdcb4c5c8e36f4af45778ef6d463a5bcc03c8ef76b636c57401dfa3fde781575da324bc0cb831f5285f6f1d418d5ef"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) sendmsg$nl_route(r0, &(0x7f0000019140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000190c0)=@ipv4_delroute={0x50, 0x19, 0x20, 0x70bd2d, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x96, 0x2, 0x2, 0xfe, 0x9, 0x3700}, [@RTA_DPORT={0x6, 0x1d, 0x4e24}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x8, 0x2, r3}}, @RTA_SPORT={0x6, 0x1c, 0x4e24}, @RTA_UID={0x8, 0x19, r5}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x50}, 0x1, 0x0, 0x0, 0xc041}, 0x10) read$char_usb(r0, &(0x7f00000000c0)=""/102398, 0x18ffe) [ 2414.184260][T16813] FAULT_INJECTION: forcing a failure. [ 2414.184260][T16813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2414.197677][T16813] CPU: 0 PID: 16813 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2414.210449][T16813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2414.220623][T16813] Call Trace: [ 2414.223918][T16813] [ 2414.226858][T16813] dump_stack_lvl+0xd6/0x122 07:40:58 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = socket(0x2, 0x80802, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x10, 0x5f8}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x40000000}) (async) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4000010, r3, 0x85dac000) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) setsockopt$inet6_int(r1, 0x29, 0xa, &(0x7f00000190c0)=0x1, 0x4) (async) fcntl$dupfd(r0, 0x406, r1) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r4, &(0x7f00000000c0)=""/102400, 0x19000) 07:40:58 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) [ 2414.231514][T16813] dump_stack+0x11/0x12 [ 2414.235766][T16813] should_fail+0x242/0x250 [ 2414.240198][T16813] should_fail_usercopy+0x16/0x20 [ 2414.245255][T16813] _copy_to_user+0x1a/0x90 [ 2414.249684][T16813] rng_dev_read+0x2bd/0x630 [ 2414.254201][T16813] ? devm_hwrng_match+0x50/0x50 [ 2414.259124][T16813] vfs_read+0x198/0x560 [ 2414.263389][T16813] ? __fget_files+0x1a7/0x1e0 [ 2414.268141][T16813] ksys_read+0xe8/0x1a0 [ 2414.272356][T16813] __x64_sys_read+0x3e/0x50 [ 2414.276867][T16813] do_syscall_64+0x2b/0x70 [ 2414.281354][T16813] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2414.287387][T16813] RIP: 0033:0x7f8359bbc279 [ 2414.291837][T16813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2414.311523][T16813] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2414.320197][T16813] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2414.328162][T16813] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2414.336305][T16813] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2414.344317][T16813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2414.352374][T16813] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2414.360412][T16813] 07:41:05 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 58) 07:41:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async, rerun: 32) r2 = socket$inet6(0xa, 0x0, 0x9) (rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) (async, rerun: 32) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (rerun: 32) sendfile(r2, r3, &(0x7f0000000240)=0x208, 0x9) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r4, @ANYBLOB="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", @ANYRESOCT=r1], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) (async, rerun: 32) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) (async) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000001080)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000000f40)=[{{&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1, &(0x7f0000000100)=""/32, 0x20}, 0x6}, {{&(0x7f0000000300)=@hci, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000400)=""/51, 0x33}], 0x2, &(0x7f0000000480)=""/94, 0x5e}, 0x1ff}, {{&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000900)=[{&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000000580)=""/167, 0xa7}, {&(0x7f0000000640)=""/3, 0x3}, {&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000700)=""/98, 0x62}, {&(0x7f0000000780)=""/222, 0xde}, {&(0x7f0000000880)=""/86, 0x56}, {&(0x7f0000002300)=""/4096, 0x1000}], 0x8, &(0x7f0000000980)}, 0xd4fdb050}, {{&(0x7f00000009c0)=@xdp, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/49, 0x31}, {&(0x7f0000000a80)=""/13, 0xd}, {&(0x7f0000000ac0)=""/163, 0xa3}, {&(0x7f0000000b80)=""/92, 0x5c}, {&(0x7f0000000c00)=""/16, 0x10}, {&(0x7f0000000c40)=""/69, 0x45}], 0x7}, 0xfffffff7}, {{&(0x7f0000000d40)=@sco={0x1f, @none}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000dc0)=""/118, 0x76}], 0x1, &(0x7f0000000e80)=""/159, 0x9f}, 0x7ff}], 0x5, 0x10063, &(0x7f00000010c0)={r6, r7+60000000}) 07:41:05 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc020}, 0x8000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) 07:41:05 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f00000000c0)=0x4, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x4, 0x0, 0x0, {}, {}, {0x3}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "a7a80e1ea3468f8938edeae721a1edd6d2cdcb4c5c8e36f4af45778ef6d463a5bcc03c8ef76b636c57401dfa3fde781575da324bc0cb831f5285f6f1d418d5ef"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) sendmsg$nl_route(r0, &(0x7f0000019140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000190c0)=@ipv4_delroute={0x50, 0x19, 0x20, 0x70bd2d, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x96, 0x2, 0x2, 0xfe, 0x9, 0x3700}, [@RTA_DPORT={0x6, 0x1d, 0x4e24}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x8, 0x2, r3}}, @RTA_SPORT={0x6, 0x1c, 0x4e24}, @RTA_UID={0x8, 0x19, r5}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x50}, 0x1, 0x0, 0x0, 0xc041}, 0x10) read$char_usb(r0, &(0x7f00000000c0)=""/102398, 0x18ffe) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f00000000c0)=0x4, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00'}) (async) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x4, 0x0, 0x0, {}, {}, {0x3}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "a7a80e1ea3468f8938edeae721a1edd6d2cdcb4c5c8e36f4af45778ef6d463a5bcc03c8ef76b636c57401dfa3fde781575da324bc0cb831f5285f6f1d418d5ef"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) (async) setuid(r5) (async) sendmsg$nl_route(r0, &(0x7f0000019140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000190c0)=@ipv4_delroute={0x50, 0x19, 0x20, 0x70bd2d, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x96, 0x2, 0x2, 0xfe, 0x9, 0x3700}, [@RTA_DPORT={0x6, 0x1d, 0x4e24}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x8, 0x2, r3}}, @RTA_SPORT={0x6, 0x1c, 0x4e24}, @RTA_UID={0x8, 0x19, r5}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x50}, 0x1, 0x0, 0x0, 0xc041}, 0x10) (async) read$char_usb(r0, &(0x7f00000000c0)=""/102398, 0x18ffe) (async) 07:41:05 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r3 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x80, 0x58, {0x0, 0xea60}, {r4, r5/1000+60000}, {0x1, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x0, 0x1}, 0xe, 0x0, 0x0, 0x0, "13369fbe28d52a54ab1074bfbcaecf22190ceb8d8315ea6a9952cfe15c0d8521a11d9919dd608d6d4816460c2bd1bc184844826cdf8e20fc73ba3e9fb2315434"}}, 0x80}}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r3, r6, &(0x7f0000000240)=0x208, 0x9) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r7, @ANYBLOB="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", @ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) read$char_usb(r6, &(0x7f0000000580)=""/4096, 0x1000) socket$unix(0x1, 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) socket$inet6(0xa, 0x0, 0x9) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) (async) clock_gettime(0x0, &(0x7f0000000040)) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x80, 0x58, {0x0, 0xea60}, {r4, r5/1000+60000}, {0x1, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x0, 0x1}, 0xe, 0x0, 0x0, 0x0, "13369fbe28d52a54ab1074bfbcaecf22190ceb8d8315ea6a9952cfe15c0d8521a11d9919dd608d6d4816460c2bd1bc184844826cdf8e20fc73ba3e9fb2315434"}}, 0x80}}, 0x10) (async) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (async) sendfile(r3, r6, &(0x7f0000000240)=0x208, 0x9) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r7, @ANYBLOB="00022dbd7000fedbdf250300000008000400e0000002c4bd4572333c6ec1b1fd5b8b01f7dfe7e3996772fc12b05b245ee1735be6071e583078abc90d94248538991e5fcf2dc96a8ed8defc60b1c608a1b8eecc0a2fc4dc983e0d29b79f0878db3b8c92ae16b7e3db182d2fcdd95c9d3422c0bb84dac0de0b39d3e19fbcfded53530b06b41c68baa2cc58db4e2166ce7a610000ffedff581bd7ba9d2c6aafce42270343107f695871e73e8bd41867ef145a9223bdb122aa29464c36aca08d609c170b21843de1ec2611cdb8f19b7f05e8296b2947cfac6543c3319cae2f62a524d8665397a63bb405c0a3eed31cc7b54e64e076b025cce944a1616177bc9d1b0bf31380fd81f762a446c31f9aaa1622b12fafd1a2c4f9779b44301d3de5fcd3eacec73ed41f6c882834e8a6ce1e036126446de3b839b2e3fb6707cf1bb64273b2d44b03360e9f209d2f005c9cca77f60d26d55ff7dd4f365ea86dc72279c9e9218ab09869cdbb2e5cb0a9c7f9e3cd20544feb15def710480227f681e9fb37dfd4186b4657d49c0d35ec2d5cc24b69568678fe1f70d361b88080", @ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) (async) read$char_usb(r6, &(0x7f0000000580)=""/4096, 0x1000) (async) 07:41:05 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') (async) read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async) 07:41:05 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) 07:41:05 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000000)=0x7, 0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) 07:41:05 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000000)=0x7, 0x4) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) 07:41:05 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000000)=0x7, 0x4) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') read$char_usb(r0, &(0x7f00000000c0)=""/102400, 0x19000) 07:41:05 executing program 0: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) syz_clone(0x21084000, &(0x7f0000000000)="ce8ab7963b4bfdec119dcb8f351388990a0f1d17da5bb9b5eac0b7a086f1afd43fe386e078d2b6ca0db45ff77e588000f95c3a4e2647c8421a96bebf9110ad1d36b831646654fb4451e7aeb8cd", 0x4d, &(0x7f00000190c0), &(0x7f0000019100), &(0x7f0000019140)="9c98c7955afcbdea32a52e786406a9b3052c99b1cd5fb2428f49bb15deff3441b42351d471b4b99c70691d5ab7e27418e6f9d034c4c2f59e7ca3afc09b0b20fc9af6dc79bd86c53dcf0cd72b056134820847ede41f8ec544933f371dc035dcff6c807abf124a7df9cf1733fdfca907f7e4b618cde50841c020c2dc5dec5aec8fb3b2789f4127ceff4b") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000019240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r2, @ANYBLOB="42c19a9749be81878fbd0a0ad2d6e33dba1dc4e261e811bccf84815e02958400c821b10067dc03e0e30f31aa8871552d5da323f0886f2006750a280520215184a4fa0f6bed91765cafed387561ede6bacde1090000006b619999bab2461794ca5a08a8c6b1e6a392e6abc03694322ce0748097d0dd06f1bab55acfe60974770f0e321ff5755b5e86a5c6aab97985847a1c3b7e47e68d323100c8d0d3578d0abd98a4ebb40f4f64a913795b4e20bcfe953a712eeec3ded82b768a0227c53fe941ff5c0021654733f6ef9f058a779298bee6"], 0x3c}}, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000019200)='net/ip6_mr_cache\x00') r4 = gettid() timer_create(0x6, &(0x7f0000000080)={0x0, 0x22, 0x3, @tid=r4}, &(0x7f0000019380)) read$char_usb(r3, &(0x7f00000000c0)=""/102400, 0x19000) [ 2421.299862][T16855] FAULT_INJECTION: forcing a failure. [ 2421.299862][T16855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2421.313328][T16855] CPU: 1 PID: 16855 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2421.325848][T16855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2421.335919][T16855] Call Trace: [ 2421.339205][T16855] [ 2421.342151][T16855] dump_stack_lvl+0xd6/0x122 07:41:05 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f00000000c0)=0x4, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x4, 0x0, 0x0, {}, {}, {0x3}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "a7a80e1ea3468f8938edeae721a1edd6d2cdcb4c5c8e36f4af45778ef6d463a5bcc03c8ef76b636c57401dfa3fde781575da324bc0cb831f5285f6f1d418d5ef"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) sendmsg$nl_route(r0, &(0x7f0000019140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000190c0)=@ipv4_delroute={0x50, 0x19, 0x20, 0x70bd2d, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x96, 0x2, 0x2, 0xfe, 0x9, 0x3700}, [@RTA_DPORT={0x6, 0x1d, 0x4e24}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x8, 0x2, r3}}, @RTA_SPORT={0x6, 0x1c, 0x4e24}, @RTA_UID={0x8, 0x19, r5}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x50}, 0x1, 0x0, 0x0, 0xc041}, 0x10) read$char_usb(r0, &(0x7f00000000c0)=""/102398, 0x18ffe) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f00000000c0)=0x4, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00'}) (async) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x4, 0x0, 0x0, {}, {}, {0x3}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "a7a80e1ea3468f8938edeae721a1edd6d2cdcb4c5c8e36f4af45778ef6d463a5bcc03c8ef76b636c57401dfa3fde781575da324bc0cb831f5285f6f1d418d5ef"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) (async) setuid(r5) (async) sendmsg$nl_route(r0, &(0x7f0000019140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000190c0)=@ipv4_delroute={0x50, 0x19, 0x20, 0x70bd2d, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x96, 0x2, 0x2, 0xfe, 0x9, 0x3700}, [@RTA_DPORT={0x6, 0x1d, 0x4e24}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x8, 0x2, r3}}, @RTA_SPORT={0x6, 0x1c, 0x4e24}, @RTA_UID={0x8, 0x19, r5}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x50}, 0x1, 0x0, 0x0, 0xc041}, 0x10) (async) read$char_usb(r0, &(0x7f00000000c0)=""/102398, 0x18ffe) (async) [ 2421.346849][T16855] dump_stack+0x11/0x12 [ 2421.351060][T16855] should_fail+0x242/0x250 [ 2421.355495][T16855] should_fail_usercopy+0x16/0x20 [ 2421.360546][T16855] _copy_to_user+0x1a/0x90 [ 2421.365047][T16855] rng_dev_read+0x2bd/0x630 [ 2421.369651][T16855] ? devm_hwrng_match+0x50/0x50 [ 2421.374523][T16855] vfs_read+0x198/0x560 [ 2421.378697][T16855] ? __fdget_pos+0x125/0x1a0 [ 2421.383355][T16855] ? __fdget_pos+0x12f/0x1a0 [ 2421.387978][T16855] ? __sanitizer_cov_trace_pc+0x33/0x60 [ 2421.393558][T16855] ksys_read+0xe8/0x1a0 [ 2421.397738][T16855] __x64_sys_read+0x3e/0x50 [ 2421.402267][T16855] do_syscall_64+0x2b/0x70 [ 2421.406696][T16855] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2421.412639][T16855] RIP: 0033:0x7f8359bbc279 [ 2421.417074][T16855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2421.436678][T16855] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2421.445180][T16855] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2421.453158][T16855] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2421.461148][T16855] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2421.469219][T16855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2421.477189][T16855] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2421.485166][T16855] 07:41:05 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 59) [ 2421.512266][T16885] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2421.555139][T16915] FAULT_INJECTION: forcing a failure. [ 2421.555139][T16915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2421.568572][T16915] CPU: 1 PID: 16915 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2421.580988][T16915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2421.591139][T16915] Call Trace: [ 2421.594416][T16915] [ 2421.597347][T16915] dump_stack_lvl+0xd6/0x122 [ 2421.602034][T16915] dump_stack+0x11/0x12 [ 2421.608095][T16915] should_fail+0x242/0x250 [ 2421.612608][T16915] should_fail_usercopy+0x16/0x20 [ 2421.617708][T16915] _copy_to_user+0x1a/0x90 [ 2421.622197][T16915] rng_dev_read+0x2bd/0x630 [ 2421.626741][T16915] ? devm_hwrng_match+0x50/0x50 [ 2421.631615][T16915] vfs_read+0x198/0x560 [ 2421.635957][T16915] ? __fget_files+0x1a7/0x1e0 [ 2421.640637][T16915] ksys_read+0xe8/0x1a0 [ 2421.644795][T16915] __x64_sys_read+0x3e/0x50 [ 2421.649320][T16915] do_syscall_64+0x2b/0x70 [ 2421.653748][T16915] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2421.659758][T16915] RIP: 0033:0x7f8359bbc279 [ 2421.664218][T16915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2421.683831][T16915] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2421.692250][T16915] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2421.700224][T16915] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2421.708194][T16915] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2421.716165][T16915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2421.724199][T16915] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2421.732245][T16915] [ 2421.739559][T16885] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2421.782785][T16885] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2421.832551][T16885] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2421.897026][T16885] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2421.907988][T16885] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2421.918670][T16885] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2421.929622][T16885] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 07:41:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000004440)=[{&(0x7f00000002c0)="3dcf49396a921ce69f45f15286731650", 0x10}, {&(0x7f00000001c0)="81", 0x1}, {&(0x7f00000012c0)="96", 0x1}], 0x3, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r3 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r3, r4, &(0x7f0000000240)=0x208, 0x9) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r5, @ANYBLOB="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", @ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'dummy0\x00', 0x2010}) 07:41:12 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dccaed43a8216e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8a97cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7d655160900bc274eb970ef369c3789d9dbe093ce6548bdc4"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) r3 = socket$inet6(0xa, 0x0, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x80, 0x58, {0x0, 0xea60}, {r4, r5/1000+60000}, {0x1, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x1, 0x0, 0x1}, 0xe, 0x0, 0x0, 0x0, "13369fbe28d52a54ab1074bfbcaecf22190ceb8d8315ea6a9952cfe15c0d8521a11d9919dd608d6d4816460c2bd1bc184844826cdf8e20fc73ba3e9fb2315434"}}, 0x80}}, 0x10) (async) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r3, r6, &(0x7f0000000240)=0x208, 0x9) (async) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r7, @ANYBLOB="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", @ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) (async) read$char_usb(r6, &(0x7f0000000580)=""/4096, 0x1000) 07:41:12 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockname$packet(r1, &(0x7f0000000100), &(0x7f0000000000)=0x70) 07:41:12 executing program 5: socket$unix(0x1, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc020}, 0x8000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) 07:41:12 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 60) 07:41:12 executing program 0: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) syz_clone(0x21084000, &(0x7f0000000000)="ce8ab7963b4bfdec119dcb8f351388990a0f1d17da5bb9b5eac0b7a086f1afd43fe386e078d2b6ca0db45ff77e588000f95c3a4e2647c8421a96bebf9110ad1d36b831646654fb4451e7aeb8cd", 0x4d, &(0x7f00000190c0), &(0x7f0000019100), &(0x7f0000019140)="9c98c7955afcbdea32a52e786406a9b3052c99b1cd5fb2428f49bb15deff3441b42351d471b4b99c70691d5ab7e27418e6f9d034c4c2f59e7ca3afc09b0b20fc9af6dc79bd86c53dcf0cd72b056134820847ede41f8ec544933f371dc035dcff6c807abf124a7df9cf1733fdfca907f7e4b618cde50841c020c2dc5dec5aec8fb3b2789f4127ceff4b") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000019240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r2, @ANYBLOB="42c19a9749be81878fbd0a0ad2d6e33dba1dc4e261e811bccf84815e02958400c821b10067dc03e0e30f31aa8871552d5da323f0886f2006750a280520215184a4fa0f6bed91765cafed387561ede6bacde1090000006b619999bab2461794ca5a08a8c6b1e6a392e6abc03694322ce0748097d0dd06f1bab55acfe60974770f0e321ff5755b5e86a5c6aab97985847a1c3b7e47e68d323100c8d0d3578d0abd98a4ebb40f4f64a913795b4e20bcfe953a712eeec3ded82b768a0227c53fe941ff5c0021654733f6ef9f058a779298bee6"], 0x3c}}, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000019200)='net/ip6_mr_cache\x00') r4 = gettid() timer_create(0x6, &(0x7f0000000080)={0x0, 0x22, 0x3, @tid=r4}, &(0x7f0000019380)) read$char_usb(r3, &(0x7f00000000c0)=""/102400, 0x19000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) syz_clone(0x21084000, &(0x7f0000000000)="ce8ab7963b4bfdec119dcb8f351388990a0f1d17da5bb9b5eac0b7a086f1afd43fe386e078d2b6ca0db45ff77e588000f95c3a4e2647c8421a96bebf9110ad1d36b831646654fb4451e7aeb8cd", 0x4d, &(0x7f00000190c0), &(0x7f0000019100), &(0x7f0000019140)="9c98c7955afcbdea32a52e786406a9b3052c99b1cd5fb2428f49bb15deff3441b42351d471b4b99c70691d5ab7e27418e6f9d034c4c2f59e7ca3afc09b0b20fc9af6dc79bd86c53dcf0cd72b056134820847ede41f8ec544933f371dc035dcff6c807abf124a7df9cf1733fdfca907f7e4b618cde50841c020c2dc5dec5aec8fb3b2789f4127ceff4b") (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) gettid() (async) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000019240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r2, @ANYBLOB="42c19a9749be81878fbd0a0ad2d6e33dba1dc4e261e811bccf84815e02958400c821b10067dc03e0e30f31aa8871552d5da323f0886f2006750a280520215184a4fa0f6bed91765cafed387561ede6bacde1090000006b619999bab2461794ca5a08a8c6b1e6a392e6abc03694322ce0748097d0dd06f1bab55acfe60974770f0e321ff5755b5e86a5c6aab97985847a1c3b7e47e68d323100c8d0d3578d0abd98a4ebb40f4f64a913795b4e20bcfe953a712eeec3ded82b768a0227c53fe941ff5c0021654733f6ef9f058a779298bee6"], 0x3c}}, 0x0) (async) syz_open_procfs(r2, &(0x7f0000019200)='net/ip6_mr_cache\x00') (async) gettid() (async) timer_create(0x6, &(0x7f0000000080)={0x0, 0x22, 0x3, @tid=r4}, &(0x7f0000019380)) (async) read$char_usb(r3, &(0x7f00000000c0)=""/102400, 0x19000) (async) 07:41:12 executing program 4: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x20, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='%({-+\x00') r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r1, &(0x7f0000019180)=""/102395, 0x18ffb) [ 2428.411795][T16925] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2428.440239][T16923] FAULT_INJECTION: forcing a failure. [ 2428.440239][T16923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2428.453798][T16923] CPU: 0 PID: 16923 Comm: syz-executor.1 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2428.466247][T16923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2428.476304][T16923] Call Trace: [ 2428.479640][T16923] [ 2428.482568][T16923] dump_stack_lvl+0xd6/0x122 [ 2428.487209][T16923] dump_stack+0x11/0x12 [ 2428.491410][T16923] should_fail+0x242/0x250 [ 2428.495906][T16923] should_fail_usercopy+0x16/0x20 [ 2428.501002][T16923] _copy_to_user+0x1a/0x90 [ 2428.505495][T16923] rng_dev_read+0x2bd/0x630 [ 2428.510125][T16923] ? devm_hwrng_match+0x50/0x50 [ 2428.515001][T16923] vfs_read+0x198/0x560 [ 2428.519177][T16923] ? ksys_read+0x60/0x1a0 [ 2428.523584][T16923] ksys_read+0xe8/0x1a0 [ 2428.527807][T16923] __x64_sys_read+0x3e/0x50 [ 2428.532328][T16923] do_syscall_64+0x2b/0x70 [ 2428.536779][T16923] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2428.542709][T16923] RIP: 0033:0x7f8359bbc279 [ 2428.547137][T16923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2428.566834][T16923] RSP: 002b:00007f8359332168 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2428.575251][T16923] RAX: ffffffffffffffda RBX: 00007f8359ccef80 RCX: 00007f8359bbc279 [ 2428.585286][T16923] RDX: 0000000000018ffb RSI: 0000000020019180 RDI: 0000000000000006 [ 2428.593340][T16923] RBP: 00007f83593321d0 R08: 0000000000000000 R09: 0000000000000000 [ 2428.601324][T16923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2428.609303][T16923] R13: 00007fffb7c62e6f R14: 00007f8359332300 R15: 0000000000022000 [ 2428.617357][T16923] 07:41:13 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r3, &(0x7f0000019180)=""/102395, 0x18ffb) (fail_nth: 61) [ 2428.653393][T16925] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2428.712938][T16925] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2428.741824][T16947] ================================================================== [ 2428.749914][T16947] BUG: KCSAN: data-race in random_recv_done / virtio_read [ 2428.757027][T16947] [ 2428.759344][T16947] write to 0xffff8881018766cc of 4 bytes by interrupt on cpu 1: [ 2428.766978][T16947] random_recv_done+0x58/0x80 [ 2428.771659][T16947] vring_interrupt+0x14c/0x170 [ 2428.776428][T16947] __handle_irq_event_percpu+0x92/0x400 [ 2428.781977][T16947] handle_irq_event+0x60/0xf0 [ 2428.786655][T16947] handle_edge_irq+0x17e/0x5a0 [ 2428.791425][T16947] __common_interrupt+0x60/0x100 [ 2428.796393][T16947] common_interrupt+0x9a/0xc0 [ 2428.801070][T16947] asm_common_interrupt+0x22/0x40 [ 2428.806101][T16947] crng_make_state+0x21d/0x490 [ 2428.810874][T16947] _get_random_bytes+0x95/0x1b0 [ 2428.815730][T16947] get_random_bytes+0x19/0x20 [ 2428.820413][T16947] nsim_dev_trap_report_work+0x23c/0x5b0 [ 2428.826053][T16947] process_one_work+0x3d3/0x720 [ 2428.830910][T16947] worker_thread+0x618/0xa70 [ 2428.835512][T16947] kthread+0x1a9/0x1e0 [ 2428.839580][T16947] ret_from_fork+0x1f/0x30 [ 2428.843999][T16947] [ 2428.846749][T16947] write to 0xffff8881018766cc of 4 bytes by task 16947 on cpu 0: [ 2428.854492][T16947] virtio_read+0x190/0x430 [ 2428.858932][T16947] rng_dev_read+0x1b4/0x630 [ 2428.863482][T16947] vfs_read+0x198/0x560 [ 2428.867665][T16947] ksys_read+0xe8/0x1a0 [ 2428.871823][T16947] __x64_sys_read+0x3e/0x50 [ 2428.876343][T16947] do_syscall_64+0x2b/0x70 [ 2428.880764][T16947] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2428.886662][T16947] [ 2428.888982][T16947] value changed: 0x00000040 -> 0x00000000 [ 2428.894694][T16947] [ 2428.897011][T16947] Reported by Kernel Concurrency Sanitizer on: 07:41:13 executing program 5: socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc020}, 0x8000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) [ 2428.903240][T16947] CPU: 0 PID: 16947 Comm: syz-executor.4 Tainted: G W 6.0.0-rc4-syzkaller-00055-g53e99dcff61e-dirty #0 [ 2428.915653][T16947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 2428.925704][T16947] ================================================================== [ 2428.945178][T16925] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 07:41:13 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockname$packet(r1, &(0x7f0000000100), &(0x7f0000000000)=0x70) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) getsockname$packet(r1, &(0x7f0000000100), &(0x7f0000000000)=0x70) (async) 07:41:13 executing program 0: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) syz_clone(0x21084000, &(0x7f0000000000)="ce8ab7963b4bfdec119dcb8f351388990a0f1d17da5bb9b5eac0b7a086f1afd43fe386e078d2b6ca0db45ff77e588000f95c3a4e2647c8421a96bebf9110ad1d36b831646654fb4451e7aeb8cd", 0x4d, &(0x7f00000190c0), &(0x7f0000019100), &(0x7f0000019140)="9c98c7955afcbdea32a52e786406a9b3052c99b1cd5fb2428f49bb15deff3441b42351d471b4b99c70691d5ab7e27418e6f9d034c4c2f59e7ca3afc09b0b20fc9af6dc79bd86c53dcf0cd72b056134820847ede41f8ec544933f371dc035dcff6c807abf124a7df9cf1733fdfca907f7e4b618cde50841c020c2dc5dec5aec8fb3b2789f4127ceff4b") r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000019240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r2, @ANYBLOB="42c19a9749be81878fbd0a0ad2d6e33dba1dc4e261e811bccf84815e02958400c821b10067dc03e0e30f31aa8871552d5da323f0886f2006750a280520215184a4fa0f6bed91765cafed387561ede6bacde1090000006b619999bab2461794ca5a08a8c6b1e6a392e6abc03694322ce0748097d0dd06f1bab55acfe60974770f0e321ff5755b5e86a5c6aab97985847a1c3b7e47e68d323100c8d0d3578d0abd98a4ebb40f4f64a913795b4e20bcfe953a712eeec3ded82b768a0227c53fe941ff5c0021654733f6ef9f058a779298bee6"], 0x3c}}, 0x0) (async) r3 = syz_open_procfs(r2, &(0x7f0000019200)='net/ip6_mr_cache\x00') (async) r4 = gettid() timer_create(0x6, &(0x7f0000000080)={0x0, 0x22, 0x3, @tid=r4}, &(0x7f0000019380)) (async) read$char_usb(r3, &(0x7f00000000c0)=""/102400, 0x19000) [ 2429.008461][T16925] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2429.019584][T16925] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2429.033817][T16925] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2429.046077][T16925] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 07:41:13 executing program 5: socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getmulticast={0x14, 0x3a, 0x200, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc020}, 0x8000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$char_usb(r0, &(0x7f0000019180)=""/102395, 0x18ffb) [ 2429.087923][T16955] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2429.161465][T16955] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2429.261408][T16955] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2429.322538][T16955] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2434.196085][T16955] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2434.206803][T16955] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2434.217497][T16955] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2434.228034][T16955] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0